registry  /  @surething/cockpit  /  1.0.244

@surething/cockpit@1.0.244

The open-source Claude Code GUI — an IDE-like workbench for parallel AI coding. Drive Claude (default), Codex, DeepSeek, Kimi, or local Ollama in tabs. Terminal, browser & DB bubbles, code review. Self-host on a shared dev box — a seat for every teammate.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Install-time setup writes a first-party browser extension and Jupyter bridge under `~/.cockpit`. The extension has broad browser privileges and provides local Cockpit-controlled cookie injection and page evaluation.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm postinstall, then user installation/use of the Cockpit browser extension and local server.
Impact
A user who enables the copied extension grants Cockpit powerful automation and cookie access for its managed browser iframes; no confirmed exfiltration chain was found.
Mechanism
first-party extension lifecycle setup with privileged browser automation
Rationale
This is a real high-privilege, install-time first-party agent-extension setup, so it warrants a warning. Source inspection does not establish malicious intent or a concrete data-exfiltration/persistence chain.
Evidence
package.jsonbin/postinstall.mjschrome-extension/manifest.jsonchrome-extension/background.jschrome-extension/content.js~/.cockpit/chrome-extension/~/.cockpit/kernels/jupyter_bridge.py

Decision evidence

public snapshot
AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
  • `package.json` runs `bin/postinstall.mjs` automatically.
  • `bin/postinstall.mjs` copies the package-owned Chrome extension to `~/.cockpit/chrome-extension/`.
  • `chrome-extension/manifest.json` requests `<all_urls>`, cookies, scripting, webRequest, tabs, and storage.
  • `chrome-extension/background.js` injects target-site cookies and evaluates supplied JavaScript in tracked Cockpit iframes.
Evidence against
  • Content activation is limited to frames tracked as Cockpit-owned in `chrome-extension/content.js`.
  • External extension messages are restricted to localhost/127.0.0.1 in `chrome-extension/background.js`.
  • No unaligned outbound endpoint, credential exfiltration, remote payload download, or foreign AI-agent config mutation was found.
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Manifest
WildcardDependency
scanned 35 file(s), 3.38 MB of source, external domains: 0.0.0.0, 127.0.0.1, api.deepseek.com, api.moonshot.cn, api.openai.com, github.com, json-schema.org, ns.adobe.com, www.w3.org, www.xfa.org

Source & flagged code

14 flagged · loading source
package.jsonView file
•scripts.postinstall = node bin/postinstall.mjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = node bin/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
bin/cock.mjsView file
•matchType = previous_version_dangerous_delta matchedPackage = @surething/cockpit@1.0.232 matchedIdentity = npm:QHN1cmV0aGluZy9jb2NrcGl0:1.0.232 similarity = 0.742 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cock.mjsView on unpkg
4import { fileURLToPath } from 'url'; L5: import { spawnSync } from 'child_process'; L6: import { hasClaudeBinary } from '../scripts/claudeBinary.mjs';
High
Child Process

Package source references child process execution.

bin/cock.mjsView on unpkg · L4
80// highWaterMark) this truncates at exactly 16384 bytes on macOS pipes. L81: // Without this, an ollama agent capturing our stdout via execAsync L82: // receives a cleanly cut mid-string blob and then misdiagnoses it as
High
Shell

Package source references shell execution.

bin/cock.mjsView on unpkg · L80
177// ============================================ L178: const port = process.env.PORT || process.env.COCKPIT_PORT || '3457'; L179: ... L181: try { L182: const res = await fetch(`http://localhost:${port}/api/version`, { signal: AbortSignal.timeout(1000) }); L183: return res.ok; ... L188: L189: const { exec } = await import('child_process'); L190: const running = await isServerRunning();
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cock.mjsView on unpkg · L177
dist/chunk-BFESJMNO.mjsView file
8289prop: "value", L8290: eval(fiber) { L8291: const cont = fiber.getCont(successCont);
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-BFESJMNO.mjsView on unpkg · L8289
chrome-extension/content.jsView file
211// 7. Load the automation layer (automation.js) for CLI control L212: // Loaded via import() in the isolated world (keeps chrome.runtime access) L213: // automation.js listens for cockpit:cmd postMessages, performs DOM operations, and returns results
Medium
Dynamic Require

Package source references dynamic require/import behavior.

chrome-extension/content.jsView on unpkg · L211
dist/wsServer.mjsView file
39Cross-file remote execution chain: dist/wsServer.mjs spawns dist/chunk-BFESJMNO.mjs; helper contains network access plus dynamic code execution. L39: // src/lib/wsServer.ts L40: import { WebSocketServer } from "ws"; L41: import { parse } from "url"; ... L54: try { L55: parsed = JSON.parse(String(data)); L56: } catch { ... L80: if (ws.readyState === ws.OPEN) { L81: ws.send(JSON.stringify(msg)); L82: } ... L96: // [redacted].ts L97: var isMac = process.platform === "darwin"; L98: var isWindows = process.platform === "win32";
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/wsServer.mjsView on unpkg · L39
public/tree-sitter/tree-sitter-go.wasmView file
•path = public/tree-sitter/tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

public/tree-sitter/tree-sitter-go.wasmView on unpkg
kernels/jupyter_bridge.pyView file
•path = kernels/jupyter_bridge.py kind = build_helper sizeBytes = 5532 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

kernels/jupyter_bridge.pyView on unpkg
.next-prod/static/media/KaTeX_Math-Italic.5295ba48.woffView file
•path = .next-prod/static/media/KaTeX_Math-Italic.5295ba48.woff kind = high_entropy_blob sizeBytes = 18748 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next-prod/static/media/KaTeX_Math-Italic.5295ba48.woffView on unpkg
.next-prod/server/chunks/7184.jsView file
•path = .next-prod/server/chunks/7184.js kind = payload_in_excluded_dir sizeBytes = 2511718 magicHex = [redacted]
High
Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next-prod/server/chunks/7184.jsView on unpkg
•path = .next-prod/server/chunks/7184.js kind = oversized_source_file sizeBytes = 2511718 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

.next-prod/server/chunks/7184.jsView on unpkg

Findings

1 Critical8 High9 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/cock.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/cock.mjs
HighShellbin/cock.mjs
HighSame File Env Network Executionbin/cock.mjs
HighCross File Remote Execution Contextdist/wsServer.mjs
HighShips High Entropy Blob.next-prod/static/media/KaTeX_Math-Italic.5295ba48.woff
HighPayload In Excluded Dir.next-prod/server/chunks/7184.js
HighOversized Source File.next-prod/server/chunks/7184.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirechrome-extension/content.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Modulepublic/tree-sitter/tree-sitter-go.wasm
MediumShips Build Helperkernels/jupyter_bridge.py
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/chunk-BFESJMNO.mjs
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings