registry / @pasko70/pibo / 1.9.2

@pasko70/pibo@1.9.2

⚠ Under review

Minimal TypeScript wrapper around Pi Coding Agent.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 23 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

NoLicense

scanned 546 file(s), 8.07 MB of source, external domains: 0.0.0.0, 127.0.0.1, 4788.192.168.0.204.sslip.io, aka.ms, api.github.com, api.minimax.cn, api.minimax.io, api.openai.com, api.z.ai, astral.sh, auth.openai.com, chatgpt.com, code.visualstudio.com, dev.pibo.example.com, e.co, example.com, example.invalid, example.org, example.test, github.com, lexical.dev, mcp.deepwiki.com, pi.dev, pibo.example.com, radix-ui.com, react.dev, skills.sh, www.w3.org, your-domain.example

Oversized source lightweight scan

dist/apps/chat-ui/assets/index-BqD_bm7z.js2.10 MB file, sampled 256 KB

NetworkHighEntropyStringsMinifiedUrlStringsreact.devwww.w3.org

Source & flagged code

13 flagged

dist/tools/npm-runtime.jsView file

Lines 1-21javascript

1import { spawn } from 'node:child_process';

2import { existsSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/tools/npm-runtime.jsView on unpkg · L1

3import { mkdir, rm, writeFile } from 'node:fs/promises';

4import { homedir } from 'node:os';

5import { join } from 'node:path';

6import { ErrorCode, formatCliError } from '../cli-errors.js';

7import { detectDesktopEnv, getDesktopProcessEnv, hasDesktopDisplay, printDesktopEnvStatus, printLinuxVirtualDisplayHint, } from './desktop-env.js';

8function getPiboHome() {

9 return process.env.PIBO_HOME || join(homedir(), '.pibo');

10}

11export function getToolNpmRuntimePaths(name, spec) {

12 const rootDir = join(getPiboHome(), 'tools', name);

13 const homeDir = join(rootDir, 'home');

14 const nodeDir = join(rootDir, 'node');

15 const binDir = join(nodeDir, 'node_modules', '.bin');

16 const executable = process.platform === 'win32' ? `${spec.executableName}.cmd` : spec.executableName;

17 return {

18 rootDir,

19 homeDir,

20 nodeDir,

21 binDir,

dist/tools/index.jsView file

Lines 386-426javascript

386 for (const command of result.nextCommands)

387 console.log(` ${command}`);

388 }

389}

390async function printBrowserPoolReap(status, options) {

391 const result = await getBrowserPoolReap(status, options);

392 if (options.json) {

393 console.log(JSON.stringify(result, null, 2));

394 return;

395 }

396 printBrowserPoolReapText(result);

397}

398function findChromeBinary() {

399 if (process.env.AGENT_BROWSER_EXECUTABLE_PATH && existsSync(process.env.AGENT_BROWSER_EXECUTABLE_PATH)) {

400 return process.env.AGENT_BROWSER_EXECUTABLE_PATH;

401 }

402 if (process.env.PIBO_BROWSER_USE_CHROME && existsSync(process.env.PIBO_BROWSER_USE_CHROME)) {

403 return process.env.PIBO_BROWSER_USE_CHROME;

404 }

405 const candidates = ['google-chrome', 'chromium', 'chromium-browser', 'chrome'];

406 for (const name of candidates) {

407 const result = spawnSync('command', ['-v', name], { shell: true, encoding: 'utf-8' });

408 if (result.status === 0 && result.stdout.trim()) {

High

Shell

Package source references shell execution.

dist/tools/index.jsView on unpkg · L406

409 return result.stdout.trim();

410 }

411 }

412 return undefined;

413}

414function checkStaleCdpState(homeDir) {

415 const stateDir = join(homeDir, 'pibo-cdp');

416 if (!existsSync(stateDir))

417 return { stalePids: 0, stalePorts: 0, details: [] };

418 let stalePids = 0;

419 let stalePorts = 0;

420 const details = [];

421 for (const file of readdirSync(stateDir)) {

422 if (file.endsWith('.pid')) {

423 const pidPath = join(stateDir, file);

424 const text = readFileSync(pidPath, 'utf-8').trim();

425 const pid = Number.parseInt(text, 10);

