@plumpslabs/fennec-core@1.16.4: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@plumpslabs/fennec-core@1.16.4: Suspicious npm security report | LPM Firewall

Source & flagged code

7 flagged · loading source

dist/chunk-T3QK5ZJV.jsView file

5// src/tools/debug/dap-transport.ts L6: import { spawn } from "child_process"; L7: import { connect } from "net";

High

Child Process

Package source references child process execution.

dist/chunk-T3QK5ZJV.jsView on unpkg · L5

dist/index.jsView file

25} from "@modelcontextprotocol/sdk/types.js"; L26: import { createServer } from "http"; L27: import { ZodError } from "zod"; ... L1008: const result = { L1009: base64: buffer.toString("base64"), L1010: width: clip?.width ?? viewport.width, ... L1615: category: "dom", L1616: description: "`<use_case>DOM inspection</use_case> \u{1F3F7}\uFE0F Get comprehensive page metadata: title, description, Open Graph tags (og:*), Twitter cards (twitter:*), canonical... L1617: inputSchema: z3.object({ ... L2718: suggestions: [ L2719: "localStorage may be restricted in private browsing or cross-origin contexts" L2720: ]

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L25

25Trigger-reachable chain: manifest.main -> dist/index.js L25: } from "@modelcontextprotocol/sdk/types.js"; L26: import { createServer } from "http"; L27: import { ZodError } from "zod"; ... L1008: const result = { L1009: base64: buffer.toString("base64"), L1010: width: clip?.width ?? viewport.width, ... L1615: category: "dom", L1616: description: "`<use_case>DOM inspection</use_case> \u{1F3F7}\uFE0F Get comprehensive page metadata: title, description, Open Graph tags (og:*), Twitter cards (twitter:*), canonical... L1617: inputSchema: z3.object({ ... L2718: suggestions: [ L2719: "localStorage may be restricted in private browsing or cross-origin contexts" L2720: ]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L25

•matchType = previous_version_dangerous_delta matchedPackage = @plumpslabs/fennec-core@1.15.3 matchedIdentity = npm:QHBsdW1wc2xhYnMvZmVubmVjLWNvcmU:1.15.3 similarity = 0.818 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

17988if (process.platform === "win32") { L17989: execFileSync2("powershell", [ L17990: "-Command",

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L17988

25Cross-file remote execution chain: dist/index.js spawns dist/cdp-engine-G7EQHF6T.js; helper contains network access plus dynamic code execution. L25: } from "@modelcontextprotocol/sdk/types.js"; L26: import { createServer } from "http"; L27: import { ZodError } from "zod"; ... L1008: const result = { L1009: base64: buffer.toString("base64"), L1010: width: clip?.width ?? viewport.width, ... L1615: category: "dom", L1616: description: "`<use_case>DOM inspection</use_case> \u{1F3F7}\uFE0F Get comprehensive page metadata: title, description, Open Graph tags (og:*), Twitter cards (twitter:*), canonical... L1617: inputSchema: z3.object({ ... L2718: suggestions: [ L2719: "localStorage may be restricted in private browsing or cross-origin contexts" L2720: ]

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L25

3073if (input.filePath) { L3074: const { writeFileSync: writeFileSync7 } = await import("fs"); L3075: const { resolve: resolve13 } = await import("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L3073

Source & flagged code

7 flagged

dist/chunk-T3QK5ZJV.jsView file

Lines 1-25javascript

1import {

2 getLogger

3} from "./chunk-GPGYLDVA.js";

4

5// src/tools/debug/dap-transport.ts

6import { spawn } from "child_process";

7import { connect } from "net";

High

Child Process

Package source references child process execution.

dist/chunk-T3QK5ZJV.jsView on unpkg · L5

8var DAPTransport = class {

9 mode;

10 options;

11 socket = null;

12 // net.Socket | ChildProcess stdio

13 childProcess = null;

14 seqCounter = 0;

15 pendingRequests = /* @__PURE__ */ new Map();

16 eventHandlers = /* @__PURE__ */ new Map();

17 buffer = "";

18 connected = false;

19 reconnectAttempts = 0;

20 timeoutMs;

21 constructor(mode, options, timeoutMs = 1e4) {

22 this.mode = mode;

23 this.options = options;

24 this.timeoutMs = timeoutMs;

25 }

dist/index.jsView file

25} from "@modelcontextprotocol/sdk/types.js"; L26: import { createServer } from "http"; L27: import { ZodError } from "zod"; ... L1008: const result = { L1009: base64: buffer.toString("base64"), L1010: width: clip?.width ?? viewport.width, ... L1615: category: "dom", L1616: description: "`<use_case>DOM inspection</use_case> \u{1F3F7}\uFE0F Get comprehensive page metadata: title, description, Open Graph tags (og:*), Twitter cards (twitter:*), canonical... L1617: inputSchema: z3.object({ ... L2718: suggestions: [ L2719: "localStorage may be restricted in private browsing or cross-origin contexts" L2720: ]

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L25

25Trigger-reachable chain: manifest.main -> dist/index.js L25: } from "@modelcontextprotocol/sdk/types.js"; L26: import { createServer } from "http"; L27: import { ZodError } from "zod"; ... L1008: const result = { L1009: base64: buffer.toString("base64"), L1010: width: clip?.width ?? viewport.width, ... L1615: category: "dom", L1616: description: "`<use_case>DOM inspection</use_case> \u{1F3F7}\uFE0F Get comprehensive page metadata: title, description, Open Graph tags (og:*), Twitter cards (twitter:*), canonical... L1617: inputSchema: z3.object({ ... L2718: suggestions: [ L2719: "localStorage may be restricted in private browsing or cross-origin contexts" L2720: ]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L25

•matchType = previous_version_dangerous_delta matchedPackage = @plumpslabs/fennec-core@1.15.3 matchedIdentity = npm:QHBsdW1wc2xhYnMvZmVubmVjLWNvcmU:1.15.3 similarity = 0.818 summary = stored previous version shares package body but lacks this dangerous source file