@phi-code-admin/phi-code@0.99.3: Suspicious npm security report

Loading npm security reports…

@phi-code-admin/phi-code@0.99.3: Suspicious npm security report | LPM Firewall

Source & flagged code

23 flagged

package.jsonView file

Lines 32-72json

32 "skills",

33 "agents",

34 "extensions",

35 "config",

36 "containerization.md",

37 "README.md",

38 "LICENSE",

39 "CHANGELOG.md",

40 "scripts"

41 ],

42 "scripts": {

43 "clean": "shx rm -rf dist",

44 "dev": "tsgo -p tsconfig.build.json --watch --preserveWatchOutput",

45 "build": "tsgo -p tsconfig.build.json && shx chmod +x dist/cli.js dist/rpc-entry.js && npm run copy-assets",

46 "check:ext": "tsgo -p tsconfig.ext.json --noEmit",

47 "build:binary": "npm --prefix ../tui run build && npm --prefix ../telemetry run build && npm --prefix ../ai run build && npm --prefix ../agent run build && npm --prefix ../protocol run build && npm --prefix ../client run build && npm run build && bun build --compile --no-compile-autoload-bunfig ./dist/bun/cli.js ./src/utils/image-resize-worker.ts --outfile dist/phi && npm run copy-binary-assets",

48 "copy-assets": "shx mkdir -p dist/modes/interactive/theme dist/modes/interactive/assets dist/core/export-html/vendor dist/core && shx cp src/modes/interactive/theme/*.json dist/modes/interactive/theme/ && shx mkdir -p dist/modes/interactive/theme/defaults && shx cp src/modes/interactive/theme/defaults/*.json dist/modes/interactive/theme/defaults/ && shx cp src/modes/interactive/assets/*.png dist/modes/interactive/assets/ && shx cp src/core/default-models.json dist/core/ && shx cp src/core/export-html/template.html src/core/export-html/template.css src/core/export-html/template.js dist/core/e ...

49 "copy-binary-assets": "shx cp package.json dist/ && shx cp README.md dist/ && shx cp CHANGELOG.md dist/ &&

50 "test": "vitest --run",

51 "prepublishOnly": "npm run clean && npm run build",

52 "postinstall": "node scripts/postinstall.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 },

54 "dependencies": {

55 "@ast-grep/napi": "0.45.3",

56 "@mariozechner/jiti": "^2.6.5",

57 "@modelcontextprotocol/sdk": "^1.29.0",

58 "@phi-code-admin/browser": "^1.0.7",

59 "@silvia-odwyer/photon-node": "0.3.4",

60 "chalk": "5.6.2",

61 "cli-highlight": "^2.1.11",

62 "cross-spawn": "7.0.6",

63 "diff": "8.0.4",

64 "extract-zip": "^2.0.1",

65 "file-type": "^21.1.1",

66 "glob": "13.0.6",

67 "grok-mermaid": "0.2.2",

68 "highlight.js": "10.7.3",

69 "hosted-git-info": "9.0.3",

70 "ignore": "7.0.5",

71 "jiti": "2.7.0",

72 "marked": "^15.0.12",

Long lines were clipped for display.

dist/core/exec.jsView file

Lines 1-23javascript

1/**

2 * Shared command execution utilities for extensions and custom tools.

3 */

4import { spawn } from "node:child_process";

5import { waitForChildProcess } from "../utils/child-process.js";

High

Child Process

Package source references child process execution.

dist/core/exec.jsView on unpkg · L3

extensions/phi/providers/execution.tsView file

Lines 64-104typescript

64 clearTimeout(timer);

65 try {

66 process.kill(-pid, "SIGKILL");

67 } catch {

68 /* group already gone */

69 }

examples/extensions/doom-overlay/doom-engine.tsView file

Lines 44-84typescript

44 return this._height;

45 }

47 async init(): Promise<void> {

48 // Locate WASM build

49 const __dirname = dirname(fileURLToPath

dist/utils/photon.jsView file

Lines 1-37javascript

1/**

2 * Photon image processing wrapper.

3 *

4 * This module provides a unified interface to @silvia-odwyer/photon-node that works in:

5 * 1. Node.js (development, npm run build)

6 * 2. Bun compiled binaries (standalone distribution)

7 *

8 * The challenge: photon-node's CJS entry uses fs.readFileSync(__dirname + '/photon_rs_bg.wasm')

9 * which bakes the build machine's absolute path into Bun compiled binaries.

10 *

dist/core/tools/edit-hashline.jsView file

Lines 1-21javascript

1import { createHash } from "crypto";

2// Local copy of edit-diff's fuzzy normalization, duplicated to avoid an

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/tools/edit-hashline.jsView on unpkg · L1

3// import cycle (edit-diff.ts imports this module for anchor recovery).