426 let isDead = false;

dist/tools/runtime/python-worker-source.jsView file

Lines 62-102javascript

62 runtime_frames = [frame for frame in extracted if frame.filename == "<pibo-runtime>"]

63 if runtime_frames:

64 line = runtime_frames[-1].lineno

65 except Exception:

66 pass

67 out = {"name": type(exc).__name__, "message": str(exc), "traceback": tb}

68 if line is not None:

69 out["line"] = line

70 return out

73def execute(req):

74 mode = req.get("mode") or "exec"

75 code = req.get("code") or ""

76 if mode == "auto":

77 mode = "exec"

78 stdout = io.StringIO()

79 stderr = io.StringIO()

80 try:

81 with contextlib.redirect_stdout(stdout), contextlib.redirect_stderr(stderr):

82 if mode == "eval":

83 value = eval(compile(code, "<pibo-runtime>", "eval"), user_globals, user_globals)

84 else:

High

Eval

Package source references dynamic code evaluation.

dist/tools/runtime/python-worker-source.jsView on unpkg · L82

85 exec(compile(code, "<pibo-runtime>", "exec"), user_globals, user_globals)

86 value = None

87 return {

88 "id": req.get("id"),

89 "status": "ok",

90 "stdout": stdout.getvalue(),

91 "stderr": stderr.getvalue(),

92 "result": summarize(value) if value is not None else None,

93 }

94 except KeyboardInterrupt as exc:

95 return {"id": req.get("id"), "status": "interrupted", "stdout": stdout.getvalue(), "stderr": stderr.getvalue(), "error": error_summary(exc)}

96 except Exception as exc:

97 return {"id": req.get("id"), "status": "error", "stdout": stdout.getvalue(), "stderr": stderr.getvalue(), "error": error_summary(exc)}

100def inspect_value(req):

101 expression = req.get("expression") or ""

102 what = req.get("what") or "summary"

dist/apps/context-files-ui/assets/index-BhAWD3dv.jsView file

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/dist-DqYw0LH7.js","assets/dist-D1KyNDg5.js","assets/dist-QQuDy4KA.js","assets/dist-vnd7PMu3.js","assets/dist-DKoyMS... L2: import{$ as e,A as t,At as n,B as r,Bt as i,C as a,Ct as o,D as s,Dt as c,E as l,Et as u,F as d,Ft as f,G as p,H as m,I as h,It as g,J as _,K as v,L as y,Lt as b,M as x,Mt as S,N a... L3: at`)?` (<anonymous>)`:-1<e.stack.indexOf(`@`)?`@unknown:0:0`:``}return` ... L8: Error generating stack: `+e.message+` L9: `+e.stack}}var Se=Object.prototype.hasOwnProperty,Ce=t.unstable_scheduleCallback,we=t.unstable_cancelCallback,Te=t.unstable_shouldYield,Ee=t.unstable_requestPaint,De=t.unstable_now... L10: `).replace(Ld,``)}function zd(e,t){return t=Rd(t),Rd(e)===t}function Bd(e,t,n,r,a,o){switch(n){case`children`:typeof r==`string`?t===`body`||t===`textarea`&&r===``||qt(e,r):(typeof... L11: `),r.hasAttribute(`data-start`)||r.setAttribute(`data-start`,String(o+1))}f.textContent=e,n.highlightElement(f)},function(e){r.setAttribute(a,c),f.textContent=e})}}),n.plugins.file... ... L31: L32: `))}return r.pop(),s.join(``)}function vp(e){let t=0,n=e.stack.length;for(;--n>-1;){let r=e.stack[n];if(r===`blockquote`|

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/apps/context-files-ui/assets/index-BhAWD3dv.jsView on unpkg · L1

185\${} L186: }`,{label:`enum`,detail:`definition`,type:`keyword`})]),yX=new re,bX=new Set([`Script`,`Block`,`FunctionExpression`,`FunctionDeclaration`,`ArrowFunction`,`MethodDeclaration`,`ForSt... L187: `:t==`r`?`\r`:t==`t`?` `:`\\`)}eq(e){return this.search==e.search&&this.replace==e.replace&&this.caseSensitive==e.caseSensitive&&this.regexp==e.regexp&&this.wholeWord==e.wholeWord&...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/apps/context-files-ui/assets/index-BhAWD3dv.jsView on unpkg · L185

dist/apps/chat/trace.jsView file

Lines 1-32javascript

1import { createHash } from "node:crypto";

