registry / @panguard-ai/panguard-guard / 1.8.8

@panguard-ai/panguard-guard@1.8.8

AI real-time endpoint monitoring and auto-response / AI 即時端點監控與自動回應

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 94 file(s), 982 KB of source, external domains: 127.0.0.1, app.panguard.ai, atr.panguard.ai, fonts.googleapis.com, fonts.gstatic.com, integrate.api.nvidia.com, json.schemastore.org, nodejs.org, panguard.ai, registry.npmjs.org, tc.panguard.ai, www.apple.com

Source & flagged code

4 flagged

dist/daemon/index.jsView file

Lines 1-39javascript

1/**

2 * Daemon / Service Management

3 * Daemon / 服務管理

4 *

5 * Cross-platform daemon support:

6 * - macOS: launchd plist

7 * - Linux: systemd unit file

8 * - Windows: sc.exe service

9 * Includes PID file management and watchdog functionality.

10 *

11 * 跨平台 daemon 支援：

12 * - macOS: launchd plist

13 * - Linux: systemd unit 檔案

14 * - Windows: sc.exe 服務

15 * 包含 PID 檔案管理和看門狗功能。

16 *

17 * @module @panguard-ai/panguard-guard/daemon

18 */

19import { writeFileSync, readFileSync, unlinkSync, existsSync, mkdirSync, lstatSync } from 'node:fs';

20import { execFile } from 'node:child_process';

21import { platform, homedir } from 'node:os';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/daemon/index.jsView on unpkg · L19

22import { join, dirname } from 'node:path';

23import { createLogger } from '@panguard-ai/core';

24const logger = createLogger('panguard-guard:daemon');

25/** Service name constants / 服務名稱常數 */

26const SERVICE_NAME = 'com.panguard.panguard-guard';

27const SERVICE_DISPLAY_NAME = 'PanguardGuard Security Monitor';

28/**

29 * PID file management / PID 檔案管理

30 */

31export class PidFile {

32 pidPath;

33 constructor(dataDir) {

34 this.pidPath = join(dataDir, 'panguard-guard.pid');

35 }

36 /** Write current PID to file / 將目前 PID 寫入檔案 */

37 write() {

38 mkdirSync(dirname(this.pidPath), { recursive: true, mode: 0o700 });

39 // Reject symlinks to prevent symlink-following file overwrite attacks

dist/dashboard/index.jsView file

Lines 1-24javascript

1/**

2 * Web Dashboard - Real-time monitoring interface

3 * Web Dashboard - 即時監控介面

4 *

5 * Provides an HTTP server with WebSocket push for:

6 * - System status overview / 系統狀態概覽

7 * - Event timeline / 事件時間軸

8 * - Threat map visualization / 威脅地圖視覺化

9 * - Configuration management / 配置管理

10 *

11 * Uses only Node.js built-in http module with native WebSocket handshake.

12 *

dist/llm-detect.jsView file

Lines 1-41javascript

1/**

2 * llm-detect.ts — Opt-in detection of an LLM provider for the semantic (L2) layer.

3 *

4 * The semantic layer is OPT-IN. It activates only when the user has explicitly

5 * provided an LLM, via any of:

6 * - a configured provider (`pga config llm`, stored encrypted)

7 * - PANGUARD_LLM_ENDPOINT — any OpenAI-compatible endpoint. One knob for the

8 * whole local-AI ecosystem: NVIDIA NIM, vLLM, LM Studio, llama.cpp, DGX

9 * Spark, LocalAI, Groq, Together, OpenRouter, Azure OpenAI, …

10 * - NVIDIA_API_KEY — hosted NVIDIA NIM (OpenAI-compatible)

11 * - ANTHROPIC_API_KEY / OPENAI_API_KEY — cloud

Source & flagged code

4 flagged · loading source

dist/daemon/index.jsView file

19import { writeFileSync, readFileSync, unlinkSync, existsSync, mkdirSync, lstatSync } from 'node:fs'; L20: import { execFile } from 'node:child_process'; L21: import { platform, homedir } from 'node:os'; ... L196: async function installLaunchd(execArgv, dataDir) { L197: const plistPath = join(homedir(), 'Library', 'LaunchAgents', `${SERVICE_NAME}.plist`); L198: // execArgv is already split into discrete parts (e.g. [nodePath, scriptPath]). ... L225: writeFileSync(plistPath, plist, 'utf-8'); L226: await execFileAsync('/bin/launchctl', ['load', plistPath]); L227: logger.info(`launchd service installed at ${plistPath} / launchd 服務已安裝`); ... L257: NoNewPrivileges=true L258: PrivateTmp=true L259: ExecStart=${[...execArgv, 'start', '--data-dir', dataDir].map(systemdQuote).join(' ')}

