@senguoyun/dsh-arkme: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@senguoyun/dsh-arkme: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

lib/extension-profile-restart-helper.jsView file

4import { join, relative, resolve } from "node:path"; L5: import { spawn, spawnSync } from "node:child_process"; L6: import { readFile, rm, unlink } from "node:fs/promises";

High

Child Process

Package source references child process execution.

lib/extension-profile-restart-helper.jsView on unpkg · L4

lib/persistent-runtime-DDAQHAHi.jsView file

1import { r as securePrivateFile, t as securePrivateDirectory } from "./private-filesystem-CGh4FtyA.js"; L2: import { createRequire } from "node:module"; L3: import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicKey, randomBytes, randomUUID, timingSafeEqual, verify } from "node:crypto"; L4: import { chmodSync, constants, createReadStream, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node... L5: import minpath, { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path"; L6: import { execFile } from "node:child_process"; L7: import { Readable } from "node:stream"; ... L11: import { fileURLToPath, fileURLToPath as urlToPath } from "node:url"; L12: import {

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

lib/persistent-runtime-DDAQHAHi.jsView on unpkg · L1

•Trigger-reachable chain: manifest.main -> lib/index.js -> lib/persistent-runtime-DDAQHAHi.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

lib/persistent-runtime-DDAQHAHi.jsView on unpkg

102372]; L102373: const closure = new Function(...parameters, `return (async () => {\n${spec.code}\n})()`); L102374: const harness = new Proxy({}, { get(_target, property) {

High

Eval

Package source references dynamic code evaluation.

lib/persistent-runtime-DDAQHAHi.jsView on unpkg · L102372

lib/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. lib/index.js: import { chmodSync, closeSync, constants, createReadStream, createWriteStream, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathS... import { appendFile, chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises"; import { createInterface } from "node:readline"; * Session implementation lives here. The allowlist is an authorization boundary. */ function registerManagedTurnFunding(ctx, intelligentBaseUrl) { if (!(await fetch(`${intelligentBaseUrl.replace(/\/+$/, "")}/api/v1/managed-ai/operations/close`, { Autho

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

lib/index.jsView on unpkg

1import { A as inspectNativeBundleArtifactV3, At as recordOwnerId, Bt as __exportAll, Ct as recordingImportFileNameKey, D as bundleSha256, E as arkmeSandboxEntryId, Et as registerMa... L2: import { i as securePrivateFileSync, n as securePrivateDirectorySync, r as securePrivateFile, t as securePrivateDirectory } from "./private-filesystem-CGh4FtyA.js"; L3: import { _ as parsePluginUpdateManifest, b as [redacted], d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginAr... ... L7: import { createRequire } from "node:module"; L8: import WebSocket$2, { WebSocket as WebSocket$1, WebSocketServer } from "ws"; L9: import { createCipheriv, createDecipheriv, createHash, createHmac, getCiphers, randomBytes, randomUUID } from "node:crypto"; L10: import { c

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

lib/index.jsView on unpkg · L1

lib/plugin-updater-helper-dNxHpiVg.jsView file

647function restartDsh(plan) { L648: const child = spawn(plan.execPath, plan.restartArgv, { L649: detached: true, L650: env: { L651: ...process.env, L652: DSH_HOME: plan.dshHome ... L661: try { L662: const response = await fetch(new URL("/", plan.healthUrl), { signal: AbortSignal.timeout(2e3) }); L663: return response.ok || response.status === 401 || response.status === 403;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/plugin-updater-helper-dNxHpiVg.jsView on unpkg · L647

assets/windows/arkme-credential-helper.exeView file

•path = assets/windows/arkme-credential-helper.exe kind = native_binary sizeBytes = 2024816 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

assets/windows/arkme-credential-helper.exeView on unpkg

lib/client.jsView file

•path = lib/client.js kind = oversized_source_file sizeBytes = 10251073 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

lib/client.jsView on unpkg

assets/desktop_call/bundle.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/desktop_call/bundle.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @senguoyun/dsh-arkme@0.1.52 matchedPath = assets/desktop_call/bundle.js matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/desktop_call/bundle.jsView on unpkg

Source & flagged code

13 flagged

lib/extension-profile-restart-helper.jsView file

Lines 1-24javascript

1import { i as prepareProfilePackageManager, r as localExtensionPnpmArgs, t as applyArkmeProfileBundlePolicy } from "./profile-bundle-policy-8_y3QfHe.js";

2import { t as ArkmeExtensionInstallStore } from "./install-store-D8GVqUOm.js";

3import { closeSync, openSync } from "node:fs";

4import { join, relative, resolve } from "node:path";

5import { spawn, spawnSync } from "node:child_process";

6import { readFile, rm, unlink } from "node:fs/promises";