2import { closeSync, existsSync, openSync, readFileSync, readSync, readdirSync, statSync } from "node:fs";

3import { homedir } from "node:os";

4import { join } from "node:path";

5import { parseSessionEntries, SessionManager } from "@earendil-works/pi-coding-agent";

6import { buildTraceViewFromEvents } from "../../shared/trace-engine.js";

7import { isChatWebSessionArchived } from "./session-metadata.js";

8import { workflowSessionKindFromMetadata } from "../../sessions/workflow-session-kind.js";

9export { compareTraceNodes, sortTraceNodes, nestTraceNodes, flattenTraceNodes, mapTraceNodesById, buildTraceViewFromEvents, traceNodesFromEntries, } from "../../shared/trace-engine.js";

10export const TRACE_TRANSCRIPT_TAIL_MAX_BYTES = 2 * 1024 * 1024;

11export const TRACE_TRANSCRIPT_HISTORY_PAGE_MAX_BYTES = 512 * 1024;

12export const TRACE_TRANSCRIPT_HISTORY_SCAN_MAX_BYTES = 16 * 1024 * 1024;

13export async function loadPiSessionMetadata(session, cwd = process.cwd()) {

14 const piSession = await findPiSession(session, cwd);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/apps/chat/trace.jsView on unpkg · L12

15 return metadataFromPiSession(piSession);

16}

17export async function loadPiSessionFastMetadata(session, cwd = process.cwd()) {

18 const piSession = findPiSessionDirectFast(session.piSessionId, cwd)

19 ?? findPiSessionDirect(session.piSessionId, cwd, { fast: true });

20 return metadataFromPiSession(piSession);

21}

22function metadataFromPiSession(piSession) {

23 if (!piSession)

24 return {};

25 let sessionSize;

26 let sessionMtimeMs;

27 try {

28 const stats = statSync(piSession.path);

29 sessionSize = stats.size;

30 sessionMtimeMs = stats.mtimeMs;

31 }

32 catch {

dist/setup/cli.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { resolve4 } from "node:dns/promises";

3import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/setup/cli.jsView on unpkg · L1

4import { dirname, isAbsolute, join } from "node:path";

5import { Command } from "commander";

6import { getPiboConfigValue, loadPiboConfig } from "../config/config.js";

7import { getPiboHome } from "../core/pibo-home.js";

8import { getWslInfo, isWsl } from "../core/wsl.js";

9function parsePort(value) {

10 const port = Number(value);

11 if (!Number.isInteger(port) || port < 1 || port > 65535)

12 throw new Error("Port must be an integer between 1 and 65535");

13 return port;

14}

15function parseNonNegativeNumber(value) {

16 const parsed = Number(value);

17 if (!Number.isFinite(parsed) || parsed < 0)

18 throw new Error("Value must be a non-negative number");

19 return parsed;

20}

21function shellQuote(value) {

dist/gateway/fallback.jsView file

Lines 74-114javascript

74 web: { host: FALLBACK_HOST, port: FALLBACK_WEB_PORT },

75 };

76}

77export async function startFallback() {

78 if (!existsSync(BACKUP_DIR)) {

79 throw new Error(`No backup found at ${BACKUP_DIR}. Run "pibo gateway backup install" first.`);

80 }

81 if (!existsSync(FALLBACK_BIN_PATH)) {

82 throw new Error(`Fallback build not found at ${FALLBACK_BIN_PATH}. Run "pibo gateway backup update" first.`);

83 }

84 const status = getFallbackStatus();

85 if (status.running) {

86 console.log(`Fallback is already running (PID ${status.pid})`);

87 return;

88 }

89 if (await isPortReachable("127.0.0.1", FALLBACK_GATEWAY_PORT, 1000)) {

90 throw new Error(`Port ${FALLBACK_GATEWAY_PORT} is already in use`);

91 }

92 if (await isPortReachable("127.0.0.1", FALLBACK_WEB_PORT, 1000)) {

93 throw new Error(`Port ${FALLBACK_WEB_PORT} is already in use`);

