@quanthermes/hermes-web-ui@0.6.32: Clean npm security report | LPM Firewall

Loading npm security reports…

@quanthermes/hermes-web-ui@0.6.32: Clean npm security report | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

Evidence against

package.json has no install/postinstall hook; prepare/prepublishOnly are publish/build scripts, not install-time execution for the shipped package.
bin/hermes-web-ui.mjs starts a local server, creates local token/PID/log files, and polls local /health only when the CLI is invoked.
bin/hermes-studio-mcp.mjs is a stdio MCP bridge to a configured local Hermes Web UI URL and reads local profile/token files for auth.
dist/server/index.js startup injects bundled skills/MCP entries but README documents managed MCP/profile injection and env flags to disable it.
Network use observed is package-aligned local UI/API traffic plus documented update/setup URLs, not credential exfiltration.
Scanner secret hit in dist/client/assets/js/index-u-8uTUZT.js is UI text/default credential messaging, not an embedded secret.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 65 file(s), 9.16 MB of source, external domains: 127.0.0.1, api.example.com, api.groq.com, api.openai.com, api.xiaomimimo.com, bugzilla.mozilla.org, chevrotain.io, code.google.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, developer.mozilla.org, developers.google.com, device.example.com, drafts.csswg.org, en.wikipedia.org, feross.org, github.com, googlechrome.github.io, hacks.mozilla.org, help.yahoo.com, hermes-web-ui.local, hermes.local, html.spec.whatwg.org, jed.is, json-schema.org, market.quant-speed.com, matrix.org, openspeech.bytedance.com, r12a.github.io, sass-lang.com, schema.org, socket.io, stackoverflow.com, support.google.com, tools.ietf.org, wiki.whatwg.org, www.bing.com, www.dmoz.org, www.iana.org, www.ietf.org, www.naiveui.com, www.w3.org, www.whatwg.org

Oversized source lightweight scan

dist/client/assets/js/mermaid-CWQI515T.js3.04 MB file, sampled 256 KB

NetworkChildProcessObfuscatedHighEntropyStringsMinifiedUrlStringschevrotain.iogithub.com

dist/client/assets/js/monaco-editor-YM0cdSGX.js4.08 MB file, sampled 256 KB

HighEntropyStringsMinifiedTelemetry

dist/client/assets/ts.worker-M1Aw0PPZ.js7.71 MB file, sampled 256 KB

FilesystemNetworkChildProcessShell

dist/server/index.js7.63 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVars

Source & flagged code

7 flagged · loading source

dist/client/assets/js/index-u-8uTUZT.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @quanthermes/hermes-web-ui@0.6.29 matchedIdentity = npm:[redacted]:0.6.29 similarity = 0.954 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/client/assets/js/index-u-8uTUZT.jsView on unpkg

1patternName = generic_password severity = medium line = 1 matchedText = import{a...in(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client/assets/js/index-u-8uTUZT.jsView on unpkg · L1

bin/hermes-web-ui.mjsView file

1Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, execution+network L1: #!/usr/bin/env node L2: import { spawn, execSync, execFileSync } from 'child_process' L3: import { resolve, dirname, join, delimiter } from 'path' ... L8: L9: const __dirname = dirname(fileURLToPath(import.meta.url)) L10: const __filename = fileURLToPath(import.meta.url) ... L12: const pkgDir = resolve(__dirname, '..') L13: const pkg = JSON.parse(readFileSync(resolve(pkgDir, 'package.json'), 'utf-8')) L14: const PACKAGE_NAME = pkg.name || 'hermes-web-ui' L15: const VERSION = pkg.version L16: const WEB_UI_HOME = process.env.HERMES_WEB_UI_HOME?.trim() L17: ? resolve(process.env.HERMES_WEB_UI_HOME.trim())

