@paytaca/opencode-plugin@0.1.13: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@paytaca/opencode-plugin@0.1.13: Suspicious npm security report | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/paytaca.jsView file

2const path = require('path'); L3: const { spawn } = require('child_process'); L4:

High

Child Process

Package source references child process execution.

bin/paytaca.jsView on unpkg · L2

1#!/usr/bin/env node L2: const path = require('path'); L3: const { spawn } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/paytaca.jsView on unpkg · L1

dist/bundled/proxy.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: "use strict"; object.defineproperty(exports, "__esmodule", { value: true }); exports.proxy_script_content = void 0; exports.proxy_script_content = `#!/usr/bin/env node /** * paytaca ai proxy * * sits between opencode and the django backend. * - auto-starts by opencode plugin * - on 402, returns sse typewriter loading sequence + synthetic payment prompt * - stores pending payments; handles "yes"/"no" approval internally * - uses only node.js built-in modules * * usage: node proxy.js [backend_url] [proxy_port] * example: node proxy.js https://api.paytaca.ai 8001 */ cons

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bundled/proxy.jsView on unpkg

16Cross-file remote execution chain: dist/bundled/proxy.js spawns dist/proxy.js; helper contains network access plus dynamic code execution. L16: * Usage: node proxy.js [backend_url] [proxy_port] L17: * Example: node proxy.js https://api.paytaca.ai 8001 L18: */ ... L21: const https = require('https'); L22: const { spawn } = require('child_process'); L23: const { Transform } = require('stream'); ... L35: // Logging setup: write to file instead of console L36: const LOG_DIR = path.join(os.homedir(), '.opencode-paytaca'); L37: if (!fs.existsSync(LOG_DIR)) { ... L44: const timestamp = new Date().toISOString(); L45: logStream.write(timestamp + ' [Proxy] ' + message + '\\n'); L46: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bundled/proxy.jsView on unpkg · L16

scripts/postinstall.jsView file

91try { L92: execSync('npm install -g paytaca-cli', { stdio: 'inherit' }); L93: asdfReshim();

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L91

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @paytaca/opencode-plugin@0.1.12 matchedIdentity = npm:[redacted]:0.1.12 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 2-42json

2 "name": "@paytaca/opencode-plugin",

3 "version": "0.1.13",

4 "description": "OpenCode plugin for Paytaca AI - AI inference provider powered by Bitcoin Cash micropayments",

5 "main": "dist/index.js",

6 "types": "dist/index.d.ts",

7 "bin": {

8 "paytaca": "./bin/paytaca.js"

9 },

10 "engines": {

11 "node": ">=20.0.0"

12 },

13 "files": [

14 "dist/",

15 "bin/",

16 "scripts/",

17 "README.md"

18 ],

19 "scripts": {

20 "build": "tsc",

21 "prepare": "npm run build && node scripts/sync-cache.js",

22 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

24 "keywords": [

25 "opencode",

26 "plugin",

27 "paytaca",

28 "bch",

29 "ai",

30 "provider"

31 ],

32 "author": "Paytaca",

33 "license": "MIT",

34 "dependencies": {

35 "@opencode-ai/plugin": "^1.17.8",

36 "paytaca-cli": "^0.4.0"

37 },

38 "devDependencies": {

39 "@types/node": "^20.0.0",

40 "typescript": "^5.0.0"

41 },

42 "peerDependencies": {

bin/paytaca.jsView file

Lines 1-15javascript

1#!/usr/bin/env node

2const path = require('path');

3const { spawn } = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/paytaca.jsView on unpkg · L1

dist/bundled/proxy.jsView file

Lines 1-36javascript

1"use strict";

2// This file contains the bundled proxy script as a string

3// It gets written to ~/.opencode-paytaca/proxy.js at runtime

4Object.defineProperty(exports, "__esModule", { value: true });

5exports.PROXY_SCRIPT_CONTENT = void 0

scripts/postinstall.jsView file

Lines 71-101javascript

71 asdfReshim();

72 return link;

73}

74

75async function main() {

76 if (process.env.PAYTACA_PLUGIN_SKIP_POSTINSTALL) return;

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @paytaca/opencode-plugin@0.1.12 matchedIdentity = npm:[redacted]:0.1.12 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg