registry / @p4code/cli / 0.5.7
@p4code/cli@0.5.7
⚠ Under reviewP4 Code coding agent server and command-line client
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 0.0% confidence. No malicious behavior was detected; 29 low-signal pattern(s) were surfaced and cleared.
Static reason
Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Oversized source lightweight scan
dist/bin.mjs6.17 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsUrlStringscli.github.comgitlab.comregistry.npmjs.org
dist/client/assets/index-Cj8u-oxt.js4.14 MB file, sampled 256 KB
HighEntropyStringsMinified
Source & flagged code
23 flagged · loading sourcedist/client/assets/worker-CTbBhd8-.jsView file
151?|[
L152: \v\f
\u2028\u2029])`),t));else if(c===`posix`)if(!i&&(u===`graph`||u===`print`)){if(r===`strict`)throw Error(`POSIX class "${u}" requires min target ES2024 or non-strict accuracy`)...
L153: `))&&(e=e.trim()),(!n.newlineIsToken||!t.includes(`
High
Child Process
Package source references child process execution.
dist/client/assets/worker-CTbBhd8-.jsView on unpkg · L151dist/bin.mjsView file
13import * as NodeOS from "node:os";
L14: import * as NodeNet from "node:net";
L15: import * as Data from "effect/Data";
...
L22: import { isAbsolute } from "node:path";
L23: import * as NodeChildProcess from "node:child_process";
L24: import { spawn } from "node:child_process";
...
L266: //#endregion
L267: //#region package.json
L268: var version$1 = "0.5.7";
...
L401: /**
L402: * Escapes a single argument for `cmd.exe` shell mode (`spawn(..., { shell: true })`
L403: * on Windows). Node joins the command and arguments with spaces and hands the
Critical
Sensitive Archive Exfiltration
Source archives sensitive local configuration and publishes encoded chunks through an authenticated package-registry request.
dist/bin.mjsView on unpkg · L1313import * as NodeOS from "node:os";
L14: import * as NodeNet from "node:net";
L15: import * as Data from "effect/Data";
...
L22: import { isAbsolute } from "node:path";
L23: import * as NodeChildProcess from "node:child_process";
L24: import { spawn } from "node:child_process";
...
L266: //#endregion
L267: //#region package.json
L268: var version$1 = "0.5.7";
...
L401: /**
L402: * Escapes a single argument for `cmd.exe` shell mode (`spawn(..., { shell: true })`
L403: * on Windows). Node joins the command and arguments with spaces and hands the
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/bin.mjsView on unpkg · L1313Trigger-reachable chain: manifest.bin -> dist/bin.mjs
L13: import * as NodeOS from "node:os";
L14: import * as NodeNet from "node:net";
L15: import * as Data from "effect/Data";
...
L22: import { isAbsolute } from "node:path";
L23: import * as NodeChildProcess from "node:child_process";
L24: import { spawn } from "node:child_process";
...
L266: //#endregion
L267: //#region package.json
L268: var version$1 = "0.5.7";
...
L401: /**
L402: * Escapes a single argument for `cmd.exe` shell mode (`spawn(..., { shell: true })`
L403: * on Windows). Node joins the command and arguments with spaces and hands the
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/bin.mjsView on unpkg · L13•matchType = previous_version_dangerous_delta
matchedPackage = @p4code/cli@0.5.3
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.5.3
similarity = 0.983
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bin.mjsView on unpkg389const POSIX_PATH_DELIMITER = ":";
L390: const WINDOWS_SHELL_CANDIDATES = ["pwsh.exe", "powershell.exe"];
L391: function canExecuteFile(filePath) {
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bin.mjs:
import * as NodeReadline from "node:readline";
}).pipe(Effect.flatMap((encoded) => fs.writeFileString(cachePath, encoded)), Effect.ignore);
var EnvironmentAuthorizationError = class extends Schema$1.TaggedErrorClass()("EnvironmentAuthorizationError", {
baseUrl: Schema$1.String
authorization: Schema$1.optionalKey(Schema$1.String),
httpBaseUrl: TrimmedNonEmptyString,
wsBaseUrl: TrimmedNonEmptyString,
httpBaseUrl: Schema$1.NullOr(Schema$1.String),
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/bin.mjsView on unpkg13import * as NodeOS from "node:os";
L14: import * as NodeNet from "node:net";
L15: import * as Data from "effect/Data";
...
L22: import { isAbsolute } from "node:path";
L23: import * as NodeChildProcess from "node:child_process";
L24: import { spawn } from "node:child_process";
...
L266: //#endregion
L267: //#region package.json
L268: var version$1 = "0.5.7";
...
L401: /**
L402: * Escapes a single argument for `cmd.exe` shell mode (`spawn(..., { shell: true })`
L403: * on Windows). Node joins the command and arguments with spaces and hands the
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin.mjsView on unpkg · L1322import { isAbsolute } from "node:path";
L23: import * as NodeChildProcess from "node:child_process";
L24: import { spawn } from "node:child_process";
...
L1851: name: TrimmedNonEmptyString,
L1852: baseUrl: Schema$1.String
L1853: });
...