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/hermes-web-ui.mjsView on unpkg · L1

dist/server/agent-bridge/python/bridge_transport.pyView file

•path = dist/server/agent-bridge/python/bridge_transport.py kind = build_helper sizeBytes = 12497 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/server/agent-bridge/python/bridge_transport.pyView on unpkg

dist/client/favicon.icoView file

•path = dist/client/favicon.ico kind = high_entropy_blob sizeBytes = 685596 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/favicon.icoView on unpkg

dist/server/index.jsView file

•path = dist/server/index.js kind = oversized_source_file sizeBytes = 8005088 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server/index.jsView on unpkg

bin/hermes-studio-mcp.mjsView file

•matchType = package_source_clone_identity_mismatch matchedPackage = hermes-web-ui@0.6.22 matchedPath = bin/hermes-studio-mcp.mjs matchedIdentity = npm:aGVybWVzLXdlYi11aQ:0.6.22 similarity = 0.662 shingleOverlap = 43 summary = source files closely matched a different published package identity

High

Package Source Clone Identity Mismatch

Package source closely matches a different published package identity; review for dependency-confusion or copied-code abuse.

bin/hermes-studio-mcp.mjsView on unpkg

Source & flagged code

7 flagged

dist/client/assets/js/index-u-8uTUZT.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @quanthermes/hermes-web-ui@0.6.29 matchedIdentity = npm:[redacted]:0.6.29 similarity = 0.954 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/client/assets/js/index-u-8uTUZT.jsView on unpkg

1patternName = generic_password severity = medium line = 1 matchedText = import{a...in(`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client/assets/js/index-u-8uTUZT.jsView on unpkg · L1

bin/hermes-web-ui.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn, execSync, execFileSync } from 'child_process'

3import { resolve, dirname, join, delimiter } from 'path'

4import { fileURLToPath } from 'url'

5import { readFileSync, writeFileSync, unlinkSync, mkdirSync, openSync, chmodSync, statSync, existsSync, realpathSync } from 'fs'

6import { randomBytes, scryptSync } from 'crypto'

7import { homedir } from 'os'

8

9const __dirname = dirname(fileURLToPath(import.meta.url))

10const __filename = fileURLToPath(import.meta.url)

11const serverEntry = resolve(__dirname, '..', 'dist', 'server', 'index.js')

12const pkgDir = resolve(__dirname, '..')

13const pkg = JSON.parse(readFileSync(resolve(pkgDir, 'package.json'), 'utf-8'))

14const PACKAGE_NAME = pkg.name || 'hermes-web-ui'

15const VERSION = pkg.version

16const WEB_UI_HOME = process.env.HERMES_WEB_UI_HOME?.trim()

17 ? resolve(process.env.HERMES_WEB_UI_HOME.trim())

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/hermes-web-ui.mjsView on unpkg · L1

18 : resolve(homedir(), '.hermes-web-ui')

19const PID_DIR = WEB_UI_HOME

20const PID_FILE = join(PID_DIR, 'server.pid')

21const LOG_FILE = join(PID_DIR, 'server.log')

dist/server/agent-bridge/python/bridge_transport.pyView file

•path = dist/server/agent-bridge/python/bridge_transport.py kind = build_helper sizeBytes = 12497 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/server/agent-bridge/python/bridge_transport.pyView on unpkg

dist/client/favicon.icoView file

•path = dist/client/favicon.ico kind = high_entropy_blob sizeBytes = 685596 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/favicon.icoView on unpkg

dist/server/index.jsView file

•path = dist/server/index.js kind = oversized_source_file sizeBytes = 8005088 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/server/index.jsView on unpkg

bin/hermes-studio-mcp.mjsView file

•matchType = package_source_clone_identity_mismatch matchedPackage = hermes-web-ui@0.6.22 matchedPath = bin/hermes-studio-mcp.mjs matchedIdentity = npm:aGVybWVzLXdlYi11aQ:0.6.22 similarity = 0.662 shingleOverlap = 43 summary = source files closely matched a different published package identity

High

Package Source Clone Identity Mismatch

Package source closely matches a different published package identity; review for dependency-confusion or copied-code abuse.

bin/hermes-studio-mcp.mjsView on unpkg