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/daemon/index.jsView on unpkg · L19

dist/dashboard/index.jsView file

4* L5: * Provides an HTTP server with WebSocket push for: L6: * - System status overview / 系統狀態概覽 ... L21: import { homedir } from 'node:os'; L22: import { lookup } from 'node:dns/promises'; L23: import { WebSocketServer } from 'ws'; ... L32: import { AuditChain, getAuditKey, anonymizeActorForExport, } from '../audit/index.js'; L33: // ESM-compatible __dirname resolution. import.meta.dirname is Node 20.11+ L34: // but the project's engines field already requires >=20, so fall back to ... L37: dirname(fileURLToPath(import.meta.url)); L38: // Package version, read live from package.json (same pattern as src/index.ts L39: // and src/cli/index.ts) so SARIF/evidence-pack exports never carry a stale

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/dashboard/index.jsView on unpkg · L4

•matchType = previous_version_dangerous_delta matchedPackage = @panguard-ai/panguard-guard@1.8.5 matchedIdentity = npm:[redacted]:1.8.5 similarity = 0.978 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/dashboard/index.jsView on unpkg

dist/llm-detect.jsView file

21package = @panguard-ai/panguard-guard; repositoryIdentity = panguard-ai; dependency = @panguard-ai/core L21: import { join } from 'node:path'; L22: import { createLogger } from '@panguard-ai/core'; L23: const logger = createLogger('panguard-guard:llm-detect');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/llm-detect.jsView on unpkg · L21

Findings

3 High4 Medium4 Low

HighCloud Metadata Accessdist/dashboard/index.js

HighCopied Package Dependency Bridgedist/llm-detect.js

HighPrevious Version Dangerous Deltadist/dashboard/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/daemon/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/daemon/index.jsView file

Lines 1-39javascript

1/**

2 * Daemon / Service Management

3 * Daemon / 服務管理

4 *

5 * Cross-platform daemon support:

6 * - macOS: launchd plist

7 * - Linux: systemd unit file

8 * - Windows: sc.exe service

9 * Includes PID file management and watchdog functionality.

10 *

11 * 跨平台 daemon 支援：

12 * - macOS: launchd plist

13 * - Linux: systemd unit 檔案

14 * - Windows: sc.exe 服務

15 * 包含 PID 檔案管理和看門狗功能。

16 *

17 * @module @panguard-ai/panguard-guard/daemon

18 */

19import { writeFileSync, readFileSync, unlinkSync, existsSync, mkdirSync, lstatSync } from 'node:fs';

20import { execFile } from 'node:child_process';

21import { platform, homedir } from 'node:os';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/daemon/index.jsView on unpkg · L19

22import { join, dirname } from 'node:path';

23import { createLogger } from '@panguard-ai/core';

24const logger = createLogger('panguard-guard:daemon');

25/** Service name constants / 服務名稱常數 */

26const SERVICE_NAME = 'com.panguard.panguard-guard';

27const SERVICE_DISPLAY_NAME = 'PanguardGuard Security Monitor';

28/**

29 * PID file management / PID 檔案管理

30 */

31export class PidFile {

32 pidPath;

33 constructor(dataDir) {

34 this.pidPath = join(dataDir, 'panguard-guard.pid');

35 }

36 /** Write current PID to file / 將目前 PID 寫入檔案 */

37 write() {

38 mkdirSync(dirname(this.pidPath), { recursive: true, mode: 0o700 });

39 // Reject symlinks to prevent symlink-following file overwrite attacks

dist/dashboard/index.jsView file

Lines 1-24javascript

1/**

2 * Web Dashboard - Real-time monitoring interface

3 * Web Dashboard - 即時監控介面

4 *

5 * Provides an HTTP server with WebSocket push for:

6 * - System status overview / 系統狀態概覽

7 * - Event timeline / 事件時間軸

8 * - Threat map visualization / 威脅地圖視覺化

9 * - Configuration management / 配置管理

10 *

11 * Uses only Node.js built-in http module with native WebSocket handshake.

12 *

dist/llm-detect.jsView file

Lines 1-41javascript

1/**

2 * llm-detect.ts — Opt-in detection of an LLM provider for the semantic (L2) layer.

3 *

4 * The semantic layer is OPT-IN. It activates only when the user has explicitly

5 * provided an LLM, via any of:

6 * - a configured provider (`pga config llm`, stored encrypted)

7 * - PANGUARD_LLM_ENDPOINT — any OpenAI-compatible endpoint. One knob for the

8 * whole local-AI ecosystem: NVIDIA NIM, vLLM, LM Studio, llama.cpp, DGX

9 * Spark, LocalAI, Groq, Together, OpenRouter, Azure OpenAI, …

10 * - NVIDIA_API_KEY — hosted NVIDIA NIM (OpenAI-compatible)

11 * - ANTHROPIC_API_KEY / OPENAI_API_KEY — cloud