Loading npm security reports…

@pellux/goodvibes-sdk@1.11.4: Suspicious npm security report | LPM Firewall

registry / @pellux/goodvibes-sdk / 1.11.4

@pellux/goodvibes-sdk@1.11.4

TypeScript SDK for building GoodVibes operator, peer, web, mobile, and daemon-connected apps with typed contracts, auth, realtime events, and transport layers.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,641 file(s), 10.2 MB of source, external domains: 127.0.0.1, accounts.google.com, ai-gateway.vercel.sh, aihubmix.com, aiplatform.eu.rep.googleapis.com, aiplatform.googleapis.com, aiplatform.us.rep.googleapis.com, api-inference.huggingface.co, api.anthropic.com, api.botframework.com, api.cerebras.ai, api.cohere.com, api.deepgram.com, api.deepinfra.com, api.deepseek.com, api.dev.runwayml.com, api.duckduckgo.com, api.elevenlabs.io, api.exa.ai, api.firecrawl.dev, api.fireworks.ai, api.github.com, api.groq.com, api.inceptionlabs.ai, api.individual.githubcopilot.com, api.llm7.io, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.openai.com, api.perplexity.ai, api.search.brave.com, api.stepfun.ai, api.tavily.com, api.telegram.org, api.together.xyz, api.twilio.com, api.venice.ai, api.x.ai, api.xiaomimimo.com, api.z.ai, api.zeroeval.com, ark.ap-southeast.bytepluses.com, ark.cn-beijing.volces.com, auth.openai.com, bluebubbles.example.test, chatgpt.com, companion.example.com, daemon.local, dashscope-intl.aliyuncs.com

Source & flagged code

8 flagged · loading source

dist/platform/security/user-auth.jsView file

175patternName = generic_password severity = medium line = 175 matchedText = password...th);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/platform/security/user-auth.jsView on unpkg · L175

dist/platform/tools/read/media.jsView file

259// eslint-disable-next-line @typescript-eslint/no-implied-eval, no-new-func L260: const dynamicImport = new Function('specifier', 'return import(specifier)'); L261: const mod = await dynamicImport('sharp');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/platform/tools/read/media.jsView on unpkg · L259

dist/client-auth/android-keystore-token-store.jsView file

35try { L36: _mod = (await import(REACT_NATIVE_KEYCHAIN_MODULE)); L37: return _mod;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/client-auth/android-keystore-token-store.jsView on unpkg · L35

dist/platform/adapters/telephony/index.jsView file

13} L14: const params = new URLSearchParams(rawBody); L15: const parsed = {}; ... L52: continue; L53: const expected = createHmac('sha1', authToken).update(baseString).digest('base64'); L54: if (constantTimeEquals(expected, signature)) ... L63: || await context.serviceRegistry.resolveSecret('telephony', 'primary') L64: || process.env.TELEPHONY_WEBHOOK_SECRET L65: || process.env.TWILIO_WEBHOOK_SECRET

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/platform/adapters/telephony/index.jsView on unpkg · L13

dist/platform/runtime/sandbox/provisioning.jsView file

2import { dirname, join, resolve } from 'node:path'; L3: import { spawnSync } from 'node:child_process'; L4: import { getSandboxConfigSnapshot } from './manager.js'; ... L180: `sudo mkdir -p ${config.qemuWorkspacePath || '/workspace'}`, L181: `id -u ${config.qemuGuestUser || 'goodvibes'} >/dev/null 2>&1 || sudo useradd -m -s /bin/bash ${config.qemuGuestUser || 'goodvibes'}`, L182: `sudo chown -R ${config.qemuGuestUser || 'goodvibes'}:${config.qemuGuestUser || 'goodvibes'} ${config.qemuWorkspacePath || '/workspace'}`, L183: 'sudo systemctl enable ssh || true', L184: 'sudo systemctl restart ssh || true', ... L270: // Operator-controlled escape hatch for deployments where qemu-img is not on PATH. L271: qemuImgBinary = process.env.QEMU_IMG_BIN || 'qemu-img') { L272: const targetPath = resol

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/platform/runtime/sandbox/provisioning.jsView on unpkg · L2

dist/platform/tools/fetch/trust-tiers.jsView file

20* SSRF protections detect (always blocked): L21: * - Private IPv4 ranges (RFC 1918) and link-local metadata (169.254.x.x) L22: * - IPv6 link-local and unique-local ranges ... L303: * L304: * @param url - Full URL string (e.g. `https://example.com/path`). L305: * @returns Hostname string (without port), or `null` on parse failure.

