Loading npm security reports…

@shepai/cli@1.219.0: Suspicious npm security report (Warn) | LPM Firewall

registry / @shepai/cli / 1.219.0

@shepai/cli@1.219.0

Autonomous AI-native SDLC platform — run parallel AI agents in isolated worktrees to automate the development cycle from idea to deploy.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2,494 file(s), 7.92 MB of source, external domains: abc123.example.pages.dev, aider.chat, api.cloudflare.com, api.github.com, api.openai.com, api.osv.dev, api.telegram.org, api.together.xyz, app.netlify.com, avatars.githubusercontent.com, block.github.io, bun.sh, cdn.jsdelivr.net, cdn.simpleicons.org, cdn.tailwindcss.com, claude.ai, cli.github.com, code.visualstudio.com, console.cloud.google.com, cursor.com, cursor.sh, dash.cloudflare.com, discord.com, docs.anthropic.com, epss.cyentia.com, example.com, feat-dashboard.preview.acme.dev, feat-rate-limiter.preview.acme.dev, feat-readme.preview.acme.dev, fonts.googleapis.com, gateway.example.com, git-scm.com, github.com, gitlab.com, graph.facebook.com, k3d.io, kubernetes.default.svc, kubernetes.io, landing-page-hero-features-pricing-85f4e3.pages.dev, my-app.pages.dev, my-gateway.railway.app, nodejs.org, openrouter.ai, pipx.pypa.io, random-subdomain.trycloudflare.com, raw.githubusercontent.com, registry.npmjs.org, shep.bot, tmux.github.io, us-east-1.console.aws.amazon.com

Source & flagged code

8 flagged

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView file

Lines 6-79javascript

6 * to dedupe/redact/persist. The scanner itself is pure — no fs/I/O — so it

7 * is trivially testable and deterministic across machines.

8 *

9 * Determinism: rules and files are iterated in fixed order, and the output

10 * order is `(file, line, rule)` so re-running on the same input produces

11 * identical findings → identical dedup keys (NFR-24).

12 */

13import { FindingDomain } from '../../generated/output.js';

14import { GENERIC_SECRET_ENTROPY_THRESHOLD, shannonEntropy } from './entropy.js';

15import { SECRET_RULES } from './secret-rule-pack.js';

16const PLACEHOLDER_FRAGMENTS = [

17 'example',

18 'placeholder',

19 'sample',

20 'xxxxxxxxxxxxxxxx',

21 '000000000000000',

22 'replace-me',

23 'changeme',

24 'your-key',

25 'your_key',

26 'AKIAIOSFODNN7EXAMPLE',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L26

Critical

Secret Pattern

AWS access key ID in dist/packages/core/src/domain/aspm/scan/secret-scanner.js

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L26

27];

28function looksLikePlaceholder(token) {

29 const lowered = token.toLowerCase();

30 return PLACEHOLDER_FRAGMENTS.some((frag) => lowered.includes(frag.toLowerCase()));

31}

32function extractCandidateValue(match) {

33 // For rules with a capture group, prefer the captured assignment value;

34 // otherwise the whole match is the secret.

35 return match[1] ?? match[0];

36}

37function applyGenericValidation(rule, value) {

38 if (rule.id !== 'secret.generic.high-entropy-assignment')

39 return true;

40 if (looksLikePlaceholder(value))

41 return false;

42 return shannonEntropy(value) >= GENERIC_SECRET_ENTROPY_THRESHOLD;

43}

44function applyValidator(rule, match, line) {

45 return rule.validate ? rule.validate(match, line) : true;

46}

47export function scanForSecrets(files) {

48 const drafts = [];

49 for (const file of files) {

50 if (file.content.length === 0)

51 continue;

52 const lines = file.content.split(/\r\n|\r|\n/);

53 for (let lineIndex = 0; lineIndex < lines.length; lineIndex++) {

54 const line = lines[lineIndex];

55 if (line.length === 0)

56 continue;

57 if (looksLikePlaceholder(line)) {

58 // Cheap early-out: lines that obviously document an example token

59 // (e.g. AKIAIOSFODNN7EXAMPLE) never produce drafts.

