Loading npm security reports…

@synotech/code: Suspicious npm security report (Warn) | LPM Firewall

registry / @synotech/code / 1.6.0

@synotech/code@1.6.0

syCode — terminal coding agent + team daemon sidecar for remote monitoring.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install (postinstall) and later running sycode, including interactive TTY and Anthropic/cloud features.

Impact

Untrusted native code at install; unofficial use of Claude subscription identity; session text and other-agent MCP paths exposed to this product's runtime and vendor cloud.

Mechanism

Remote native install plus Claude Code identity spoofing, cloud transcript sync, and foreign MCP config import

AI rationale

This is a first-party terminal coding agent, but install-time remote native download, Claude Code impersonation via ~/.claude.json, silent transcript sync, and foreign MCP config reads are dangerous dual-use and cannot be marked clean. No unconsented install-time mutation of a foreign agent control surface or lifecycle self-dependency chain was found, so the result is a warning rather than a publish block.

Evidence

package.jsonscripts/install-sycode-browser.mjsdist/extensions/sycode-background/src/core/anthropic-attribution.jsdist/src/cli.jsdist/extensions/sycode-cloud.jsdist/extensions/sycode-mcp-adapter/config.jsvendor/sycode-browser~/.claude.json~/.config/sycode/

Source & flagged code

25 flagged

package.jsonView file

Lines 1-42json

2 "name": "@synotech/code",

3 "version": "1.6.0",

4 "description": "syCode — terminal coding agent + team daemon sidecar for remote monitoring.",

5 "type": "module",

6 "private": false,

7 "author": "Zeal Murapa",

8 "repository": {

9 "type": "git",

10 "url": "git+https://github.com/synoptic-router/sycode.git",

11 "directory": "sycode"

12 },

13 "packageManager": "pnpm@10.33.0",

14 "engines": {

15 "node": ">=22"

16 },

17 "bin": {

18 "sycode": "dist/src/cli.js",

19 "sycode-daemon": "dist/src/daemon.js"

20 },

21 "scripts": {

22 "postinstall": "node scripts/install-sycode-browser.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

23 "pretest": "node scripts/patch-plugins.mjs",

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L11

24 "build": "tsc -p tsconfig.json",

25 "typecheck": "tsc -p tsconfig.json --noEmit",

26 "test": "vitest run",

27 "dev:daemon": "node --experimental-strip-types src/daemon.ts",

28 "start:daemon": "node dist/src/daemon.js"

29 },

30 "dependencies": {

31 "@earendil-works/pi-ai": "0.85.1",

32 "@earendil-works/pi-coding-agent": "^0.85.1",

33 "@earendil-works/pi-tui": "^0.85.1",

34 "@gotgenes/pi-permission-system": "31.1.2",

35 "@juicesharp/rpiv-todo": "2.9.0",

36 "@modelcontextprotocol/client": "2.0.0",

37 "@modelcontextprotocol/core": "2.0.0",

38 "@modelcontextprotocol/sdk": "^1.30.0",

39 "@shikijs/cli": "^4.0.2",

40 "@sinclair/typebox": "^0.34.52",

41 "acorn": "8.18.0",

42 "ajv": "8.20.0",

dist/extensions/sycode-browser/browser.jsView file

Lines 1-39javascript

1/**

2 * sycode-browser — optional browser automation via sycode-browser CLI (forked BrowserSkill).

3 *

4 * WHY THIS EXISTS

5 * syCode's `webfetch` + `websearch` can read static docs, but cannot interact

6 * with dynamic pages, fill forms, click buttons, or screenshot a page. This

7 * extension shells out to the `sycode-browser` CLI (a rebranded BrowserSkill)

8 * which drives a real, logged-in Chrome/Edge instance in a separate Agent Window.

9 *

10 * SECURITY REVIEW

dist/extensions/sycode-mcp-adapter/utils.jsView file

Lines 88-128javascript

88 return interpolateEnvVars(value.slice(1), environment);

89 return value.startsWith("!") ? value : interpolateEnvVars(value, environment);

90}

dist/extensions/sycode-background/src/core/anthropic-attribution.jsView file

Lines 1640-1680javascript

1640function createOutput(model) {

1641 return {

1642 role: 'assistant',

1643 content: [],

1644 api: model.api,

1645 provider: model.provider,

1646 model: model.id,

dist/extensions/sycode-mcp-adapter/proxy-modes.jsView file

Lines 1-39javascript

1import { UrlElicitationRequiredError } from "@modelcontextprotocol/client";

2import { createRequire } from "node:module";

3import { getServerPrefix, isServerDisabled, parseUiPromptHandoff } from "./types.js";

4import { lazyConnect, markKeepAliveAfterConnect, notifyToolMetadataUpdated, updateServerMetadata, updateMetadataCache, getFailureAgeSeconds, updateStatusBar, clearFailure, recordFailure }

extensions/sycode-mcp-adapter/mcp-script-worker.mjsView file

Lines 20-60javascript

20}

22function formatValue(value) {

23 if (typeof value === "string") return value;

24 try {

dist/extensions/sycode-mcp-adapter/ui-session.jsView file

Lines 63-103javascript

63 structuredContent,

64 };

65}

66async function openInBrowser(state, url, signal) {

67 throwIfAborted(signal);

68 try

dist/src/cli.jsView file

4// extension, theme). User-facing output never names the engine. L5: import { spawn } from "node:child_process"; L6: import { existsSync, mkdirSync, readFileSync } from "node:fs"; ... L33: // no upstream version check, no install telemetry ping, no opencode web panel. L34: process.env.PI_SKIP_VERSION_CHECK ??= "1"; L35: process.env.PI_TELEMETRY ??= "0"; ... L39: // Share links open our viewer, never the upstream one. L40: process.env.PI_SHARE_VIEWER_URL ??= "https://code.synotech.dev/share/"; L41: const argv = process.argv.slice(2); L42: if (argv.includes("--help") || argv.includes("-h")) { L43: process.stdout.write(SYCODE_HELP); L44: process.exit(0);

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/src/cli.jsView on unpkg · L4

4Trigger-reachable chain: manifest.bin -> dist/src/cli.js L4: // extension, theme). User-facing output never names the engine. L5: import { spawn } from "node:child_process"; L6: import { existsSync, mkdirSync, readFileSync } from "node:fs"; ... L33: // no upstream version check, no install telemetry ping, no opencode web panel. L34: process.env.PI_SKIP_VERSION_CHECK ??= "1"; L35: process.env.PI_TELEMETRY ??= "0"; ... L39: // Share links open our viewer, never the upstream one. L40: process.env.PI_SHARE_VIEWER_URL ??= "https://code.synotech.dev/share/"; L41: const argv = process.argv.slice(2); L42: if (argv.includes("--help") || argv.includes("-h")) { L43: process.stdout.write(SYCODE_HELP); L44: process.exit(0);

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/src/cli.jsView on unpkg · L4

dist/src/cloud.jsView file

12import { SYCODE_BRAND } from "./brand.js"; L13: export const CLOUD_BASE_URL = process.env.SYCODE_CLOUD_URL ?? "https://code.synotech.dev/api"; L14: export const CLOUD_APP_ID = "sycode-cloud"; ... L18: export const CLOUD_CACHE_TTL_MS = 24 * 60 * 60 * 1000; L19: const dir = () => join(homedir(), ".config", SYCODE_BRAND.name); L20: export const licensePath = () => process.env.SYCODE_LICENSE_FILE ?? join(dir(), "license"); ... L28: try { L29: const parsed = JSON.parse(readFileSync(devicePath(), "utf8")); L30: return typeof parsed.device_token === "string" && parsed.device_token ? parsed.device_token : null; ... L177: }, L178: body: JSON.stringify(params), L179: });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/cloud.jsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/src/cloud.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cloud.jsView on unpkg

dist/extensions/sycode-background/src/core/fusion/web-fetch.jsView file

1import { createHash } from 'node:crypto'; L2: import { lookup as nodeLookup } from 'node:dns/promises'; L3: import * as http from 'node:http'; ... L6: import { performance } from 'node:perf_hooks'; L7: import { TextDecoder } from 'node:util'; L8: export const FUSION_WEB_FETCH_TIMEOUT_MS = 90_000; ... L371: response.once('end', () => { L372: settleResolve({ kind: 'success', status, contentType, body: Buffer.concat(chunks, bytesRead) }); L373: });

