@pippit-dev/cli@1.0.20: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@pippit-dev/cli@1.0.20: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/xyq-canvas-command-runtime.cjsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/xyq-canvas-command-runtime.cjs

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

scripts/telemetry.jsView file

1const os = require("os"); L2: const http = require("http");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/telemetry.jsView on unpkg · L1

scripts/skills.jsView file

12Install-time code directly mutates a foreign AI-agent control surface: L12: function defaultGlobalSkillsDir() { L13: return path.join(os.homedir(), ".agents", "skills"); L14: } Write operation from scripts/install.js: L122: L123: fs.mkdirSync(BIN_DIR, { recursive: true }); L124: ... L132: const extracted = path.join(tmpDir, NAME + (isWindows ? ".exe" : "")); L133: fs.copyFileSync(extracted, dest); L134: fs.chmodSync(dest, 0o755); Foreign user/project scope from scripts/skills.js: L12: function defaultGlobalSkillsDir() { L13: return path.join(os.homedir(), ".agents", "skills"); L14: }

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/skills.jsView on unpkg · L12

skills/xyq-nest-skill/scripts/submit_run.pyView file

•path = skills/xyq-nest-skill/scripts/submit_run.py kind = build_helper sizeBytes = 2374 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/xyq-nest-skill/scripts/submit_run.pyView on unpkg

scripts/canvas-command.jsView file

•matchType = normalized_sha256 matchedPackage = @pippit-dev/cli@1.0.21 matchedPath = scripts/canvas-command.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/canvas-command.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 262d551afea230fa signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @pippit-dev/cli@1.0.21 matchedPath = scripts/canvas-command.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.21 similarity = 1.000 shingleOverlap = 10 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/canvas-command.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @pippit-dev/cli@1.0.11 matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.11 similarity = 0.857 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/canvas-command.js

scripts/install.jsView file

•matchType = normalized_sha256 matchedPackage = @pippit-dev/cli@1.0.21 matchedPath = scripts/install.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install.jsView on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@pippit-dev/cli",

3 "version": "1.0.20",

4 "description": "Pippit CLI",

5 "bin": {

6 "pippit-tool-cli": "scripts/run.js"

7 },

8 "scripts": {

9 "postinstall": "node scripts/install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "prepack": "node scripts/prepare-canvas-runtime.js",

11 "prepare:canvas-runtime": "node scripts/prepare-canvas-runtime.js",

12 "test": "node scripts/version-check.test.js && node scripts/skills.test.js && node scripts/install-wizard.test.js && node scripts/canvas-command.test.js && node scripts/prepare-canvas-runtime.test.js && go test ./... && go vet ./...",

13 "verify:canvas-runtime": "node scripts/prepare-canvas-runtime.js --check-only"

14 },

15 "os": [

16 "darwin",

17 "linux",

18 "win32"

19 ],

20 "cpu": [

21 "x64",

22 "arm64"

23 ],

24 "engines": {

25 "node": ">=16"

26 },

27 "repository": {

28 "type": "git",

29 "url": "git+https://github.com/Pippit-dev/cli.git"

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

dist/xyq-canvas-command-runtime.cjsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/xyq-canvas-command-runtime.cjs

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

scripts/telemetry.jsView file

Lines 1-21javascript

1const os = require("os");

2const http = require("http");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/telemetry.jsView on unpkg · L1

3const

scripts/skills.jsView file

Lines 1-32javascript

1const fs = require("fs");

2const os = require("os");

3const path = require

skills/xyq-nest-skill/scripts/submit_run.pyView file

•path = skills/xyq-nest-skill/scripts/submit_run.py kind = build_helper sizeBytes = 2374 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/xyq-nest-skill/scripts/submit_run.pyView on unpkg

scripts/canvas-command.jsView file

•matchType = normalized_sha256 matchedPackage = @pippit-dev/cli@1.0.21 matchedPath = scripts/canvas-command.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/canvas-command.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 262d551afea230fa signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @pippit-dev/cli@1.0.21 matchedPath = scripts/canvas-command.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.21 similarity = 1.000 shingleOverlap = 10 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/canvas-command.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @pippit-dev/cli@1.0.11 matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.11 similarity = 0.857 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/canvas-command.js

scripts/install.jsView file

•matchType = normalized_sha256 matchedPackage = @pippit-dev/cli@1.0.21 matchedPath = scripts/install.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.21 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install.jsView on unpkg