Critical

Secret Pattern

AWS access key ID in dist/packages/core/src/domain/aspm/scan/secret-scanner.js

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L59

60 continue;

61 }

62 for (const rule of SECRET_RULES) {

63 rule.pattern.lastIndex = 0;

64 let match;

65 while ((match = rule.pattern.exec(line)) !== null) {

66 const candidate = extractCandidateValue(match);

67 if (!applyValidator(rule, match[0], line))

68 continue;

69 if (!applyGenericValidation(rule, candidate))

70 continue;

71 drafts.push({

72 ruleId: rule.id,

73 title: rule.title,

74 description: rule.description,

75 findingDomain: FindingDomain.Secret,

76 locationPath: file.path,

77 locationLine: lineIndex + 1,

78 rawSeverity: rule.severity,

79 canonicalSeverity: rule.severity,

dist/packages/core/src/application/use-cases/upgrade/upgrade-cli.use-case.jsView file

Lines 5-45javascript

5 * Mirrors the CLI upgrade command logic but designed for use from the web layer.

6 *

7 * Flow:

8 * 1. Check latest version from npm registry (fail-open)

dist/packages/core/src/infrastructure/persistence/sqlite/migrations.jsView file

Lines 44-84javascript

44 const allFiles = readdirSync(migrationsDir);

45 // Accept .js (compiled) and .ts (dev via tsx) but exclude .d.ts declaration files

46 const candidates = allFiles.filter((f) =>

dist/packages/core/src/infrastructure/services/scaffolding/bun-shadcn-scaffolder.service.jsView file

Lines 240-280javascript

240 emit('Info', 'Installing app dependencies', APP_EXTRA_DEPS.join(', '));

241 await this.runSpawn({

242 command: 'bun'

web/public/sounds/transition_down.wavView file

•path = web/public/sounds/transition_down.wav kind = high_entropy_blob sizeBytes = 8880 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/public/sounds/transition_down.wavView on unpkg

Source & flagged code

8 flagged · loading source

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView file

26patternName = aws_access_key severity = critical line = 26 matchedText = 'AKIAIOS...LE',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L26

26patternName = aws_access_key severity = critical line = 26 matchedText = 'AKIAIOS...LE',

Critical

Secret Pattern

AWS access key ID in dist/packages/core/src/domain/aspm/scan/secret-scanner.js

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L26

59patternName = aws_access_key severity = critical line = 59 matchedText = // (e.g....fts.

Critical

Secret Pattern

AWS access key ID in dist/packages/core/src/domain/aspm/scan/secret-scanner.js

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L59

dist/packages/core/src/application/use-cases/upgrade/upgrade-cli.use-case.jsView file

25import { injectable, inject } from 'tsyringe'; L26: import { spawn } from 'node:child_process'; L27: import { mkdtempSync, rmSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/packages/core/src/application/use-cases/upgrade/upgrade-cli.use-case.jsView on unpkg · L25

176// after npm install this resolves to the upgraded version on disk. L177: const child = spawn(process.execPath, [...process.execArgv, process.argv[1], '_serve', ...(port ? ['--port', String(port)] : [])], { L178: detached: true,

High

Shell

Package source references shell execution.

dist/packages/core/src/application/use-cases/upgrade/upgrade-cli.use-case.jsView on unpkg · L176

dist/packages/core/src/infrastructure/persistence/sqlite/migrations.jsView file

64const filePath = join(migrationsDir, file); L65: const mod = (await import(pathToFileURL(filePath).href)); L66: migrations.push({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/packages/core/src/infrastructure/persistence/sqlite/migrations.jsView on unpkg · L64

dist/packages/core/src/infrastructure/services/scaffolding/bun-shadcn-scaffolder.service.jsView file

260* Check `bun --version`. On failure, install bun globally via L261: * `npm install -g bun` and verify again. Runs synchronously because L262: * the whole scaffold pipeline must block on a working bun. ... L269: console.log('[bun-shadcn-scaffolder] bun not on PATH — installing via `npm install -g bun`'); L270: const install = spawnSync('npm', ['install', '-g', 'bun'], { L271: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/packages/core/src/infrastructure/services/scaffolding/bun-shadcn-scaffolder.service.jsView on unpkg · L260

web/public/sounds/transition_down.wavView file

•path = web/public/sounds/transition_down.wav kind = high_entropy_blob sizeBytes = 8880 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/public/sounds/transition_down.wavView on unpkg

Source & flagged code

8 flagged

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView file

Lines 6-79javascript

6 * to dedupe/redact/persist. The scanner itself is pure — no fs/I/O — so it

7 * is trivially testable and deterministic across machines.