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/extensions/sycode-background/src/core/fusion/web-fetch.jsView on unpkg · L1

dist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 20

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1View on unpkg

dist/extensions/sycode-background/src/core/registry.jsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/extensions/sycode-background/src/core/registry.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/registry.jsView on unpkg

dist/extensions/sycode-mcp-adapter/mcp-auth.jsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/extensions/sycode-mcp-adapter/mcp-auth.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/mcp-auth.jsView on unpkg

extensions/sycode-background/src/core/registry.tsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = extensions/sycode-background/src/core/registry.ts matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-background/src/core/registry.tsView on unpkg

extensions/sycode-mcp-adapter/mcp-auth.tsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = extensions/sycode-mcp-adapter/mcp-auth.ts matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-mcp-adapter/mcp-auth.tsView on unpkg

dist/extensions/sycode-background/src/core/fusion/pi-child.jsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/extensions/sycode-background/src/core/fusion/pi-child.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/fusion/pi-child.jsView on unpkg

dist/extensions/sycode-mcp-adapter/request-headers-command.jsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/extensions/sycode-mcp-adapter/request-headers-command.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/request-headers-command.jsView on unpkg

dist/src/daemon-manage.jsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/src/daemon-manage.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/daemon-manage.jsView on unpkg

extensions/sycode-background/src/core/fusion/pi-child.tsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = extensions/sycode-background/src/core/fusion/pi-child.ts matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-background/src/core/fusion/pi-child.tsView on unpkg

extensions/sycode-mcp-adapter/request-headers-command.tsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = extensions/sycode-mcp-adapter/request-headers-command.ts matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-mcp-adapter/request-headers-command.tsView on unpkg

dist/extensions/sycode-background/src/core/attested-pi-run.jsView file

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/extensions/sycode-background/src/core/attested-pi-run.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/attested-pi-run.jsView on unpkg

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-sycode-browser.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

11scripts.postinstall = node scripts/install-sycode-browser.mjs Install-time code downloads an unverified remote native archive, stages it locally, activates an executable path, and exposes it to process execution. L11: import { createHash } from "node:crypto"; L12: import { createWriteStream, existsSync, mkdirSync, readFileSync } from "node:fs"; L13: import { dirname, join } from "node:path"; ... L16: const REPO = process.env.SYCODE_BROWSER_REPO ?? "synoptic-technologies/sycode-browser"; L17: const GITHUB = `https://github.com/${REPO}`; L18: // Public turnkey channel (OCI static hosting). The fork repo is private so ... L21: const DIST_BASE = L22: process.env.SYCODE_BROWSER_DIST_BASE ?? "https://code.synotech.dev/releases"; L23: const MANIFEST_FILE = "sycode-browser-version.json"; ... L48:

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L11

dist/extensions/sycode-browser/browser.jsView file

19import { Type } from "@sinclair/typebox"; L20: import { execFile } from "node:child_process"; L21: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/extensions/sycode-browser/browser.jsView on unpkg · L19

dist/extensions/sycode-mcp-adapter/utils.jsView file

108const result = spawnSync(value.slice(1), { L109: shell: true, L110: encoding: "utf8",

High

Shell

Package source references shell execution.

dist/extensions/sycode-mcp-adapter/utils.jsView on unpkg · L108

dist/extensions/sycode-background/src/core/anthropic-attribution.jsView file

1660try { L1661: const dynamicImport = new Function('specifier', 'return import(specifier)'); L1662: const mod = await dynamicImport('@earendil-works/pi-ai/anthropic');

High

Eval

Package source references dynamic code evaluation.

dist/extensions/sycode-background/src/core/anthropic-attribution.jsView on unpkg · L1660

dist/extensions/sycode-mcp-adapter/proxy-modes.jsView file

19import { getInputRequiredNeedsUiDetails } from "./errors.js"; L20: const require = createRequire(import.meta.url); L21: const MAX_REGEX_SEARCH_QUERY_LENGTH = 256;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/extensions/sycode-mcp-adapter/proxy-modes.jsView on unpkg · L19

extensions/sycode-mcp-adapter/mcp-script-worker.mjsView file

40if (value.type === "image" && typeof value.data === "string" && typeof value.mimeType === "string") { L41: return { type: "image", data: value.data, mimeType: value.mimeType }; L42: }

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

extensions/sycode-mcp-adapter/mcp-script-worker.mjsView on unpkg · L40

dist/extensions/sycode-mcp-adapter/ui-session.jsView file

83function isRemoteSession() { L84: return Boolean(process.env.SSH_CONNECTION || process.env.SSH_TTY); L85: } ... L87: return new Promise((resolve) => { L88: execFile("who", { encoding: "utf8", timeout: 2000 }, (error, out) => { L89: if (error) { ... L98: return new Promise((resolve) => { L99: const socket = net.connect({ host: "127.0.0.1", port: 24543 }); L100: const done = (ok) => {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/extensions/sycode-mcp-adapter/ui-session.jsView on unpkg · L83

