registry / @overdeck/desktop / 0.45.8

@overdeck/desktop@0.45.8

Overdeck Command Deck — AI agent monitoring desktop app

AI Security Review

scanned 8h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious install-time behavior. At runtime, spawning an Overdeck agent can auto-configure a Claude PostToolUse hook; configured model support may copy Codex OAuth credentials into an Overdeck-owned sidecar and download/start CLIProxy.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User launches the desktop app and starts agents or configured model-routing features.

Impact

Changes a foreign Claude configuration and retains copied OAuth credentials in an Overdeck-owned directory; sidecar download is a supply-chain risk.

Mechanism

Runtime agent-hook setup, credential bridging, and sidecar binary installation.

Rationale

The scanner's install-time and exfiltration conclusion is not supported: the only npm postinstall is Electron native-module rebuild. Runtime behavior has concrete first-party agent-extension and credential-copying risk, so warn rather than block.

Evidence

package.jsonbin/overdeck.mjsdist-electron/main.jsserver/agents-DHvsjsuP.jsserver/cliproxy-J-_1iIXe.jsserver/server.js~/.claude/settings.json~/.codex/auth.json~/.overdeck/cliproxy/auth/codex-primary.json~/.overdeck/bin/cliproxy

Network endpoints1

github.com/router-for-me/CLIProxyAPI/releases/download/${CLIPROXY_RELEASE_VERSION}/${asset.archive}

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Runtime agent spawn runs `pan admin hooks install` when `~/.claude/settings.json` lacks its heartbeat hook.
Runtime CLIProxy bridges `~/.codex/auth.json` OAuth tokens into `~/.overdeck/cliproxy/auth/codex-primary.json`.
CLIProxy runtime fetches and installs a GitHub-release binary, then starts it detached.

Evidence against

`postinstall` only invokes `electron-rebuild` and exits successfully.
No `preinstall` or `install` hook mutates agent settings or credentials.
Desktop server is spawned locally on a random `127.0.0.1` port with a generated auth token.
Credential bridge is reached while preparing configured OpenAI/Google model use, not npm installation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

NoLicense

scanned 757 file(s), 23.9 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.cloudflare.com, api.github.com, api.hume.ai, api.kimi.com, api.linear.app, api.machines.dev, api.minimax.io, api.moonshot.ai, api.openai.com, api.vercel.com, api.voyageai.com, api.x.ai, api.z.ai, app.excalidraw.com, chevrotain.io, dashscope-intl.aliyuncs.com, developer.mozilla.org, discord.gg, docs.anthropic.com, docs.excalidraw.com, docs.expo.dev, docs.github.com, embed.reddit.com, en.wikipedia.org, encoding.spec.whatwg.org, esm.sh, example.com, excalidraw-room-persistence.firebaseio.com, fetch.spec.whatwg.org, giphy.com, gist.github.com, github.com, inference-api.nousresearch.com, infra.spec.whatwg.org, jimmy.warting.se, json.excalidraw.com, langium.org, libraries.excalidraw.com, mermaid.js.org, mimesniff.spec.whatwg.org, nodejs.org, ollama.com, openrouter.ai, oss-ai.excalidraw.com, oss-collab.excalidraw.com, platform.claude.com, platform.moonshot.ai, platform.twitter.com

Oversized source lightweight scan

server/public/assets/index-rQPa7qlV.js3.61 MB file, sampled 256 KB

NetworkChildProcessHighEntropyStringsMinifiedUrlStringsProtestwaregithub.comwww.w3.org

server/server.js2.16 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsUrlStringsapi.github.comapi.openai.comgithub.comopenrouter.ai

server/src-BswtmojL.js5.71 MB file, sampled 256 KB

NetworkChildProcessEnvironmentVarsCryptoHighEntropyStringsUrlStringsgithub.com

Source & flagged code

10 flagged

package.jsonView file

Lines 20-60json

20 "server",

21 "resources",

22 "drizzle"

23 ],

24 "engines": {

25 "node": ">=22.0.0"

26 },

27 "scripts": {

28 "dev": "bun run --parallel dev:bundle dev:electron",

29 "dev:bundle": "tsdown --watch",

30 "dev:electron": "bun run scripts/dev-electron.mjs",

31 "build": "tsdown",

32 "build:publish": "node scripts/build-for-publish.mjs",

33 "prepublishOnly": "node scripts/build-for-publish.mjs",

34 "start": "bun run scripts/start-electron.mjs",

35 "typecheck": "tsc --noEmit",

36 "test": "vitest run --configLoader runner --passWithNoTests",

37 "dist:linux": "node scripts/prepare-server-resources.mjs && electron-builder --linux AppImage --publish never",

38 "dist:mac": "node scripts/prepare-server-resources.mjs && electron-builder --mac dmg --arm64 --publish never",

39 "dist:win": "node scripts/prepare-server-resources.mjs && electron-builder --win nsis --publish never",

