registry / @spinabot/brigade / 1.25.0

@spinabot/brigade@1.25.0

Brigade — your personal AI crew

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Automatic postinstall rewrites a foreign dependency's OAuth callback page. The observed changes are branding-only, but the hook mutates an authentication UI/control surface without explicit consent.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install / postinstall

Impact

Can alter trusted sign-in callback UI shipped by @earendil-works/pi-ai during installation

Mechanism

unconsented dependency OAuth page rewrite

Policy narrative

During installation, the package runs scripts/brand-oauth-page.mjs. That script locates @earendil-works/pi-ai/oauth via import.meta.resolve, computes the dependency's oauth-page.js path, and overwrites it with Brigade-branded HTML assets and title. This is an unprompted install-time mutation of a dependency-provided OAuth callback page, even though inspection did not find token theft or external exfiltration in the hook.

Rationale

Source inspection confirms a postinstall hook that mutates a foreign dependency's OAuth/auth UI surface, which meets the firewall block boundary for unconsented install-time control-surface mutation. Other scanner hits appear package-aligned or defensive and do not add exfiltration evidence. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonscripts/brand-oauth-page.mjsbrigade.mjsdist/entry.jsdist/agents/extensions/install.jsdist/agents/extensions/install-scan.jsdist/security/injection-patterns.jsnode_modules/@earendil-works/pi-ai/**/utils/oauth/oauth-page.js

Decision evidence

public snapshot

AI called this Malicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for policy block

package.json defines postinstall: node scripts/brand-oauth-page.mjs
scripts/brand-oauth-page.mjs resolves @earendil-works/pi-ai/oauth then writes into its utils/oauth/oauth-page.js
postinstall mutation changes OAuth callback page logo, title, favicon, and style in a dependency under node_modules
Mutation is automatic during npm install and not gated by an explicit user command

Evidence against

brigade.mjs only checks Node version, filters warnings, and imports dist/entry.js
dist/agents/extensions/install.js installs extensions only via explicit CLI action and surfaces scan findings
dist/security/injection-patterns.js is a defensive prompt-injection scanner; bidi/invisible pattern is in a regex
No credential exfiltration or attacker C2 endpoint found in inspected postinstall/bin paths

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 685 file(s), 7.51 MB of source, external domains: 127.0.0.1, 192.168.1.5, accounts.google.com, aistudio.google.com, api-dashboard.search.brave.com, api.anthropic.com, api.cerebras.ai, api.deepgram.com, api.deepseek.com, api.dev.runwayml.com, api.duckduckgo.com, api.elevenlabs.io, api.exa.ai, api.example.com, api.firecrawl.dev, api.github.com, api.groq.com, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.openai.com, api.perplexity.ai, api.sarvam.ai, api.search.brave.com, api.slack.com, api.tavily.com, api.telegram.org, api.together.xyz, api.x.ai, api.z.ai, app.tavily.com, ark.ap-southeast.bytepluses.com, bailian.console.alibabacloud.com, brave.com, brigade.spinabot.com, build.nvidia.com, chatgpt.com, claude.ai, cloud.cerebras.ai, console.anthropic.com, console.groq.com, console.mistral.ai, console.x.ai, core.telegram.org, dashscope-intl.aliyuncs.com, discord.com, docs.exa.ai, docs.firecrawl.dev, docs.github.com, docs.ollama.com

Oversized source lightweight scan

dist/ui/brand-frames-cli.js2.36 MB file, sampled 256 KB

Minified

Source & flagged code

26 flagged

package.jsonView file

Lines 38-78json

38 "scripts/run-brigade.mjs",

39 "scripts/build-done.mjs",

40 "scripts/install-convex.mjs",

41 "scripts/convex-dev.mjs",

42 "scripts/convex-push.mjs",

43 "scripts/brand-oauth-page.mjs",

44 "scripts/assets/brigade-logo.webp",

45 "scripts/assets/brigade-favicon.ico",

46 "dist/**/*",

47 "templates/**/*",

48 "skills/**/*",

49 "convex/**/*.ts",

50 "convex/_generated/**",

51 "convex/tsconfig.json",

52 "README.md",

53 "LICENSE"

54 ],

55 "scripts": {

56 "build": "tsc -p tsconfig.build.json",

57 "postbuild": "node scripts/build-done.mjs",

58 "postinstall": "node scripts/brand-oauth-page.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L58

59 "build:watch": "tsc -p tsconfig.build.json --watch",

60 "clean": "node -e \"import('node:fs').then(fs => fs.rmSync('dist', { recursive: true, force: true }))\"",

61 "prepack": "npm run build",

62 "test": "node scripts/run-tests.mjs",

63 "bench": "npx tsx --test src/agents/memory/eval/comparison.test.ts src/agents/memory/eval/gold-hard.test.ts src/agents/memory/eval/gold-parity.test.ts src/agents/memory/eval/asr-bench.test.ts",

64 "typecheck": "tsc -p tsconfig.json --noEmit",

65 "brigade": "node brigade.mjs",

66 "start": "node scripts/run-brigade.mjs",

67 "dev": "node scripts/run-brigade.mjs",

68 "dev:tsx": "tsx src/entry.ts",

69 "watch": "tsx --watch src/entry.ts",

70 "onboard": "node scripts/run-brigade.mjs onboard",

71 "login": "node scripts/run-brigade.mjs login",

72 "login:bin": "node brigade.mjs login",

73 "auth": "node scripts/run-brigade.mjs auth",

74 "onboard:bin": "node brigade.mjs onboard",

75 "onboard:watch": "tsx --watch src/entry.ts onboard",

76 "agent": "node scripts/run-brigade.mjs agent",

77 "agent:bin": "node brigade.mjs agent",

78 "agent:watch": "tsx --watch src/entry.ts agent",

dist/ui/onboarding.jsView file

Lines 1-34javascript

1/**

2 * First-run onboarding wizard.

3 *

4 * Flow:

5 * 1. Welcome screen

6 * 2. Provider picker (SelectList of curated providers)

7 * 3. API key entry (or detect existing env var)

8 * 4. Model picker (SelectList of models for that provider)

9 * 5. Persist to AuthStorage + Brigade config

10 * 6. Return chosen { provider, modelId }

11 *

12 * Uses Pi-TUI components — same components the chat UI uses, so the visual

13 * language is consistent across the app.

14 */

15import { spawn } from "node:child_process";

16import { getModels } from "@earendil-works/pi-ai";

High

Child Process

Package source references child process execution.

dist/ui/onboarding.jsView on unpkg · L14

17// `getOAuthProvider` lives ONLY on the "./oauth" subpath export — the package's

18// main "." entry (base + register-builtins) does NOT re-export the OAuth

19// registry, so importing it from "@earendil-works/pi-ai" resolves to undefined.

20// The package.json "exports" map exposes "./oauth", so this is the supported

21// path (verified against node_modules @ pi-ai 0.79.9).

22import { getOAuthProvider } from "@earendil-works/pi-ai/oauth";

23import { CancellableLoader, Input, SelectList, Text } from "@earendil-works/pi-tui";

24import { upsertApiKeyProfile, upsertApiKeyRefProfile, upsertOAuthProfile, upsertTokenProfile, } from "../auth/profiles.js";

25import { DEFAULT_AGENT_ID, resolveAuthProfilesPath, resolveModelsPath } from "../config/paths.js";

26import { saveConfig } from "../core/config.js";

27import { readClaudeCliLogin, readCodexCliLogin } from "../integrations/cli-login.js";

28import { isClaudeCliAvailable } from "../agents/claude-cli/availability.js";

29import { CLAUDE_CLI_DEFAULT_MODEL, CLAUDE_CLI_MODELS } from "../agents/claude-cli/catalog.js";

30import { hasBrigadeClaudeLogin, writeBrigadeClaudeCredential } from "../agents/claude-cli/claude-config.js";

31import { writeCustomProviderToModelsJson } from "../integrations/custom-provider.js";

32import { discoverOllamaModels, writeOllamaToModelsJson } from "../integrations/ollama.js";

33import { findProvider, PROVIDERS, readProviderEnvKey, resolveProviderEnvVarSource, routesToCustomProvider, } from "../providers/catalog.js";

34import { validateApiKeyOnline } from "../providers/validate-key.js";

dist/core/daemon/systemd.jsView file

Lines 1-41javascript

1/**

2 * Linux systemd-user adapter.

3 *

4 * Writes `~/.config/systemd/user/brigade-gateway.service` and runs

5 * `systemctl --user daemon-reload && enable --now`. `Restart=on-failure`

6 * makes the supervisor restart the daemon if it crashes; the unit auto-starts

7 * at user login (lingering = a separate operator decision).

8 */

9import { spawn } from "node:child_process";

10import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";

11import os from "node:os";

12import path from "node:path";

13const SERVICE_UNIT_NAME = "brigade-gateway.service";

14function unitPath() {

15 return path.join(os.homedir(), ".config", "systemd", "user", SERVICE_UNIT_NAME);

16}

17/** Build the unit file text. Pure / deterministic — used in tests. */

18export function renderSystemdUnit(ctx) {

19 const envLines = Object.entries(ctx.env)

20 .map(([k, v]) => `Environment=${k}=${v}`)

21 .join("\n");

22 const execArgs = [ctx.nodePath, ctx.brigadeBin, "gateway", "run"]

23 .map((s) => (s.includes(" ") ? `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"` : s))

High

Shell

Package source references shell execution.

dist/core/daemon/systemd.jsView on unpkg · L21

24 .join(" ");

25 return [

26 "[Unit]",

27 "Description=Brigade gateway (personal AI crew daemon)",

28 "After=network-online.target",

29 "Wants=network-online.target",

30 "",

31 "[Service]",

32 "Type=simple",

33 `WorkingDirectory=${ctx.cwd}`,

34 `ExecStart=${execArgs}`,

35 "Restart=on-failure",

36 "RestartSec=2",

37 `StandardOutput=append:${ctx.stdoutPath}`,

38 `StandardError=append:${ctx.stderrPath}`,

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/core/daemon/systemd.jsView on unpkg · L8

39 envLines || "# no Environment= overrides",

40 "",

41 "[Install]",

dist/agents/org/pride-image.jsView file

Lines 70-110javascript

70 format: "png",

71 rasterized: true,

72 width: png.width,

73 height: png.height,

74 hash,

75 cached: false,

76 themeId,

77 themeName,

78 };

79}

80/* ─── tiny Playwright wrapper (15 lines of real code) ────────────── */

81/**

82 * Launch system Chrome via `playwright-core` (already in deps),

83 * navigate to the HTML, screenshot it. No SVG fallback — if the

84 * browser can't launch, this throws and the caller sees the error.

85 */

86async function defaultHtmlScreenshot(html, viewport) {

87 // Dynamic import so the module typechecks even if `playwright-core`

88 // is absent at compile time. (It IS in Brigade's deps, but using a

89 // dynamic Function-based importer keeps the SDK-aware import flow

90 // consistent with how Brigade lazy-loads other heavy modules.)

91 const importer = new Function("s", "return import(s)");

92 const mod = (await importer("playwright-core"));

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/agents/org/pride-image.jsView on unpkg · L90

93 if (!mod.chromium) {

94 throw new Error("playwright-core missing chromium namespace");

95 }

96 const chromium = mod.chromium;

97 // Try system Chrome first (zero-install for most users). Fall back

98 // to bundled Chromium (`npx playwright install chromium`).

99 let browser;

100 try {

101 browser = await chromium.launch({ channel: "chrome", headless: true });

102 }

103 catch {

104 browser = await chromium.launch({ headless: true });

105 }

106 try {

107 const context = await browser.newContext({

108 viewport,

109 deviceScaleFactor: 2,

110 });

brigade.mjsView file

Lines 34-74javascript

34 const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(process.versions.node);

35 if (!m) return;

36 const major = Number(m[1]);

37 const minor = Number(m[2]);

38 if (

39 major > MIN_NODE.major ||

40 (major === MIN_NODE.major && minor >= MIN_NODE.minor)

41 ) {

42 return;

43 }

44 process.stderr.write(

45 `brigade requires Node ${MIN_NODE.major}.${MIN_NODE.minor} or newer ` +

46 `(running ${process.versions.node}).\n` +

47 `If you're on nvm: \`nvm install ${MIN_NODE.major}\` then \`nvm use ${MIN_NODE.major}\`.\n`,

48 );

49 process.exit(1);

50}

52ensureSupportedNodeVersion();

54try {

55 const mod = await import("node:module");

56 if (typeof mod.enableCompileCache === "function" && !process.env.NODE_DISABLE_COMPILE_CACHE) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

brigade.mjsView on unpkg · L54

57 mod.enableCompileCache();

58 }

59} catch {

60 // Older Node minors silently skip — not fatal.

61}

63function shouldIgnoreWarning(warning) {

64 if (warning.code === "DEP0040" && warning.message?.includes("punycode")) {

65 return true;

66 }

67 if (warning.code === "DEP0060" && warning.message?.includes("util._extend")) {

68 return true;

69 }

70 if (

71 warning.name === "ExperimentalWarning" &&

72 warning.message?.includes("SQLite is an experimental feature")

73 ) {

74 return true;

dist/agents/tool-loop-detector.jsView file

Lines 1-21javascript

1/**

2 * Tool-loop detector — catches the model when it's stuck calling the same

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/agents/tool-loop-detector.jsView on unpkg · L1

3 * tool with the same arguments over and over. A real failure mode: the

4 * model emits `read({path: "src/foo.ts"})` 30 times in a row, burning

5 * turns and tokens without making progress.

6 *

7 * Two levels of escalation:

8 *

9 * - WARNING (default: 10 identical calls in a row) — log it via the

10 * `tool-blocked` bus event with `severity: "warning"` and let the

11 * call pass through. This lets a marginally-redundant pattern

12 * ("read X, then read X again to confirm") proceed, while still

13 * surfacing the signal to operators / dashboards.

14 *

15 * - CRITICAL (default: 20 identical calls in a row) — block with a

16 * synthetic tool-result. The model sees a refusal explaining what

17 * it was doing and gets pushed to try something different. Pi

18 * turns the `{block: true, reason}` into a synthetic tool_result

19 * so the model self-corrects on the next turn.

20 *

21 * State is process-singleton keyed by session key, NOT per-turn. A

scripts/convex-dev.mjsView file

Lines 1-36javascript

1#!/usr/bin/env node

2// scripts/convex-dev.mjs

3//

4// Brigade local Convex orchestrator — fully air-gapped, zero cloud touch.

5// Spawns the self-hosted convex-local-backend binary + serves the dashboard

6// on 127.0.0.1:6791. Same path OSS users will use; no Convex account needed.

7//

8// npm run convex:dev

9//

10// Persists state under F:\Brigade\.convex-data\:

11// identity.json — stable instance name + secret (do not commit)

12// admin-key.txt — derived admin key, written each run

13// convex_local_backend.sqlite3 — database file

14// storage/ — Convex File Storage objects

15// logs/ — backend stderr captures

17import { spawn } from "node:child_process";

18import { mkdirSync, existsSync, writeFileSync, readFileSync, unlinkSync } from "node:fs";

19import { randomBytes } from "node:crypto";

20import { createServer } from "node:http";

21import { readFile, stat } from "node:fs/promises";

22import { extname, join, dirname, resolve, sep } from "node:path";

23import { fileURLToPath } from "node:url";

25const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");

26const BIN_DIR = join(ROOT, "bin");

27// Honor the data dir the `brigade convex` command resolves + exports, so the

28// pidfile (and all backend state) lands where `brigade convex stop` looks for

29// it — whether launched via the CLI (global install → ~/.brigade/convex/data)

30// or `npm run convex:dev` from a checkout (→ <root>/.convex-data, the default).