94 }

95 const child = spawn(process.execPath, [FALLBACK_BIN_PATH, "gateway", "fallback", "run"], {

96 detached: true,

97 stdio: "ignore",

98 cwd: BACKUP_DIR,

99 env: { ...process.env, PIBO_FALLBACK_MODE: "1" },

100 });

101 child.unref();

102 console.error("Waiting for fallback gateway to come online...");

103 const up = await waitForFallbackUp(30, 1000);

104 if (!up) {

105 throw new Error("Fallback gateway did not come online in time");

106 }

107 console.log("Fallback gateway started");

108 console.log(` Gateway: 0.0.0.0:${FALLBACK_GATEWAY_PORT}`);

109 console.log(` Web App: http://0.0.0.0:${FALLBACK_WEB_PORT}/apps/chat`);

110}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/gateway/fallback.jsView on unpkg · L94

111export async function runFallbackGatewayServer() {

112 if (process.env.PIBO_FALLBACK_MODE !== "1") {

113 throw new Error("gateway fallback run requires PIBO_FALLBACK_MODE=1");

114 }

dist/tools/python-runtime.jsView file

1import { spawn } from 'node:child_process'; L2: import { existsSync } from 'node:fs'; ... L8: function getPiboHome() { L9: return process.env.PIBO_HOME || join(homedir(), '.pibo'); L10: } ... L14: const venvDir = join(rootDir, '.venv'); L15: const binDir = join(venvDir, process.platform === 'win32' ? 'Scripts' : 'bin'); L16: const executable = process.platform === 'win32' ... L38: const chunks = []; L39: child.stdout.on('data', (chunk) => chunks.push(Buffer.from(chunk))); L40: child.stderr.on('data', (chunk) => chunks.push(Buffer.from(chunk))); ... L66: console.log('uv was not found on PATH. Installing uv automatically.');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/tools/python-runtime.jsView on unpkg · L1

dist/gateway/backup.jsView file

50} L51: execSync("npm install --include=dev", { cwd: BACKUP_DIR, stdio: "inherit" }); L52: execSync("npm run build", { cwd: BACKUP_DIR, stdio: "inherit" });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/gateway/backup.jsView on unpkg · L50

skills/builtin/skill-creator/eval-viewer/generate_review.pyView file

•path = skills/builtin/skill-creator/eval-viewer/generate_review.py kind = build_helper sizeBytes = 16836 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/builtin/skill-creator/eval-viewer/generate_review.pyView on unpkg

dist/apps/chat-ui/assets/index-BqD_bm7z.jsView file

•path = dist/apps/chat-ui/assets/index-BqD_bm7z.js kind = oversized_source_file sizeBytes = 2196792 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/apps/chat-ui/assets/index-BqD_bm7z.jsView on unpkg

dist/compute/resource-health.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @pasko70/pibo@1.7.3 matchedIdentity = npm:QHBhc2tvNzAvcGlibw:1.7.3 similarity = 0.825 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/compute/resource-health.jsView on unpkg

Source & flagged code

13 flagged · loading source

dist/tools/npm-runtime.jsView file

1import { spawn } from 'node:child_process'; L2: import { existsSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/tools/npm-runtime.jsView on unpkg · L1

dist/tools/index.jsView file

406for (const name of candidates) { L407: const result = spawnSync('command', ['-v', name], { shell: true, encoding: 'utf-8' }); L408: if (result.status === 0 && result.stdout.trim()) {

High

Shell

Package source references shell execution.

dist/tools/index.jsView on unpkg · L406

dist/tools/runtime/python-worker-source.jsView file

82if mode == "eval": L83: value = eval(compile(code, "<pibo-runtime>", "eval"), user_globals, user_globals) L84: else:

High

Eval

Package source references dynamic code evaluation.