40 "postinstall": "electron-rebuild -f -w node-pty 2>/dev/null; exit 0"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 },

42 "dependencies": {

43 "conf": "^13.0.0",

44 "electron-updater": "^6.8.3",

45 "electron": "40.6.0"

46 },

47 "devDependencies": {

48 "@electron/notarize": "^2.5.0",

49 "@overdeck/contracts": "workspace:*",

50 "@types/node": "^22.0.0",

51 "electron-builder": "^25.1.8",

52 "tsdown": "^0.21.7",

53 "typescript": "^5.7.3",

54 "vitest": "^4.0.18",

55 "@electron/rebuild": "^4.2.0"

56 },

57 "build": {

58 "appId": "com.overdeck.app",

59 "productName": "Overdeck",

60 "publish": {

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView file

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Secret Pattern

AWS access key ID in server/public/assets/chunk-EIO257PC-DnXo63uH.js

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

dist-electron/preload.jsView file

Lines 1-21javascript

1let electron = require("electron");

2//#region src/preload.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-electron/preload.jsView on unpkg · L1

3/**

4* Preload script for the Overdeck Electron renderer.

6* Exposes `window.overdeckBridge` via contextBridge.exposeInMainWorld.

7* The renderer uses this bridge to communicate with the main process over IPC.

server/agents-DHvsjsuP.jsView file

Lines 28-68javascript

28import { a as init_stack_health, i as getWorkspaceStackHealth } from "./stack-health-BJVh1TCg.js";

29import { a as createActiveSlice, c as groupItemsByWave, s as getDispatchableItems, u as init_dag } from "./dag-jH8ZkewR.js";

30import { n as init_bd_process_lock, t as BdTransientFailure } from "./bd-process-lock-CJkoG7hW.js";

bin/overdeck.mjsView file

Lines 38-78javascript

38}

40/** Verify the dashboard server bundle exists inside the package. */

41function checkServerBundle() {

42 const serverPath = join(packageDir, "server", "server.js");

43 if (!existsSync(serverPath)) {

44 console.error

resources/icon.icoView file

•path = resources/icon.ico kind = high_entropy_blob sizeBytes = 29519 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

resources/icon.icoView on unpkg

server/src-BswtmojL.jsView file

•path = server/src-BswtmojL.js kind = oversized_source_file sizeBytes = 5983292 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

server/src-BswtmojL.jsView on unpkg

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView file

Lines 1-7javascript

1var e={VITE_APP_BACKEND_V2_GET_URL:`https://json.excalidraw.com/api/v2/`,VITE_APP_BACKEND_V2_POST_URL:`https://json.excalidraw.com/api/v2/post/`,VITE_APP_LIBRARY_URL:`https://libraries.excalidraw.com`,VITE_APP_LIBRARY_BACKEND:`https://us-central1-excalidraw-room-persistence.cloudfunctions.net/libraries`,VITE_APP_PLUS_LP:`https://plus.excalidraw.com`,VITE_APP_PLUS_APP:`https://app.excalidraw.com`,VITE_APP_AI_BACKEND:`https://oss-ai.excalidraw.com`,VITE_APP_WS_SERVER_URL:`https://oss-collab.excalidraw.com`,VITE_APP_FIREBASE_CONFIG:`{"apiKey":"AIzaSyAd15pYlMci_xIp9ko6wkEsDzAAA0Dn0RU","authDomain" ...

High

Secret Pattern

Google API key in server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.js

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView on unpkg · L1

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = electron-rebuild -f -w node-pty 2>/dev/null; exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = electron-rebuild -f -w node-pty 2>/dev/null; exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView file

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Secret Pattern

AWS access key ID in server/public/assets/chunk-EIO257PC-DnXo63uH.js

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

dist-electron/preload.jsView file

1let electron = require("electron"); L2: //#region src/preload.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-electron/preload.jsView on unpkg · L1

server/agents-DHvsjsuP.jsView file

48import { platform as platform$2 } from "process"; L49: import { exec, execFile } from "node:child_process"; L50: import { promisify } from "node:util"; ... L55: import { layer } from "@effect/platform-node/NodeServices"; L56: import { request } from "node:http"; L57: //#region ../../lib/cost-parsers/ohmypi-parser.ts ... L153: try { L154: parsed = JSON.parse(line); L155: } catch { ... L396: init_internal_token(); L397: DASHBOARD_URL = process.env["OVERDECK_DASHBOARD_URL"] || "http://127.0.0.1:3011"; L398: DEFAULT_TIMEOUT_MS = 1500;