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/platform/tools/fetch/trust-tiers.jsView on unpkg · L20

vendor/bash-language-server/tree-sitter-bash.wasmView file

•path = vendor/bash-language-server/tree-sitter-bash.wasm kind = wasm_module sizeBytes = 1364404 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/bash-language-server/tree-sitter-bash.wasmView on unpkg

dist/contracts/artifacts/python/homeassistant_operator_client.pyView file

•path = [redacted]homeassistant_operator_client.py kind = build_helper sizeBytes = 22998 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/contracts/artifacts/python/homeassistant_operator_client.pyView on unpkg

Source & flagged code

8 flagged

dist/platform/security/user-auth.jsView file

Lines 155-195javascript

155 passwordHash: hashPassword(initialPassword),

156 roles: ['admin'],

157 },

158 ];

159 writeBootstrapUsers(filePath, users);

160 writeBootstrapCredentialFile(credentialPath, username, initialPassword);

161 return users;

162}

163function readBootstrapCredentialFile(filePath) {

164 try {

165 if (!existsSync(filePath))

166 return null;

167 const raw = readFileSync(filePath, 'utf-8');

168 let username;

169 let password;

170 for (const rawLine of raw.split('\n')) {

171 const line = rawLine.trim();

172 if (line.startsWith('username='))

173 username = line.slice('username='.length);

174 else if (line.startsWith('password='))

175 password = line.slice('password='.length);

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/platform/security/user-auth.jsView on unpkg · L175

176 }

177 if (!username || !password)

178 return null;

179 return { username, password };

180 }

181 catch {

182 return null;

183 }

184}

185/**

186 * Detects when the bootstrap credential file has drifted from the persisted

187 * user store — typically after someone manually edits `auth-bootstrap.txt`

188 * without rotating the password through the UserAuthManager. The daemon's

189 * /login route will reject the edited password because the hash in

190 * `auth-users.json` no longer matches. Left silent, this wastes hours of

191 * debugging; loudly warning is cheap.

192 */

193function detectBootstrapCredentialDrift(users, credentialPath, userStorePath) {

194 const credential = readBootstrapCredentialFile(credentialPath);

195 if (!credential)

dist/platform/tools/read/media.jsView file

Lines 239-279javascript

239 }

240 break;

241 }

242 default:

243 break;

244 }

245 }

246 catch (err) {

dist/client-auth/android-keystore-token-store.jsView file

Lines 15-55javascript

15 * strongly preferred for production apps.

16 *

17 * `react-native-keychain` is an **optional peer dependency** — this module

18 * does NOT import

dist/platform/adapters/telephony/index.jsView file

Lines 1-33javascript

1import { createHash, createHmac } from 'node:crypto';

2import { constantTimeEquals, parseJsonRecord, readBearerOrHeaderToken, readTextBodyWithinLimit } from '../helpers.js';

3function readRecord(value) {

4 return value &&

dist/platform/runtime/sandbox/provisioning.jsView file

Lines 1-22javascript

1import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';

2import { dirname, join, resolve } from 'node:path';

3import { spawnSync } from 'node:child_process';

4import { getSandboxConfigSnapshot } from

dist/platform/tools/fetch/trust-tiers.jsView file

Lines 1-40javascript

1/**

2 * Host trust tier classification.

3 *

4 * Classifies outbound HTTP request targets into one of four tiers before

5 * the request is sent. Blocked hosts are denied pre-request with an

6 * `SSRF_DENY` telemetry event — absolutely, regardless of configuration.

7 * Localhost/loopback targets (dev servers) are their own tier: they ask once

8 * and can be allowed per project (fetch.allowLocalhost). Unknown hosts

9 * receive `safe-text` sanitization. Trusted hosts may opt into `none`

10 * sanitization via config.

vendor/bash-language-server/tree-sitter-bash.wasmView file

•path = vendor/bash-language-server/tree-sitter-bash.wasm kind = wasm_module sizeBytes = 1364404 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/bash-language-server/tree-sitter-bash.wasmView on unpkg

dist/contracts/artifacts/python/homeassistant_operator_client.pyView file

•path = [redacted]homeassistant_operator_client.py kind = build_helper sizeBytes = 22998 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/contracts/artifacts/python/homeassistant_operator_client.pyView on unpkg