31const DATA_DIR = process.env.BRIGADE_CONVEX_DATA_DIR?.trim() || join(ROOT, ".convex-data");

32const DASHBOARD_DIR = join(BIN_DIR, "dashboard");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/convex-dev.mjsView on unpkg · L16

33const BACKEND_BIN = join(BIN_DIR, process.platform === "win32" ? "convex-local-backend.exe" : "convex-local-backend");

35const BACKEND_HOST = "127.0.0.1";

36const BACKEND_PORT = 3210;

dist/infra/net/fetch-guard.jsView file

4* Why this exists: Brigade runs LLM-controllable URLs through `fetch`. L5: * Without a guard, a model can be tricked into hitting `http://169.254.169.254/` L6: * (cloud metadata) or `http://localhost:1234/` (developer service) and ... L20: import { isIP, isIPv4, isIPv6 } from "node:net"; L21: import { promises as dnsPromises } from "node:dns"; L22: import { DEFAULT_TIMEOUT_SECONDS } from "../../agents/tools/web-shared.js"; ... L28: * Cloud-metadata + forbidden-literal hosts that stay blocked EVEN WHEN L29: * `allowPrivateNetwork` is set — these are never a legitimate LAN target and are L30: * the highest-value SSRF destinations. ... L364: headers: currentHeaders, L365: body: currentBody ?? undefined, L366: redirect: "manual",

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/infra/net/fetch-guard.jsView on unpkg · L4

dist/security/injection-patterns.jsView file

58contains invisible/control Unicode U+200B (zero width space) const INVISIBLE_CODEPOINTS = /[<U+200B>-<U+200D><U+2060>⁢-⁤<U+FEFF><U+202A>-<U+202E><U+2066>-<U+2069>]/;

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/security/injection-patterns.jsView on unpkg · L58

scripts/convex-push.mjsView file

75console.log(`▌ Pushing convex/ functions → ${target}`); L76: const res = spawnSync("npx", ["convex", "deploy", "--yes"], { L77: cwd: ROOT,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/convex-push.mjsView on unpkg · L75

skills/video-frames/scripts/frame.shView file

•path = skills/video-frames/scripts/frame.sh kind = build_helper sizeBytes = 1347 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/video-frames/scripts/frame.shView on unpkg

scripts/assets/brigade-favicon.icoView file

•path = scripts/assets/brigade-favicon.ico kind = high_entropy_blob sizeBytes = 19371 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

scripts/assets/brigade-favicon.icoView on unpkg

dist/ui/brand-frames-cli.jsView file

•path = dist/ui/brand-frames-cli.js kind = oversized_source_file sizeBytes = 2475115 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/ui/brand-frames-cli.jsView on unpkg

•path = dist/ui/brand-frames-cli.js kind = oversized_cli_entrypoint sizeBytes = 2475115 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/ui/brand-frames-cli.jsView on unpkg

dist/agents/extensions/install-scan.jsView file

•matchType = normalized_sha256 matchedPackage = @spinabot/brigade@1.24.2 matchedPath = dist/agents/extensions/install-scan.js matchedIdentity = npm:QHNwaW5hYm90L2JyaWdhZGU:1.24.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agents/extensions/install-scan.jsView on unpkg

dist/agents/extensions/install.jsView file

•matchType = normalized_sha256 matchedPackage = @spinabot/brigade@1.24.2 matchedPath = dist/agents/extensions/install.js matchedIdentity = npm:QHNwaW5hYm90L2JyaWdhZGU:1.24.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agents/extensions/install.jsView on unpkg

dist/core/daemon/launchd.jsView file

•matchType = normalized_sha256 matchedPackage = @spinabot/brigade@1.24.2 matchedPath = dist/core/daemon/launchd.js matchedIdentity = npm:QHNwaW5hYm90L2JyaWdhZGU:1.24.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/daemon/launchd.jsView on unpkg

dist/core/daemon/schtasks.jsView file

•matchType = normalized_sha256 matchedPackage = @spinabot/brigade@1.24.2 matchedPath = dist/core/daemon/schtasks.js matchedIdentity = npm:QHNwaW5hYm90L2JyaWdhZGU:1.24.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/daemon/schtasks.jsView on unpkg

dist/core/tunnel/providers/bore.jsView file

•matchType = normalized_sha256 matchedPackage = @spinabot/brigade@1.24.2 matchedPath = dist/core/tunnel/providers/bore.js matchedIdentity = npm:QHNwaW5hYm90L2JyaWdhZGU:1.24.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/tunnel/providers/bore.jsView on unpkg

dist/agents/channels/bluebubbles/account-config.d.tsView file

28patternName = generic_password severity = medium line = 28 matchedText = * ch...}" }