•matchType = normalized_sha256 matchedPackage = @synotech/code@1.5.3 matchedPath = dist/extensions/sycode-mcp-adapter/ui-session.js matchedIdentity = npm:QHN5bm90ZWNoL2NvZGU:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/ui-session.jsView on unpkg

dist/src/cli.jsView file

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/src/cli.jsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/src/cli.jsView on unpkg · L4

dist/src/cloud.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/cloud.jsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cloud.jsView on unpkg

dist/extensions/sycode-background/src/core/fusion/web-fetch.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/extensions/sycode-background/src/core/fusion/web-fetch.jsView on unpkg · L1

dist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 20

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1View on unpkg

dist/extensions/sycode-background/src/core/registry.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/registry.jsView on unpkg

dist/extensions/sycode-mcp-adapter/mcp-auth.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/mcp-auth.jsView on unpkg

extensions/sycode-background/src/core/registry.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-background/src/core/registry.tsView on unpkg

extensions/sycode-mcp-adapter/mcp-auth.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-mcp-adapter/mcp-auth.tsView on unpkg

dist/extensions/sycode-background/src/core/fusion/pi-child.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/fusion/pi-child.jsView on unpkg

dist/extensions/sycode-mcp-adapter/request-headers-command.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/request-headers-command.jsView on unpkg

dist/src/daemon-manage.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/daemon-manage.jsView on unpkg

extensions/sycode-background/src/core/fusion/pi-child.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-background/src/core/fusion/pi-child.tsView on unpkg

extensions/sycode-mcp-adapter/request-headers-command.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-mcp-adapter/request-headers-command.tsView on unpkg

dist/extensions/sycode-background/src/core/attested-pi-run.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/attested-pi-run.jsView on unpkg

Findings

2 Critical21 High5 Medium5 Low

CriticalDownload Executedist/src/cli.js

CriticalTrigger Reachable Dangerous Capabilitydist/src/cli.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/extensions/sycode-browser/browser.js

HighShelldist/extensions/sycode-mcp-adapter/utils.js

HighEvaldist/extensions/sycode-background/src/core/anthropic-attribution.js

HighSame File Env Network Executiondist/extensions/sycode-mcp-adapter/ui-session.js

HighUnverified Remote Native Payload Installpackage.json

HighSandbox Evasion Gated Capabilitydist/src/cloud.js

HighCloud Metadata Accessdist/extensions/sycode-background/src/core/fusion/web-fetch.js

HighSemantic Analysis Limiteddist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/extensions/sycode-background/src/core/registry.js

HighKnown Malware Source Similaritydist/extensions/sycode-mcp-adapter/mcp-auth.js

HighKnown Malware Source Similarityextensions/sycode-background/src/core/registry.ts

HighKnown Malware Source Similarityextensions/sycode-mcp-adapter/mcp-auth.ts

HighKnown Malware Source Similaritydist/src/cloud.js

HighKnown Malware Source Similaritydist/extensions/sycode-background/src/core/fusion/pi-child.js

HighKnown Malware Source Similaritydist/extensions/sycode-mcp-adapter/request-headers-command.js

HighKnown Malware Source Similaritydist/src/daemon-manage.js

HighKnown Malware Source Similarityextensions/sycode-background/src/core/fusion/pi-child.ts

HighKnown Malware Source Similarityextensions/sycode-mcp-adapter/request-headers-command.ts

HighKnown Malware Source Similaritydist/extensions/sycode-background/src/core/attested-pi-run.js

HighKnown Malware Source Similaritydist/extensions/sycode-mcp-adapter/ui-session.js

MediumDynamic Requiredist/extensions/sycode-mcp-adapter/proxy-modes.js

MediumUnsafe Vm Contextextensions/sycode-mcp-adapter/mcp-script-worker.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

25 flagged

package.jsonView file

Lines 1-42json

2 "name": "@synotech/code",

3 "version": "1.6.0",

4 "description": "syCode — terminal coding agent + team daemon sidecar for remote monitoring.",

5 "type": "module",

6 "private": false,

7 "author": "Zeal Murapa",

8 "repository": {

9 "type": "git",

10 "url": "git+https://github.com/synoptic-router/sycode.git",

11 "directory": "sycode"

12 },

13 "packageManager": "pnpm@10.33.0",

14 "engines": {

15 "node": ">=22"

16 },

17 "bin": {

18 "sycode": "dist/src/cli.js",

19 "sycode-daemon": "dist/src/daemon.js"

20 },

21 "scripts": {

22 "postinstall": "node scripts/install-sycode-browser.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