4function normalizeForFuzzyMatch(text) {

examples/extensions/doom-overlay/doom/build/doom.jsView file

Lines 1-22javascript

1var createDoomModule = (() => {

2 var _scriptName = typeof document != 'undefined' ? document.currentScript?.src : undefined;

examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = examples/extensions/doom-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

examples/extensions/doom-overlay/doom/build.shView file

•path = examples/extensions/doom-overlay/doom/build.sh kind = build_helper sizeBytes = 3366 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/extensions/doom-overlay/doom/build.shView on unpkg

dist/config.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/config.js#virtual:string-array:round1View on unpkg

dist/modes/interactive/interactive-mode.jsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = [redacted]-mode.js matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/interactive/interactive-mode.jsView on unpkg

dist/utils/tools-manager.jsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = dist/utils/tools-manager.js matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/tools-manager.jsView on unpkg

dist/core/resolve-config-value.jsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = dist/core/resolve-config-value.js matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/resolve-config-value.jsView on unpkg

examples/extensions/notify.tsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = examples/extensions/notify.ts matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/notify.tsView on unpkg

dist/modes/rpc/rpc-client.jsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = dist/modes/rpc/rpc-client.js matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/rpc/rpc-client.jsView on unpkg

examples/extensions/git-merge-and-resolve.tsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = examples/extensions/git-merge-and-resolve.ts matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/git-merge-and-resolve.tsView on unpkg

examples/extensions/gondolin/index.tsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = [redacted].ts matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/gondolin/index.tsView on unpkg

dist/core/export-html/vendor/highlight.min.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/core/export-html/vendor/highlight.min.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/highlight.min.jsView on unpkg

dist/core/export-html/vendor/marked.min.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/core/export-html/vendor/marked.min.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/marked.min.jsView on unpkg

dist/modes/interactive/components/settings-selector.jsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = [redacted]-selector.js matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/interactive/components/settings-selector.jsView on unpkg

examples/extensions/border-status-editor.tsView file

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = examples/extensions/border-status-editor.ts matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/border-status-editor.tsView on unpkg

Source & flagged code

23 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/exec.jsView file

3*/ L4: import { spawn } from "node:child_process"; L5: import { waitForChildProcess } from "../utils/child-process.js";

High

Child Process

Package source references child process execution.

dist/core/exec.jsView on unpkg · L3

extensions/phi/providers/execution.tsView file

84* ShellConfig). When absent, the platform default shell is used (`shell:true`: L85: * /bin/sh on POSIX, cmd.exe on Windows). L86: */

High

Shell

Package source references shell execution.

extensions/phi/providers/execution.tsView on unpkg · L84

examples/extensions/doom-overlay/doom-engine.tsView file

64const nativeRequire = createRequire(doomJsPath); L65: const moduleFunc = new Function("module", "exports", "__dirname", "__filename", "require", doomJsCode); L66: moduleFunc(moduleExports, moduleExports.exports, buildDir, doomJsPath, nativeRequire);

Low

Eval

Package source references a known benign dynamic code generation pattern.

examples/extensions/doom-overlay/doom-engine.tsView on unpkg · L64

dist/utils/photon.jsView file

17import { fileURLToPath } from "url"; L18: const require = createRequire(import.meta.url); L19: const fs = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/utils/photon.jsView on unpkg · L17

dist/core/tools/edit-hashline.jsView file

1import { createHash } from "crypto"; L2: // Local copy of edit-diff's fuzzy normalization, duplicated to avoid an

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/tools/edit-hashline.jsView on unpkg · L1

examples/extensions/doom-overlay/doom/build/doom.jsView file

7L8: var Module=moduleArg;var readyPromiseResolve,readyPromiseReject;var readyPromise=new Promise((resolve,reject)=>{readyPromiseResolve=resolve;readyPromiseReject=reject});var ENVIRONM... L9:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

examples/extensions/doom-overlay/doom/build/doom.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = @phi-code-admin/phi-code@0.99.0 matchedPath = examples/extensions/doom-overlay/doom/build/doom.js matchedIdentity = npm:[redacted]:0.99.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/doom-overlay/doom/build/doom.jsView on unpkg

examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = examples/extensions/doom-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

examples/extensions/doom-overlay/doom/build.shView file

•path = examples/extensions/doom-overlay/doom/build.sh kind = build_helper sizeBytes = 3366 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/extensions/doom-overlay/doom/build.shView on unpkg

dist/config.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/config.js#virtual:string-array:round1View on unpkg

dist/modes/interactive/interactive-mode.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/interactive/interactive-mode.jsView on unpkg

dist/utils/tools-manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/tools-manager.jsView on unpkg

dist/core/resolve-config-value.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/resolve-config-value.jsView on unpkg

examples/extensions/notify.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/notify.tsView on unpkg

dist/modes/rpc/rpc-client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/rpc/rpc-client.jsView on unpkg

examples/extensions/git-merge-and-resolve.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/git-merge-and-resolve.tsView on unpkg

examples/extensions/gondolin/index.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/gondolin/index.tsView on unpkg

dist/core/export-html/vendor/highlight.min.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/highlight.min.jsView on unpkg

dist/core/export-html/vendor/marked.min.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/marked.min.jsView on unpkg

dist/modes/interactive/components/settings-selector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/interactive/components/settings-selector.jsView on unpkg

examples/extensions/border-status-editor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/border-status-editor.tsView on unpkg