dist/tools/runtime/python-worker-source.jsView on unpkg · L82

dist/apps/context-files-ui/assets/index-BhAWD3dv.jsView file

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/apps/context-files-ui/assets/index-BhAWD3dv.jsView on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/apps/context-files-ui/assets/index-BhAWD3dv.jsView on unpkg · L185

dist/apps/chat/trace.jsView file

12export const TRACE_TRANSCRIPT_HISTORY_SCAN_MAX_BYTES = 16 * 1024 * 1024; L13: export async function loadPiSessionMetadata(session, cwd = process.cwd()) { L14: const piSession = await findPiSession(session, cwd); ... L135: title: s.title ?? null, L136: metadata: s.metadata, L137: })), ... L319: function defaultPiSessionDir(cwd) { L320: const agentDir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent"); L321: const safePath = `--${cwd.replace(/^[\\/]/, "").replace(/[\\/:]/g, "-")}--`; ... L354: const bytesRead = readSync(fd, buffer, 0, length, 0); L355: let content = buffer.subarray(0, bytesRead).toString("utf8"); L356: if (bytesRead < fileSize && !content.endsWith("\n")) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/apps/chat/trace.jsView on unpkg · L12

dist/setup/cli.jsView file

1import { execFileSync } from "node:child_process"; L2: import { resolve4 } from "node:dns/promises"; L3: import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"; ... L120: warnings.push("No production domain was provided; generated Caddy/Auth examples use placeholders."); L121: if (process.platform === "win32" && !isWsl()) { L122: warnings.push("Pibo host setup targets Linux. Native Windows is not supported. Install WSL2 (https://aka.ms/wsl) and run setup inside the WSL distribution. See docs/guides/pibo-on-... ... L166: "Set auth.baseURL, auth.secret, OAuth client values, and allowed emails with `pibo config set`.", L167: `Install ${serviceName}.service, then run \`systemctl enable --now ${serviceName}\`.`, L168: "If Caddy is used, point DNS at the host before expecting Let's Encrypt certificates.",

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/setup/cli.jsView on unpkg · L1

dist/gateway/fallback.jsView file

94} L95: const child = spawn(process.execPath, [FALLBACK_BIN_PATH, "gateway", "fallback", "run"], { L96: detached: true, ... L98: cwd: BACKUP_DIR, L99: env: { ...process.env, PIBO_FALLBACK_MODE: "1" }, L100: }); ... L108: console.log(` Gateway: 0.0.0.0:${FALLBACK_GATEWAY_PORT}`); L109: console.log(` Web App: http://0.0.0.0:${FALLBACK_WEB_PORT}/apps/chat`); L110: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/gateway/fallback.jsView on unpkg · L94

dist/tools/python-runtime.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/tools/python-runtime.jsView on unpkg · L1

dist/gateway/backup.jsView file

50} L51: execSync("npm install --include=dev", { cwd: BACKUP_DIR, stdio: "inherit" }); L52: execSync("npm run build", { cwd: BACKUP_DIR, stdio: "inherit" });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/gateway/backup.jsView on unpkg · L50

skills/builtin/skill-creator/eval-viewer/generate_review.pyView file

•path = skills/builtin/skill-creator/eval-viewer/generate_review.py kind = build_helper sizeBytes = 16836 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/builtin/skill-creator/eval-viewer/generate_review.pyView on unpkg

dist/apps/chat-ui/assets/index-BqD_bm7z.jsView file

•path = dist/apps/chat-ui/assets/index-BqD_bm7z.js kind = oversized_source_file sizeBytes = 2196792 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/apps/chat-ui/assets/index-BqD_bm7z.jsView on unpkg

dist/compute/resource-health.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/compute/resource-health.jsView on unpkg

Findings

2 Critical7 High7 Medium7 Low

CriticalDownload Executedist/apps/context-files-ui/assets/index-BhAWD3dv.js

CriticalPrevious Version Dangerous Deltadist/compute/resource-health.js

HighChild Processdist/tools/npm-runtime.js

HighShelldist/tools/index.js

HighEvaldist/tools/runtime/python-worker-source.js

HighSame File Env Network Executiondist/gateway/fallback.js

HighSandbox Evasion Gated Capabilitydist/tools/python-runtime.js

HighRuntime Package Installdist/gateway/backup.js

HighOversized Source Filedist/apps/chat-ui/assets/index-BqD_bm7z.js

MediumDynamic Requiredist/apps/context-files-ui/assets/index-BhAWD3dv.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/setup/cli.js

MediumProtestware

MediumShips Build Helperskills/builtin/skill-creator/eval-viewer/generate_review.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/apps/chat/trace.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License