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.d.ts

dist/agents/channels/bluebubbles/account-config.d.tsView on unpkg · L28

34patternName = generic_password severity = medium line = 34 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.d.ts

dist/agents/channels/bluebubbles/account-config.d.tsView on unpkg · L34

35patternName = generic_password severity = medium line = 35 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.d.ts

dist/agents/channels/bluebubbles/account-config.d.tsView on unpkg · L35

dist/agents/channels/bluebubbles/account-config.jsView file

28patternName = generic_password severity = medium line = 28 matchedText = * ch...}" }

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.js

dist/agents/channels/bluebubbles/account-config.jsView on unpkg · L28

34patternName = generic_password severity = medium line = 34 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.js

dist/agents/channels/bluebubbles/account-config.jsView on unpkg · L34

35patternName = generic_password severity = medium line = 35 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.js

dist/agents/channels/bluebubbles/account-config.jsView on unpkg · L35

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/brand-oauth-page.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/ui/onboarding.jsView file

14*/ L15: import { spawn } from "node:child_process"; L16: import { getModels } from "@earendil-works/pi-ai";

High

Child Process

Package source references child process execution.

dist/ui/onboarding.jsView on unpkg · L14

dist/core/daemon/systemd.jsView file

21.join("\n"); L22: const execArgs = [ctx.nodePath, ctx.brigadeBin, "gateway", "run"] L23: .map((s) => (s.includes(" ") ? `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"` : s))

High

Shell

Package source references shell execution.

dist/core/daemon/systemd.jsView on unpkg · L21

8*/ L9: import { spawn } from "node:child_process"; L10: import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs"; ... L14: function unitPath() { L15: return path.join(os.homedir(), ".config", "systemd", "user", SERVICE_UNIT_NAME); L16: } ... L36: "RestartSec=2", L37: `StandardOutput=append:${ctx.stdoutPath}`, L38: `StandardError=append:${ctx.stderrPath}`, ... L74: if (r.code !== 0) { L75: return { ok: false, message: `systemctl enable failed: ${r.stderr.trim()}`, unitPath: file }; L76: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/core/daemon/systemd.jsView on unpkg · L8

dist/agents/org/pride-image.jsView file

90// consistent with how Brigade lazy-loads other heavy modules.) L91: const importer = new Function("s", "return import(s)"); L92: const mod = (await importer("playwright-core"));

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/agents/org/pride-image.jsView on unpkg · L90

brigade.mjsView file

54try { L55: const mod = await import("node:module"); L56: if (typeof mod.enableCompileCache === "function" && !process.env.NODE_DISABLE_COMPILE_CACHE) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

brigade.mjsView on unpkg · L54

dist/agents/tool-loop-detector.jsView file

1/** L2: * Tool-loop detector — catches the model when it's stuck calling the same

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/agents/tool-loop-detector.jsView on unpkg · L1

scripts/convex-dev.mjsView file

16L17: import { spawn } from "node:child_process"; L18: import { mkdirSync, existsSync, writeFileSync, readFileSync, unlinkSync } from "node:fs"; L19: import { randomBytes } from "node:crypto"; L20: import { createServer } from "node:http"; L21: import { readFile, stat } from "node:fs/promises"; ... L30: // or `npm run convex:dev` from a checkout (→ <root>/.convex-data, the default). L31: const DATA_DIR = process.env.BRIGADE_CONVEX_DATA_DIR?.trim() || join(ROOT, ".convex-data"); L32: const DASHBOARD_DIR = join(BIN_DIR, "dashboard");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/convex-dev.mjsView on unpkg · L16

dist/infra/net/fetch-guard.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/infra/net/fetch-guard.jsView on unpkg · L4

dist/security/injection-patterns.jsView file

58contains invisible/control Unicode U+200B (zero width space) const INVISIBLE_CODEPOINTS = /[<U+200B>-<U+200D><U+2060>⁢-⁤<U+FEFF><U+202A>-<U+202E><U+2066>-<U+2069>]/;