High

Child Process

Package source references child process execution.

lib/extension-profile-restart-helper.jsView on unpkg · L4

7import { fileURLToPath } from "node:url";

8//#region src/extensions/profile-restart-helper.ts

9const PARENT_EXIT_TIMEOUT_MS = 2e4;

10const HEALTH_TIMEOUT_MS = 45e3;

11function stringValue(value) {

12 return typeof value === "string" && value.trim() !== "" && value.length <= 4096 ? value : void 0;

13}

14function isPluginUpdateRestartPlan(value) {

15 return value !== null && typeof value === "object" && !Array.isArray(value) && typeof value.targetArtifactPath === "string" && typeof value.targetVersion ===

16}

17function parseExtensionProfileRestartPlan(value) {

18 if (value === null || typeof value !== "object") throw new Error("extension restart plan must be an object");

19 const source = value;

20 const plan = {

21 schemaVersion: source.schemaVersion,

22 parentPid: source.parentPid,

23 execPath: stringValue(source.execPath),

24 dshBinPath: stringValue(source.dshBinPath),

lib/persistent-runtime-DDAQHAHi.jsView file

1import { r as securePrivateFile, t as securePrivateDirectory } from "./private-filesystem-CGh4FtyA.js"; L2: import { createRequire } from "node:module"; L3: import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicKey, randomBytes, randomUUID, timingSafeEqual, verify } from "node:crypto"; L4: import { chmodSync, constants, createReadStream, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node... L5: import minpath, { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path"; L6: import { execFile } from "node:child_process"; L7: import { Readable } from "node:stream"; ... L11: import { fileURLToPath, fileURLToPath as urlToPath } from "node:url"; L12: import {

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

lib/persistent-runtime-DDAQHAHi.jsView on unpkg · L1

•Trigger-reachable chain: manifest.main -> lib/index.js -> lib/persistent-runtime-DDAQHAHi.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

lib/persistent-runtime-DDAQHAHi.jsView on unpkg

102372]; L102373: const closure = new Function(...parameters, `return (async () => {\n${spec.code}\n})()`); L102374: const harness = new Proxy({}, { get(_target, property) {

lib/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. lib/index.js: import { chmodSync, closeSync, constants, createReadStream, createWriteStream, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathS... import { appendFile, chmod as chmod$1, mkdir, open, readFile, readdir, realpath, rename, rm, stat, unlink, writeFile } from "node:fs/promises"; import { createInterface } from "node:readline"; * Session implementation lives here. The allowlist is an authorization boundary. */ function registerManagedTurnFunding(ctx, intelligentBaseUrl) { if (!(await fetch(`${intelligentBaseUrl.replace(/\/+$/, "")}/api/v1/managed-ai/operations/close`, { Autho

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

lib/index.jsView on unpkg

1import { A as inspectNativeBundleArtifactV3, At as recordOwnerId, Bt as __exportAll, Ct as recordingImportFileNameKey, D as bundleSha256, E as arkmeSandboxEntryId, Et as registerMa... L2: import { i as securePrivateFileSync, n as securePrivateDirectorySync, r as securePrivateFile, t as securePrivateDirectory } from "./private-filesystem-CGh4FtyA.js"; L3: import { _ as parsePluginUpdateManifest, b as [redacted], d as writePluginUpdateLifecycleLog, f as PluginUpdateInstallStateStore, g as existingCachedPluginAr... ... L7: import { createRequire } from "node:module"; L8: import WebSocket$2, { WebSocket as WebSocket$1, WebSocketServer } from "ws"; L9: import { createCipheriv, createDecipheriv, createHash, createHmac, getCiphers, randomBytes, randomUUID } from "node:crypto"; L10: import { c

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

lib/index.jsView on unpkg · L1

lib/plugin-updater-helper-dNxHpiVg.jsView file

Lines 627-667javascript

627 try {

628 reconcilePluginUpdaterProfilePolicy(plan);

629 return {

630 packageRestored: true,

631 profilePolicyRestored: true

632 };

633 } catch {

assets/windows/arkme-credential-helper.exeView file

•path = assets/windows/arkme-credential-helper.exe kind = native_binary sizeBytes = 2024816 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

assets/windows/arkme-credential-helper.exeView on unpkg

lib/client.jsView file

•path = lib/client.js kind = oversized_source_file sizeBytes = 10251073 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

lib/client.jsView on unpkg

assets/desktop_call/bundle.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/desktop_call/bundle.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @senguoyun/dsh-arkme@0.1.52 matchedPath = assets/desktop_call/bundle.js matchedIdentity = npm:QHNlbmd1b3l1bi9kc2gtYXJrbWU:0.1.52 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/desktop_call/bundle.jsView on unpkg