L47719: const dir = path.join(os.homedir(), '.p4', 'device', 'tools', name, version);
L47720: try { return file(path.join(dir, 'node_modules', name, entry)) && fs.readFileSync(path.join(dir, '.install-complete'), 'utf8').trim() === version; } catch { return false; }
L47721: };
High
Remote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/bin.mjsView on unpkg · L2213Trigger-reachable credential exfiltration chain: manifest.bin -> dist/bin.mjs
L13: import * as NodeOS from "node:os";
L14: import * as NodeNet from "node:net";
L15: import * as Data from "effect/Data";
...
L22: import { isAbsolute } from "node:path";
L23: import * as NodeChildProcess from "node:child_process";
L24: import { spawn } from "node:child_process";
...
L266: //#endregion
L267: //#region package.json
L268: var version$1 = "0.5.7";
...
L401: /**
L402: * Escapes a single argument for `cmd.exe` shell mode (`spawn(..., { shell: true })`
L403: * on Windows). Node joins the command and arguments with spaces and hands the
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/bin.mjsView on unpkg · L13•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 8
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/bin.mjsView on unpkg•path = dist/bin.mjs
kind = oversized_source_file
sizeBytes = 6468782
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/bin.mjsView on unpkg•path = dist/bin.mjs
kind = oversized_cli_entrypoint
sizeBytes = 6468782
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/bin.mjsView on unpkgdist/resource-monitor/darwin-x64/p4-resource-monitorView file
•path = dist/resource-monitor/darwin-x64/p4-resource-monitor
kind = native_binary
sizeBytes = 575344
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/resource-monitor/darwin-x64/p4-resource-monitorView on unpkgdist/NodePtyAdapter-BQAnH2v0.mjsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/NodePtyAdapter-BQAnH2v0.mjs
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/NodePtyAdapter-BQAnH2v0.mjsView on unpkgdist/BunPtyAdapter-CLDq7yr1.mjsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/BunPtyAdapter-CLDq7yr1.mjs
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/BunPtyAdapter-CLDq7yr1.mjsView on unpkgdist/client/assets/chunk-4I5QYGJK-CYvb6li-.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/client/assets/chunk-4I5QYGJK-CYvb6li-.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/chunk-4I5QYGJK-CYvb6li-.jsView on unpkgdist/client/assets/chunk-5RXB4S5H-BzE89W2t.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/client/assets/chunk-5RXB4S5H-BzE89W2t.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/chunk-5RXB4S5H-BzE89W2t.jsView on unpkgdist/client/assets/chunk-JQJVKLGR-oHxUxbQ4.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/client/assets/chunk-JQJVKLGR-oHxUxbQ4.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/chunk-JQJVKLGR-oHxUxbQ4.jsView on unpkgdist/client/assets/chunk-WRU74C26-C2Rb3ATV.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/client/assets/chunk-WRU74C26-C2Rb3ATV.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/chunk-WRU74C26-C2Rb3ATV.jsView on unpkgdist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.jsView on unpkgdist/client/assets/mdx-host-ykYobBl4.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = dist/client/assets/mdx-host-ykYobBl4.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/mdx-host-ykYobBl4.jsView on unpkgdist/client/assets/previewAssetResource-FVg-QUYZ.jsView file
•matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.12
matchedPath = [redacted]-CVDZ-YAw.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/previewAssetResource-FVg-QUYZ.jsView on unpkgFindings
4 Critical16 High6 Medium3 Low
CriticalSensitive Archive Exfiltrationdist/bin.mjs
CriticalCredential Exfiltrationdist/bin.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/bin.mjs
CriticalPrevious Version Dangerous Deltadist/bin.mjs
HighChild Processdist/client/assets/worker-CTbBhd8-.js
HighShelldist/bin.mjs
HighCredential Redirect Persistencedist/bin.mjs
HighCommand Output Exfiltrationdist/bin.mjs
HighRemote Agent Bridgedist/bin.mjs
HighTrigger Reachable Credential Exfiltrationdist/bin.mjs
HighSemantic Analysis Limiteddist/bin.mjs
HighKnown Malware Source Similaritydist/NodePtyAdapter-BQAnH2v0.mjs
HighKnown Malware Source Similaritydist/BunPtyAdapter-CLDq7yr1.mjs
HighKnown Malware Source Similaritydist/client/assets/chunk-4I5QYGJK-CYvb6li-.js
HighKnown Malware Source Similaritydist/client/assets/chunk-5RXB4S5H-BzE89W2t.js
HighKnown Malware Source Similaritydist/client/assets/chunk-JQJVKLGR-oHxUxbQ4.js
HighKnown Malware Source Similaritydist/client/assets/chunk-WRU74C26-C2Rb3ATV.js
HighKnown Malware Source Similaritydist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.js
HighKnown Malware Source Similaritydist/client/assets/mdx-host-ykYobBl4.js
HighKnown Malware Source Similaritydist/client/assets/previewAssetResource-FVg-QUYZ.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/resource-monitor/darwin-x64/p4-resource-monitor
MediumOversized Source Filedist/bin.mjs
MediumOversized Cli Entrypointdist/bin.mjs
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @p4code/cli@0.5.7.
See all versions of @p4code/cli for other recorded verdicts.
- Review the evidence and your use of @p4code/cli@0.5.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.