8 *

9 * Determinism: rules and files are iterated in fixed order, and the output

10 * order is `(file, line, rule)` so re-running on the same input produces

11 * identical findings → identical dedup keys (NFR-24).

12 */

13import { FindingDomain } from '../../generated/output.js';

14import { GENERIC_SECRET_ENTROPY_THRESHOLD, shannonEntropy } from './entropy.js';

15import { SECRET_RULES } from './secret-rule-pack.js';

16const PLACEHOLDER_FRAGMENTS = [

17 'example',

18 'placeholder',

19 'sample',

20 'xxxxxxxxxxxxxxxx',

21 '000000000000000',

22 'replace-me',

23 'changeme',

24 'your-key',

25 'your_key',

26 'AKIAIOSFODNN7EXAMPLE',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L26

Critical

Secret Pattern

AWS access key ID in dist/packages/core/src/domain/aspm/scan/secret-scanner.js

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L26

27];

28function looksLikePlaceholder(token) {

29 const lowered = token.toLowerCase();

30 return PLACEHOLDER_FRAGMENTS.some((frag) => lowered.includes(frag.toLowerCase()));

31}

32function extractCandidateValue(match) {

33 // For rules with a capture group, prefer the captured assignment value;

34 // otherwise the whole match is the secret.

35 return match[1] ?? match[0];

36}

37function applyGenericValidation(rule, value) {

38 if (rule.id !== 'secret.generic.high-entropy-assignment')

39 return true;

40 if (looksLikePlaceholder(value))

41 return false;

42 return shannonEntropy(value) >= GENERIC_SECRET_ENTROPY_THRESHOLD;

43}

44function applyValidator(rule, match, line) {

45 return rule.validate ? rule.validate(match, line) : true;

46}

47export function scanForSecrets(files) {

48 const drafts = [];

49 for (const file of files) {

50 if (file.content.length === 0)

51 continue;

52 const lines = file.content.split(/\r\n|\r|\n/);

53 for (let lineIndex = 0; lineIndex < lines.length; lineIndex++) {

54 const line = lines[lineIndex];

55 if (line.length === 0)

56 continue;

57 if (looksLikePlaceholder(line)) {

58 // Cheap early-out: lines that obviously document an example token

59 // (e.g. AKIAIOSFODNN7EXAMPLE) never produce drafts.

Critical

Secret Pattern

AWS access key ID in dist/packages/core/src/domain/aspm/scan/secret-scanner.js

dist/packages/core/src/domain/aspm/scan/secret-scanner.jsView on unpkg · L59

60 continue;

61 }

62 for (const rule of SECRET_RULES) {

63 rule.pattern.lastIndex = 0;

64 let match;

65 while ((match = rule.pattern.exec(line)) !== null) {

66 const candidate = extractCandidateValue(match);

67 if (!applyValidator(rule, match[0], line))

68 continue;

69 if (!applyGenericValidation(rule, candidate))

70 continue;

71 drafts.push({

72 ruleId: rule.id,

73 title: rule.title,

74 description: rule.description,

75 findingDomain: FindingDomain.Secret,

76 locationPath: file.path,

77 locationLine: lineIndex + 1,

78 rawSeverity: rule.severity,

79 canonicalSeverity: rule.severity,

dist/packages/core/src/application/use-cases/upgrade/upgrade-cli.use-case.jsView file

Lines 5-45javascript

5 * Mirrors the CLI upgrade command logic but designed for use from the web layer.

6 *

7 * Flow:

8 * 1. Check latest version from npm registry (fail-open)

dist/packages/core/src/infrastructure/persistence/sqlite/migrations.jsView file

Lines 44-84javascript

44 const allFiles = readdirSync(migrationsDir);

45 // Accept .js (compiled) and .ts (dev via tsx) but exclude .d.ts declaration files

46 const candidates = allFiles.filter((f) =>

dist/packages/core/src/infrastructure/services/scaffolding/bun-shadcn-scaffolder.service.jsView file

Lines 240-280javascript

240 emit('Info', 'Installing app dependencies', APP_EXTRA_DEPS.join(', '));

241 await this.runSpawn({

242 command: 'bun'

web/public/sounds/transition_down.wavView file

•path = web/public/sounds/transition_down.wav kind = high_entropy_blob sizeBytes = 8880 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/public/sounds/transition_down.wavView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code