Source & flagged code

23 flagged

package.jsonView file

Lines 32-72json

32 "skills",

33 "agents",

34 "extensions",

35 "config",

36 "containerization.md",

37 "README.md",

38 "LICENSE",

39 "CHANGELOG.md",

40 "scripts"

41 ],

42 "scripts": {

43 "clean": "shx rm -rf dist",

44 "dev": "tsgo -p tsconfig.build.json --watch --preserveWatchOutput",

45 "build": "tsgo -p tsconfig.build.json && shx chmod +x dist/cli.js dist/rpc-entry.js && npm run copy-assets",

46 "check:ext": "tsgo -p tsconfig.ext.json --noEmit",

49 "copy-binary-assets": "shx cp package.json dist/ && shx cp README.md dist/ && shx cp CHANGELOG.md dist/ &&

50 "test": "vitest --run",

51 "prepublishOnly": "npm run clean && npm run build",

52 "postinstall": "node scripts/postinstall.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 },

54 "dependencies": {

55 "@ast-grep/napi": "0.45.3",

56 "@mariozechner/jiti": "^2.6.5",

57 "@modelcontextprotocol/sdk": "^1.29.0",

58 "@phi-code-admin/browser": "^1.0.7",

59 "@silvia-odwyer/photon-node": "0.3.4",

60 "chalk": "5.6.2",

61 "cli-highlight": "^2.1.11",

62 "cross-spawn": "7.0.6",

63 "diff": "8.0.4",

64 "extract-zip": "^2.0.1",

65 "file-type": "^21.1.1",

66 "glob": "13.0.6",

67 "grok-mermaid": "0.2.2",

68 "highlight.js": "10.7.3",

69 "hosted-git-info": "9.0.3",

70 "ignore": "7.0.5",

71 "jiti": "2.7.0",

72 "marked": "^15.0.12",

Long lines were clipped for display.

dist/core/exec.jsView file

Lines 1-23javascript

1/**

2 * Shared command execution utilities for extensions and custom tools.

3 */

4import { spawn } from "node:child_process";

5import { waitForChildProcess } from "../utils/child-process.js";

High

Child Process

Package source references child process execution.

dist/core/exec.jsView on unpkg · L3

extensions/phi/providers/execution.tsView file

Lines 64-104typescript

64 clearTimeout(timer);

65 try {

66 process.kill(-pid, "SIGKILL");

67 } catch {

68 /* group already gone */

69 }

examples/extensions/doom-overlay/doom-engine.tsView file

Lines 44-84typescript

44 return this._height;

45 }

47 async init(): Promise<void> {

48 // Locate WASM build

49 const __dirname = dirname(fileURLToPath

dist/utils/photon.jsView file

Lines 1-37javascript

1/**

2 * Photon image processing wrapper.

3 *

4 * This module provides a unified interface to @silvia-odwyer/photon-node that works in:

5 * 1. Node.js (development, npm run build)

6 * 2. Bun compiled binaries (standalone distribution)

7 *

8 * The challenge: photon-node's CJS entry uses fs.readFileSync(__dirname + '/photon_rs_bg.wasm')

9 * which bakes the build machine's absolute path into Bun compiled binaries.

10 *

dist/core/tools/edit-hashline.jsView file

Lines 1-21javascript

1import { createHash } from "crypto";

2// Local copy of edit-diff's fuzzy normalization, duplicated to avoid an

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/tools/edit-hashline.jsView on unpkg · L1

3// import cycle (edit-diff.ts imports this module for anchor recovery).

4function normalizeForFuzzyMatch(text) {

examples/extensions/doom-overlay/doom/build/doom.jsView file

Lines 1-22javascript

1var createDoomModule = (() => {

2 var _scriptName = typeof document != 'undefined' ? document.currentScript?.src : undefined;

examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = examples/extensions/doom-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

examples/extensions/doom-overlay/doom/build.shView file

•path = examples/extensions/doom-overlay/doom/build.sh kind = build_helper sizeBytes = 3366 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/extensions/doom-overlay/doom/build.shView on unpkg

dist/config.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/config.js#virtual:string-array:round1View on unpkg

dist/modes/interactive/interactive-mode.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/interactive/interactive-mode.jsView on unpkg

dist/utils/tools-manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/tools-manager.jsView on unpkg

dist/core/resolve-config-value.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/resolve-config-value.jsView on unpkg

examples/extensions/notify.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/notify.tsView on unpkg

dist/modes/rpc/rpc-client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/rpc/rpc-client.jsView on unpkg

examples/extensions/git-merge-and-resolve.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/git-merge-and-resolve.tsView on unpkg

examples/extensions/gondolin/index.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/gondolin/index.tsView on unpkg

dist/core/export-html/vendor/highlight.min.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/highlight.min.jsView on unpkg

dist/core/export-html/vendor/marked.min.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/marked.min.jsView on unpkg

dist/modes/interactive/components/settings-selector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/modes/interactive/components/settings-selector.jsView on unpkg

examples/extensions/border-status-editor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

examples/extensions/border-status-editor.tsView on unpkg

@phi-code-admin/phi-code@0.99.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code