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/security/injection-patterns.jsView on unpkg · L58

scripts/convex-push.mjsView file

75console.log(`▌ Pushing convex/ functions → ${target}`); L76: const res = spawnSync("npx", ["convex", "deploy", "--yes"], { L77: cwd: ROOT,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/convex-push.mjsView on unpkg · L75

skills/video-frames/scripts/frame.shView file

•path = skills/video-frames/scripts/frame.sh kind = build_helper sizeBytes = 1347 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/video-frames/scripts/frame.shView on unpkg

scripts/assets/brigade-favicon.icoView file

•path = scripts/assets/brigade-favicon.ico kind = high_entropy_blob sizeBytes = 19371 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

scripts/assets/brigade-favicon.icoView on unpkg

dist/ui/brand-frames-cli.jsView file

•path = dist/ui/brand-frames-cli.js kind = oversized_source_file sizeBytes = 2475115 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/ui/brand-frames-cli.jsView on unpkg

•path = dist/ui/brand-frames-cli.js kind = oversized_cli_entrypoint sizeBytes = 2475115 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/ui/brand-frames-cli.jsView on unpkg

dist/agents/extensions/install-scan.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agents/extensions/install-scan.jsView on unpkg

dist/agents/extensions/install.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agents/extensions/install.jsView on unpkg

dist/core/daemon/launchd.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/daemon/launchd.jsView on unpkg

dist/core/daemon/schtasks.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/daemon/schtasks.jsView on unpkg

dist/core/tunnel/providers/bore.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/tunnel/providers/bore.jsView on unpkg

dist/agents/channels/bluebubbles/account-config.d.tsView file

28patternName = generic_password severity = medium line = 28 matchedText = * ch...}" }

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.d.ts

dist/agents/channels/bluebubbles/account-config.d.tsView on unpkg · L28

34patternName = generic_password severity = medium line = 34 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.d.ts

dist/agents/channels/bluebubbles/account-config.d.tsView on unpkg · L34

35patternName = generic_password severity = medium line = 35 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.d.ts

dist/agents/channels/bluebubbles/account-config.d.tsView on unpkg · L35

dist/agents/channels/bluebubbles/account-config.jsView file

28patternName = generic_password severity = medium line = 28 matchedText = * ch...}" }

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.js

dist/agents/channels/bluebubbles/account-config.jsView on unpkg · L28

34patternName = generic_password severity = medium line = 34 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.js

dist/agents/channels/bluebubbles/account-config.jsView on unpkg · L34

35patternName = generic_password severity = medium line = 35 matchedText = * ..." },

Medium

Secret Pattern

Hardcoded password in dist/agents/channels/bluebubbles/account-config.js

dist/agents/channels/bluebubbles/account-config.jsView on unpkg · L35

Findings

1 Critical13 High13 Medium8 Low

CriticalTrojan Source Unicodedist/security/injection-patterns.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/ui/onboarding.js

HighShelldist/core/daemon/systemd.js

HighSame File Env Network Executionscripts/convex-dev.mjs

HighCloud Metadata Accessdist/infra/net/fetch-guard.js

HighRuntime Package Installscripts/convex-push.mjs

HighShips High Entropy Blobscripts/assets/brigade-favicon.ico

HighOversized Source Filedist/ui/brand-frames-cli.js

HighKnown Malware Source Similaritydist/agents/extensions/install-scan.js

HighKnown Malware Source Similaritydist/agents/extensions/install.js

HighKnown Malware Source Similaritydist/core/daemon/launchd.js

HighKnown Malware Source Similaritydist/core/daemon/schtasks.js

HighKnown Malware Source Similaritydist/core/tunnel/providers/bore.js

MediumDynamic Requirebrigade.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/core/daemon/systemd.js

MediumShips Build Helperskills/video-frames/scripts/frame.sh

MediumOversized Cli Entrypointdist/ui/brand-frames-cli.js

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/agents/channels/bluebubbles/account-config.d.ts

MediumSecret Patterndist/agents/channels/bluebubbles/account-config.js

LowScripts Present

LowEvaldist/agents/org/pride-image.js

LowWeak Cryptodist/agents/tool-loop-detector.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings