@pixelzx/genesis@2026.7.9: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@pixelzx/genesis@2026.7.9: Clean npm security report (Allow) | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json defines preinstall/postinstall/prepare lifecycle hooks
postinstall can prune/write package-owned dist files and patch package-owned node_modules hotfixes
prepare can set git core.hooksPath, but only inside a git worktree

Evidence against

scripts/preinstall-package-manager-warning.mjs only emits a package-manager warning
scripts/postinstall-bundled-plugins.mjs confines writes to packageRoot dist/dist-node_modules paths with realpath/symlink escape checks
network install in postinstall is disabled unless GENESIS_EAGER_BUNDLED_PLUGIN_DEPS=1 and uses npm install --ignore-scripts
genesis.mjs and dist/index.js defer CLI behavior to explicit user invocation
scanner secret hit in dist/src-P6XCd0n3.js is bundled crypto/private-key parsing code, not a hardcoded secret
Trojan-source check found no bidi/invisible control bytes in dist/control-ui/assets/index-rW3Q6M8T.js

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4,136 file(s), 34.9 MB of source, external domains: 127.0.0.1, 169.254.169.254, 192.168.1.100, a.co, accounts.feishu.cn, accounts.google.com, accounts.larksuite.com, adaptivecards.microsoft.com, ai-gateway.vercel.sh, ai.azure.com, aiplatform.googleapis.com, aistudio.google.com, aka.ms, albumart.url, api-data.line.me, api.anthropic.com, api.arcee.ai, api.botframework.azure.cn, api.botframework.com, api.botframework.us, api.chutes.ai, api.deepgram.com, api.deepseek.com, api.dev.runwayml.com, api.elevenlabs.io, api.exa.ai, api.example.com, api.firecrawl.dev, api.fireworks.ai, api.github.com, api.githubcopilot.com, api.gradium.ai, api.groq.com, api.individual.githubcopilot.com, api.kilo.ai, api.kimi.com, api.line.me, api.mainnet-beta.solana.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.perplexity.ai, api.plivo.com, api.pluralkit.me, api.push.apple.com, api.sandbox.push.apple.com, api.search.brave.com

Oversized source lightweight scan

dist/extensions/diagnostics-otel/index.js2.16 MB file, sampled 256 KB

FilesystemEnvironmentVarsHighEntropyStrings

dist/extensions/diffs/assets/viewer-runtime.js9.37 MB file, sampled 256 KB

HighEntropyStrings

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/preinstall-package-manager-warning.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/src-P6XCd0n3.jsView file

1400patternName = private_key_rsa severity = critical line = 1400 matchedText = if (type...g");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src-P6XCd0n3.jsView on unpkg · L1400

1400patternName = private_key_rsa severity = critical line = 1400 matchedText = if (type...g");

Critical

Secret Pattern

RSA private key in dist/src-P6XCd0n3.js

dist/src-P6XCd0n3.jsView on unpkg · L1400

dist/pw-ai-0pXpMgfG.jsView file

1749const previousUrl = page.url(); L1750: const elementEvaluator = new Function("el", "args", ` L1751: "use strict";

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/pw-ai-0pXpMgfG.jsView on unpkg · L1749

dist/channel.runtime-DVr4sNnj.jsView file

11import { t as createLoggerBackedRuntime } from "./runtime-logger-CQdLrD-f.js"; L12: import { d as [redacted] } from "./ssrf-policy-ChAc-ige.js"; L13: import "./ssrf-runtime-DXdCQqiX.js"; ... L21: import { n as require_dist_cjs$61, r as require_dist_cjs$63, t as require_dist_cjs$62 } from "./dist-cjs-DCiNoqxZ.js"; L22: import { _ as fromBase64$5, a as NumericValue$3, c as _parseEpochTimestamp$3, d as quoteHeader$3, f as LazyJsonString$3, g as fromUtf8$3, h as toBase64$5, i as sdkStreamMixin$2, l ... L23: import * as path$1 from "node:path"; ... L257: //#region extensions/tlon/src/urbit/fetch.ts L258: async function urbitFetch(params) { L259: const validated = validateUrbitBaseUrl(params.baseUrl); ... L282: headers: { "Content-Type": "application/x-www-form-urlencoded" }, L283: body: ne

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/channel.runtime-DVr4sNnj.jsView on unpkg · L11

4631const util_base64_1 = require_dist_cjs$51(); L4632: const stream_1$4 = __require("stream"); L4633: var ChecksumStream = class extends stream_1$4.Duplex {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/channel.runtime-DVr4sNnj.jsView on unpkg · L4631

dist/dist-C-xbWq3m.jsView file

6import crypto$1 from "node:crypto"; L7: import WebSocket from "ws"; L8: import EventEmitter from "events"; ... L391: type: FriendEventType.UNKNOWN, L392: data: JSON.stringify(data), L393: threadId: "", ... L707: const floor = Math.floor; L708: const stringFromCharCode = String.fromCharCode; L709: /** L710: * A generic error utility function. L711: * @private L712: * @param {String} type The error type.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/dist-C-xbWq3m.jsView on unpkg · L6

dist/control-ui/assets/index-rW3Q6M8T.jsView file

3contains invisible/control Unicode U+FEFF (zero width no-break space) `?(se++,ce=0):e?ce+=e.length:ce++,e&&(oe+=e.length),e}var ve={default:function(){switch(B){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case`<U+FEFF>`:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-rW3Q6M8T.jsView on unpkg · L3

skills/model-usage/scripts/test_model_usage.pyView file

•path = skills/model-usage/scripts/test_model_usage.py kind = build_helper sizeBytes = 1310 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/test_model_usage.pyView on unpkg

dist/control-ui/favicon.icoView file

•path = dist/control-ui/favicon.ico kind = high_entropy_blob sizeBytes = 6436 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/control-ui/favicon.icoView on unpkg

dist/extensions/diagnostics-otel/index.jsView file

•path = dist/extensions/diagnostics-otel/index.js kind = oversized_source_file sizeBytes = 2267180 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/extensions/diagnostics-otel/index.jsView on unpkg

dist/dist-CrElCXKU.jsView file

5170patternName = generic_password severity = medium line = 5170 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-CrElCXKU.js

dist/dist-CrElCXKU.jsView on unpkg · L5170

12559patternName = generic_password severity = medium line = 12559 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in dist/dist-CrElCXKU.js

dist/dist-CrElCXKU.jsView on unpkg · L12559