@quanthermes/hermes-web-ui@0.6.29: Clean npm security report | LPM Firewall

Loading npm security reports…

@quanthermes/hermes-web-ui@0.6.29: Clean npm security report | LPM Firewall

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

bin/hermes-web-ui.mjs uses child_process to start/stop a local daemon and can kill processes on configured ports.
bin/hermes-studio-mcp.mjs exposes MCP tools that proxy authenticated requests to the local Hermes Web UI API.
dist/server/index.js contains coding-agent and MCP integration code, including config/token writes under Hermes profile state.

Evidence against

package.json has prepare/prepublishOnly build scripts but no install/postinstall hook for registry install-time execution.
bin/hermes-web-ui.mjs only runs when the CLI is invoked and starts dist/server/index.js locally on user-selected/default ports.
bin/hermes-studio-mcp.mjs defaults to http://127.0.0.1:8648 and reads local Hermes tokens; no hardcoded exfiltration endpoint was found in the MCP entrypoint.
dist/server/agent-bridge/python/bridge_transport.py launches local Hermes bridge workers and explicitly removes ANTHROPIC_AUTH_TOKEN from worker env.
Network endpoints inspected are product-aligned model/OAuth/update/local API endpoints, not covert collection sinks.
High-entropy favicon and large bundled client/server assets are normal build artifacts for this web UI package.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 65 file(s), 9.14 MB of source, external domains: 127.0.0.1, api.example.com, api.groq.com, api.openai.com, api.xiaomimimo.com, bugzilla.mozilla.org, chevrotain.io, code.google.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, developer.mozilla.org, developers.google.com, device.example.com, drafts.csswg.org, en.wikipedia.org, feross.org, github.com, googlechrome.github.io, hacks.mozilla.org, help.yahoo.com, hermes-web-ui.local, hermes.local, html.spec.whatwg.org, jed.is, json-schema.org, market.quant-speed.com, matrix.org, openspeech.bytedance.com, r12a.github.io, sass-lang.com, schema.org, socket.io, stackoverflow.com, support.google.com, tools.ietf.org, wiki.whatwg.org, www.bing.com, www.dmoz.org, www.iana.org, www.ietf.org, www.naiveui.com, www.w3.org, www.whatwg.org

Oversized source lightweight scan

dist/client/assets/js/mermaid-CWQI515T.js3.04 MB file, sampled 256 KB

NetworkChildProcessObfuscatedHighEntropyStringsMinifiedUrlStringschevrotain.iogithub.com

dist/client/assets/js/monaco-editor-YM0cdSGX.js4.08 MB file, sampled 256 KB

HighEntropyStringsMinifiedTelemetry

dist/client/assets/ts.worker-M1Aw0PPZ.js7.71 MB file, sampled 256 KB

FilesystemNetworkChildProcessShell

dist/server/index.js7.62 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVars

Source & flagged code

6 flagged · loading source

dist/client/assets/js/index-C2zXGx0b.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @quanthermes/hermes-web-ui@0.6.28 matchedIdentity = npm:[redacted]:0.6.28 similarity = 0.875 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/client/assets/js/index-C2zXGx0b.jsView on unpkg

1patternName = generic_password severity = medium line = 1 matchedText = import{a...in(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client/assets/js/index-C2zXGx0b.jsView on unpkg · L1

bin/hermes-web-ui.mjsView file

1Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, execution+network L1: #!/usr/bin/env node L2: import { spawn, execSync, execFileSync } from 'child_process' L3: import { resolve, dirname, join, delimiter } from 'path' ... L8: L9: const __dirname = dirname(fileURLToPath(import.meta.url)) L10: const __filename = fileURLToPath(import.meta.url) ... L12: const pkgDir = resolve(__dirname, '..') L13: const pkg = JSON.parse(readFileSync(resolve(pkgDir, 'package.json'), 'utf-8')) L14: const PACKAGE_NAME = pkg.name || 'hermes-web-ui' L15: const VERSION = pkg.version L16: const WEB_UI_HOME = process.env.HERMES_WEB_UI_HOME?.trim() L17: ? resolve(process.env.HERMES_WEB_UI_HOME.trim())

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/hermes-web-ui.mjsView on unpkg · L1

dist/server/agent-bridge/python/bridge_transport.pyView file

•path = dist/server/agent-bridge/python/bridge_transport.py kind = build_helper sizeBytes = 12497 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/server/agent-bridge/python/bridge_transport.pyView on unpkg

dist/client/favicon.icoView file

•path = dist/client/favicon.ico kind = high_entropy_blob sizeBytes = 685596 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/favicon.icoView on unpkg

dist/server/index.jsView file

•path = dist/server/index.js kind = oversized_source_file sizeBytes = 7995356 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server/index.jsView on unpkg

Source & flagged code

6 flagged

dist/client/assets/js/index-C2zXGx0b.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @quanthermes/hermes-web-ui@0.6.28 matchedIdentity = npm:[redacted]:0.6.28 similarity = 0.875 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/client/assets/js/index-C2zXGx0b.jsView on unpkg

1patternName = generic_password severity = medium line = 1 matchedText = import{a...in(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client/assets/js/index-C2zXGx0b.jsView on unpkg · L1

bin/hermes-web-ui.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn, execSync, execFileSync } from 'child_process'

3import { resolve, dirname, join, delimiter } from 'path'

4import { fileURLToPath } from 'url'

5import { readFileSync, writeFileSync, unlinkSync, mkdirSync, openSync, chmodSync, statSync, existsSync, realpathSync } from 'fs'

6import { randomBytes, scryptSync } from 'crypto'

7import { homedir } from 'os'

8

9const __dirname = dirname(fileURLToPath(import.meta.url))

10const __filename = fileURLToPath(import.meta.url)

11const serverEntry = resolve(__dirname, '..', 'dist', 'server', 'index.js')

12const pkgDir = resolve(__dirname, '..')

13const pkg = JSON.parse(readFileSync(resolve(pkgDir, 'package.json'), 'utf-8'))

14const PACKAGE_NAME = pkg.name || 'hermes-web-ui'

15const VERSION = pkg.version

16const WEB_UI_HOME = process.env.HERMES_WEB_UI_HOME?.trim()

17 ? resolve(process.env.HERMES_WEB_UI_HOME.trim())

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/hermes-web-ui.mjsView on unpkg · L1

18 : resolve(homedir(), '.hermes-web-ui')

19const PID_DIR = WEB_UI_HOME

20const PID_FILE = join(PID_DIR, 'server.pid')

21const LOG_FILE = join(PID_DIR, 'server.log')

dist/server/agent-bridge/python/bridge_transport.pyView file

•path = dist/server/agent-bridge/python/bridge_transport.py kind = build_helper sizeBytes = 12497 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/server/agent-bridge/python/bridge_transport.pyView on unpkg

dist/client/favicon.icoView file

•path = dist/client/favicon.ico kind = high_entropy_blob sizeBytes = 685596 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/favicon.icoView on unpkg

dist/server/index.jsView file

•path = dist/server/index.js kind = oversized_source_file sizeBytes = 7995356 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server/index.jsView on unpkg