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

server/agents-DHvsjsuP.jsView on unpkg · L48

bin/overdeck.mjsView file

58package = @overdeck/desktop; repositoryIdentity = overdeck; dependency = electron L58: // The `electron` package exports its binary path as its module value. L59: return require("electron"); L60: } catch {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/overdeck.mjsView on unpkg · L58

resources/icon.icoView file

•path = resources/icon.ico kind = high_entropy_blob sizeBytes = 29519 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

resources/icon.icoView on unpkg

server/src-BswtmojL.jsView file

•path = server/src-BswtmojL.js kind = oversized_source_file sizeBytes = 5983292 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

server/src-BswtmojL.jsView on unpkg

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = var e={V...AZZX

High

Secret Pattern

Google API key in server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.js

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView on unpkg · L1

Findings

3 Critical5 High6 Medium8 Low

CriticalCritical Secretserver/public/assets/chunk-EIO257PC-DnXo63uH.js

CriticalCredential Exfiltrationserver/agents-DHvsjsuP.js

CriticalSecret Patternserver/public/assets/chunk-EIO257PC-DnXo63uH.js

HighInstall Time Lifecycle Scriptspackage.json

HighCopied Package Dependency Bridgebin/overdeck.mjs

HighShips High Entropy Blobresources/icon.ico

HighOversized Source Fileserver/src-BswtmojL.js

HighSecret Patternserver/public/assets/chunk-ZUYEQ4TG-B82Qm37l.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist-electron/preload.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

10 flagged

package.jsonView file

Lines 20-60json

20 "server",

21 "resources",

22 "drizzle"

23 ],

24 "engines": {

25 "node": ">=22.0.0"

26 },

27 "scripts": {

28 "dev": "bun run --parallel dev:bundle dev:electron",

29 "dev:bundle": "tsdown --watch",

30 "dev:electron": "bun run scripts/dev-electron.mjs",

31 "build": "tsdown",

32 "build:publish": "node scripts/build-for-publish.mjs",

33 "prepublishOnly": "node scripts/build-for-publish.mjs",

34 "start": "bun run scripts/start-electron.mjs",

35 "typecheck": "tsc --noEmit",

36 "test": "vitest run --configLoader runner --passWithNoTests",

37 "dist:linux": "node scripts/prepare-server-resources.mjs && electron-builder --linux AppImage --publish never",

38 "dist:mac": "node scripts/prepare-server-resources.mjs && electron-builder --mac dmg --arm64 --publish never",

39 "dist:win": "node scripts/prepare-server-resources.mjs && electron-builder --win nsis --publish never",

40 "postinstall": "electron-rebuild -f -w node-pty 2>/dev/null; exit 0"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 },

42 "dependencies": {

43 "conf": "^13.0.0",

44 "electron-updater": "^6.8.3",

45 "electron": "40.6.0"

46 },

47 "devDependencies": {

48 "@electron/notarize": "^2.5.0",

49 "@overdeck/contracts": "workspace:*",

50 "@types/node": "^22.0.0",

51 "electron-builder": "^25.1.8",

52 "tsdown": "^0.21.7",

53 "typescript": "^5.7.3",

54 "vitest": "^4.0.18",

55 "@electron/rebuild": "^4.2.0"

56 },

57 "build": {

58 "appId": "com.overdeck.app",

59 "productName": "Overdeck",

60 "publish": {

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView file

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

22patternName = aws_access_key severity = critical line = 22 matchedText = `,m.push... t};

Critical

Secret Pattern

AWS access key ID in server/public/assets/chunk-EIO257PC-DnXo63uH.js

server/public/assets/chunk-EIO257PC-DnXo63uH.jsView on unpkg · L22

dist-electron/preload.jsView file

Lines 1-21javascript

1let electron = require("electron");

2//#region src/preload.ts

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-electron/preload.jsView on unpkg · L1

3/**

4* Preload script for the Overdeck Electron renderer.

6* Exposes `window.overdeckBridge` via contextBridge.exposeInMainWorld.

7* The renderer uses this bridge to communicate with the main process over IPC.

server/agents-DHvsjsuP.jsView file

Lines 28-68javascript

28import { a as init_stack_health, i as getWorkspaceStackHealth } from "./stack-health-BJVh1TCg.js";

29import { a as createActiveSlice, c as groupItemsByWave, s as getDispatchableItems, u as init_dag } from "./dag-jH8ZkewR.js";

30import { n as init_bd_process_lock, t as BdTransientFailure } from "./bd-process-lock-CJkoG7hW.js";

bin/overdeck.mjsView file

Lines 38-78javascript

38}

40/** Verify the dashboard server bundle exists inside the package. */

41function checkServerBundle() {

42 const serverPath = join(packageDir, "server", "server.js");

43 if (!existsSync(serverPath)) {

44 console.error

resources/icon.icoView file

•path = resources/icon.ico kind = high_entropy_blob sizeBytes = 29519 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

resources/icon.icoView on unpkg

server/src-BswtmojL.jsView file

•path = server/src-BswtmojL.js kind = oversized_source_file sizeBytes = 5983292 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

server/src-BswtmojL.jsView on unpkg

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView file

Lines 1-7javascript

High

Secret Pattern

Google API key in server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.js

server/public/assets/chunk-ZUYEQ4TG-B82Qm37l.jsView on unpkg · L1