@qwen-code/qwen-code: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@qwen-code/qwen-code: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

17 flagged · loading source

chunks/tree-sitter-bash-VEJGF5XF.jsView file

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

chunks/tree-sitter-bash-VEJGF5XF.jsView on unpkg · L8

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Secret Pattern

AWS access key ID in chunks/tree-sitter-bash-VEJGF5XF.js

chunks/tree-sitter-bash-VEJGF5XF.jsView on unpkg · L8

chunks/chunk-BKNPMEN6.jsView file

93init_esbuild_shims(); L94: import { spawn } from "node:child_process"; L95: import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

chunks/chunk-BKNPMEN6.jsView on unpkg · L93

296const args = [ L297: ...process.execArgv.filter((a) => !/^--inspect(-brk)?($|=)/.test(a)), L298: cliEntryPath,

High

Shell

Package source references shell execution.

chunks/chunk-BKNPMEN6.jsView on unpkg · L296

chunks/chunk-ANRANWVE.jsView file

3201sourceCode = this.opts.code.process(sourceCode, sch); L3202: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L3203: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

chunks/chunk-ANRANWVE.jsView on unpkg · L3201

chunks/chunk-HD6EGS5K.jsView file

92try { L93: const module = await import(entrySpecifier); L94: const plugin = module.plugin;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

chunks/chunk-HD6EGS5K.jsView on unpkg · L92

chunks/workflow-G7U6OQWS.jsView file

287} L288: const envSec = Number(process.env["QWEN_CODE_MAX_WORKFLOW_SECONDS"]); L289: if (Number.isFinite(envSec) && envSec > 0) return envSec * 1e3; ... L436: // cannot reach host process. L437: globalThis.args = __b.argsJson === null ? undefined : JSON.parse(__b.argsJson); L438:

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

chunks/workflow-G7U6OQWS.jsView on unpkg · L287

chunks/chunk-W4UN42YP.jsView file

433type: "history_truncated", L434: data: { L435: reason: "replay_window_exceeded", ... L533: if (typeof sourceId !== "string" || sourceId.length === 0 || sourceId.length > MAX_SESSION_SOURCE_ID_LENGTH || [...sourceId].some((character) => { L534: const code = character.charCodeAt(0); L535: return code <= 31 || code === 127; ... L646: L647: // packages/acp-bridge/src/internal/stderrLine.ts L648: init_esbuild_shims(); ... L5076: function isServeDebugLoggingEnabled() { L5077: const value = process.env["QWEN_SERVE_DEBUG"]; L5078: if (!value) return false;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

chunks/chunk-W4UN42YP.jsView on unpkg · L433

chunks/chunk-WIYV7CSF.jsView file

6import { L7: require_undici L8: } from "./chunk-L573Z2QZ.js"; ... L33: import { Readable, Transform } from "node:stream"; L34: import { spawn, execFile } from "node:child_process"; L35: import { pipeline } from "node:stream/promises"; ... L40: var RELEASE_PUBLIC_KEY_DER_B64 = "[redacted]="; L41: function verifySignature(sha256sumsContent, signatureBase64) { L42: const key = createPublicKey({ ... L128: const text = await response.text(); L129: const requireSig = process.env["QWEN_REQUIRE_SIGNATURE"] === "1"; L130: let sigResponse;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

chunks/chunk-WIYV7CSF.jsView on unpkg · L6

chunks/chunk-OBSLEYCD.jsView file

19import * as path from "node:path"; L20: import * as childProcess from "node:child_process"; L21: var PackageManager = /* @__PURE__ */ ((PackageManager2) => { ... L34: var debugLogger = createDebugLogger("INSTALLATION_INFO"); L35: var STANDALONE_UNIX_INSTALLER = "https://qwen-code-assets.oss-cn-hangzhou.aliyuncs.com/installation/install-qwen-standalone.sh"; L36: var STANDALONE_WINDOWS_INSTALLER = "https://qwen-code-assets.oss-cn-hangzhou.aliyuncs.com/installation/install-qwen-standalone.ps1"; L37: function getStandaloneInstallerUrl() { L38: return process.platform === "win32" ? STANDALONE_WINDOWS_INSTALLER : STANDALONE_UNIX_INSTALLER; L39: } ... L87: const normalizedProjectRoot = projectRoot?.replace(/\\/g, "/"); L88: const isGit = isGitRepository(process.cwd()); L89: if (isGit && norm

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

chunks/chunk-OBSLEYCD.jsView on unpkg · L19

chunks/chunk-GCY7QTCE.jsView file

•context = debugLogger13.warn(\n `invalid cursor signing key at ${keyPath}; replacing persisted key`\n );\n return void 0;\n } catch (error) {\n if (error.code === "ENOENT") {\n return void 0;\n }\n throw error;\n }\n}\n__name(readCursorHmacKey, "readCursorHmacKey");\nfunction writeCursorHmacKey(keyPath, key) {\n const encoded = `${key.toString("base64url")}\n`;\n fs9.mkdirSync(path9.dirname(keyPath), { recursive: true, mode: 448 });\n try {\n const fd = fs9.openSync(keyPath, "wx", 384);\n try {\n fs9.writeFileSync(fd, encoded, "utf8");\n } finally {\n fs9.closeSync(fd);\n }\n } catch (error) {\n if (error.code === "EEXIST") {\n const existing = readCursorHmacKey(keyPath);\n if (existing) {\n return existing;\n }\

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

chunks/chunk-GCY7QTCE.jsView on unpkg

chunks/chunk-NALRQ3SG.jsView file

218init_esbuild_shims(); L219: var exec = __require("child_process").exec; L220: var execSync = __require("child_process").execSync; ... L378: }; L379: function findModelConfig(modelProviders, providerProtocol, authType, modelId, baseUrl) { L380: if (!modelProviders || !modelId) { ... L2614: const entries = JSON.parse( L2615: readFileSync(sessionsPath2, "utf-8") L2616: );

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

chunks/chunk-NALRQ3SG.jsView on unpkg · L218

chunks/chunk-GEHSF7MS.jsView file

41Cross-file remote execution chain: chunks/chunk-GEHSF7MS.js spawns chunks/devtools-4QFYJT6U.js; helper contains network access plus dynamic code execution. L41: ]; L42: if (process.platform !== "win32") { L43: module.exports.push( ... L190: } L191: process14.exitCode = code || /* istanbul ignore next */ L192: 0; ... L566: function formatProdErrorMessage(code) { L567: var url = "https://react.dev/errors/" + code; L568: if (1 < arguments.length) { ... L1456: controller: new AbortControllerLocal(), L1457: data: /* @__PURE__ */ new Map(), L1458: refCount: 0

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

chunks/chunk-GEHSF7MS.jsView on unpkg · L41

vendor/ripgrep/x64-darwin/rgView file

•path = vendor/ripgrep/x64-darwin/rg kind = native_binary sizeBytes = 4742676 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/ripgrep/x64-darwin/rgView on unpkg

vendor/tree-sitter/tree-sitter.wasmView file

•path = vendor/tree-sitter/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/tree-sitter/tree-sitter.wasmView on unpkg

web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

chunks/chunk-CPU6I5YV.jsView file

•path = chunks/chunk-CPU6I5YV.js kind = oversized_source_file sizeBytes = 2965055 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

chunks/chunk-CPU6I5YV.jsView on unpkg