@roarpeng/graphflow@1.4.1: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@roarpeng/graphflow@1.4.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/safe-postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/core/dag-checkpoint.jsView file

18exports.computeDagId = computeDagId; L19: const logger_1 = require("../utils/logger"); L20: const hash_1 = require("../utils/hash");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/dag-checkpoint.jsView on unpkg · L18

scripts/safe-postinstall.cjsView file

1Install-time AI-agent control hijack evidence: L1: #!/usr/bin/env node L2: const { existsSync, mkdirSync, copyFileSync, readFileSync, writeFileSync, unlinkSync } = require("node:fs"); L3: const { join } = require("node:path"); ... L34: try { L35: writeFileSync(VERSION_FILE, version, "utf8"); L36: } catch { ... L130: L131: mkdirSync(skillDestDir, { recursive: true }); L132: copyFileSync(sk[redacted], skillDestFile); L133: ... L217: /** L218: * 获取 CLAUDE.md 源文件路径 Payload evidence from dist/integrations/agent-mcp-installer.js: L16: exports.formatModelConfigGuide = formatModelConfigGuide; L17: const node_child_process_1 = require("node:child_process"); L18: const node_fs_1 = require("node:fs"); ... L21: function isWindows() { L22: return process.platform === "win32"; L23: } ... L54: try { L5

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/safe-postinstall.cjsView on unpkg · L1

wasm/tree-sitter-go.wasmView file

•path = wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/tree-sitter-go.wasmView on unpkg

dist/config/loader.jsView file

•matchType = normalized_sha256 matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/config/loader.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config/loader.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = a7738f6197cda36d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/config/loader.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 shingleOverlap = 102 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/config/loader.jsView on unpkg

dist/integrations/agent-mcp-installer.jsView file

•matchType = normalized_sha256 matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/integrations/agent-mcp-installer.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/integrations/agent-mcp-installer.jsView on unpkg

dist/surfaces/cli/runtime/graph.jsView file

•matchType = normalized_sha256 matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/surfaces/cli/runtime/graph.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/surfaces/cli/runtime/graph.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 11-51json

11 "src/surfaces/trae-skill",

12 "src/surfaces/cursor-rules",

13 "README.md",

14 "LICENSE",

15 "CHANGELOG.md",

16 "AGENTS.md",

17 "CLAUDE.md"

18 ],

19 "packageManager": "npm@10.9.2",

20 "description": "**A Context-Aware Multi-Agent Orchestration Engine**",

21 "main": "dist/index.js",

22 "types": "dist/index.d.ts",

23 "bin": {

24 "graphflow": "dist/surfaces/cli/index.js",

25 "graphflow-mcp": "dist/surfaces/mcp/server.js"

26 },

27 "directories": {

28 "doc": "docs"

29 },

30 "scripts": {

31 "postinstall": "node scripts/safe-postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

32 "prepublishOnly": "npm run build",

33 "wasm:bundle": "node scripts/bundle-wasm-grammars.cjs",

34 "wasm:download": "node scripts/bundle-wasm-grammars.cjs",

35 "test": "vitest run",

36 "build": "npm run wasm:bundle && tsc -p tsconfig.json && node scripts/copy-assets.cjs",

37 "test:watch": "vitest",

38 "start": "tsx src/surfaces/cli/index.ts",

39 "start:mcp": "tsx src/surfaces/mcp/server.ts",

40 "benchmark": "tsx benchmarks/run-token-benchmark.ts",

41 "lint": "eslint .",

42 "build:extension": "npm --prefix vscode-extension run build",

43 "test:extension": "npm --prefix vscode-extension run test:runtime",

44 "package:extension": "npm --prefix vscode-extension run package",

45 "ci": "npm run lint && npm run build && npm test && npm run build:extension && npm run test:extension",

46 "prepare": "husky"

47 },

48 "lint-staged": {

49 "*.ts": "eslint --fix"

50 },

51 "repository": {

dist/core/dag-checkpoint.jsView file

Lines 1-38javascript

1"use strict";

2/**

3 * dag-checkpoint.ts — DAG 执行状态持久化（Checkpoint）

4 *

5 * 在每个 DAG 节点执行完成后，将节点状态（id, status, result, retryCount, executedAt）

6 * 持久化到图存储中（作为 TaskRun 类型的 GraphNode）。

7 *

8 * Checkpoint ID 使用 `dag:${taskHash}` 格式：

9 * - taskHash 由 DAG 计划（节点 id / 描述 / 依赖）计算得出，保证同一计划可恢复。

10 * - 整个 DAG 的 checkpoint 以单个 TaskRun GraphNode 的形式存储，content 字段为 JSON。

scripts/safe-postinstall.cjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2const { existsSync, mkdirSync, copyFileSync, readFileSync, writeFileSync, unlinkSync } = require("node:fs");

3const { join }

wasm/tree-sitter-go.wasmView file

•path = wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

wasm/tree-sitter-go.wasmView on unpkg

dist/config/loader.jsView file

•matchType = normalized_sha256 matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/config/loader.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config/loader.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = a7738f6197cda36d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/config/loader.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 shingleOverlap = 102 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/config/loader.jsView on unpkg

dist/integrations/agent-mcp-installer.jsView file

•matchType = normalized_sha256 matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/integrations/agent-mcp-installer.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/integrations/agent-mcp-installer.jsView on unpkg

dist/surfaces/cli/runtime/graph.jsView file

•matchType = normalized_sha256 matchedPackage = @roarpeng/graphflow@1.4.0 matchedPath = dist/surfaces/cli/runtime/graph.js matchedIdentity = npm:QHJvYXJwZW5nL2dyYXBoZmxvdw:1.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/surfaces/cli/runtime/graph.jsView on unpkg