23 "pretest": "node scripts/patch-plugins.mjs",

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L11

24 "build": "tsc -p tsconfig.json",

25 "typecheck": "tsc -p tsconfig.json --noEmit",

26 "test": "vitest run",

27 "dev:daemon": "node --experimental-strip-types src/daemon.ts",

28 "start:daemon": "node dist/src/daemon.js"

29 },

30 "dependencies": {

31 "@earendil-works/pi-ai": "0.85.1",

32 "@earendil-works/pi-coding-agent": "^0.85.1",

33 "@earendil-works/pi-tui": "^0.85.1",

34 "@gotgenes/pi-permission-system": "31.1.2",

35 "@juicesharp/rpiv-todo": "2.9.0",

36 "@modelcontextprotocol/client": "2.0.0",

37 "@modelcontextprotocol/core": "2.0.0",

38 "@modelcontextprotocol/sdk": "^1.30.0",

39 "@shikijs/cli": "^4.0.2",

40 "@sinclair/typebox": "^0.34.52",

41 "acorn": "8.18.0",

42 "ajv": "8.20.0",

dist/extensions/sycode-browser/browser.jsView file

Lines 1-39javascript

1/**

2 * sycode-browser — optional browser automation via sycode-browser CLI (forked BrowserSkill).

3 *

4 * WHY THIS EXISTS

5 * syCode's `webfetch` + `websearch` can read static docs, but cannot interact

6 * with dynamic pages, fill forms, click buttons, or screenshot a page. This

7 * extension shells out to the `sycode-browser` CLI (a rebranded BrowserSkill)

8 * which drives a real, logged-in Chrome/Edge instance in a separate Agent Window.

9 *

10 * SECURITY REVIEW

dist/extensions/sycode-mcp-adapter/utils.jsView file

Lines 88-128javascript

88 return interpolateEnvVars(value.slice(1), environment);

89 return value.startsWith("!") ? value : interpolateEnvVars(value, environment);

90}

dist/extensions/sycode-background/src/core/anthropic-attribution.jsView file

Lines 1640-1680javascript

1640function createOutput(model) {

1641 return {

1642 role: 'assistant',

1643 content: [],

1644 api: model.api,

1645 provider: model.provider,

1646 model: model.id,

dist/extensions/sycode-mcp-adapter/proxy-modes.jsView file

Lines 1-39javascript

1import { UrlElicitationRequiredError } from "@modelcontextprotocol/client";

2import { createRequire } from "node:module";

3import { getServerPrefix, isServerDisabled, parseUiPromptHandoff } from "./types.js";

4import { lazyConnect, markKeepAliveAfterConnect, notifyToolMetadataUpdated, updateServerMetadata, updateMetadataCache, getFailureAgeSeconds, updateStatusBar, clearFailure, recordFailure }

extensions/sycode-mcp-adapter/mcp-script-worker.mjsView file

Lines 20-60javascript

20}

22function formatValue(value) {

23 if (typeof value === "string") return value;

24 try {

dist/extensions/sycode-mcp-adapter/ui-session.jsView file

Lines 63-103javascript

63 structuredContent,

64 };

65}

66async function openInBrowser(state, url, signal) {

67 throwIfAborted(signal);

68 try

dist/src/cli.jsView file

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/src/cli.jsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/src/cli.jsView on unpkg · L4

dist/src/cloud.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/src/cloud.jsView on unpkg · L12

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cloud.jsView on unpkg

dist/extensions/sycode-background/src/core/fusion/web-fetch.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/extensions/sycode-background/src/core/fusion/web-fetch.jsView on unpkg · L1

dist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 20

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/extensions/sycode-background/src/core/common.js#virtual:normalized:round1View on unpkg

dist/extensions/sycode-background/src/core/registry.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/registry.jsView on unpkg

dist/extensions/sycode-mcp-adapter/mcp-auth.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/mcp-auth.jsView on unpkg

extensions/sycode-background/src/core/registry.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-background/src/core/registry.tsView on unpkg

extensions/sycode-mcp-adapter/mcp-auth.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-mcp-adapter/mcp-auth.tsView on unpkg

dist/extensions/sycode-background/src/core/fusion/pi-child.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/fusion/pi-child.jsView on unpkg

dist/extensions/sycode-mcp-adapter/request-headers-command.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-mcp-adapter/request-headers-command.jsView on unpkg

dist/src/daemon-manage.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/daemon-manage.jsView on unpkg

extensions/sycode-background/src/core/fusion/pi-child.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-background/src/core/fusion/pi-child.tsView on unpkg

extensions/sycode-mcp-adapter/request-headers-command.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

extensions/sycode-mcp-adapter/request-headers-command.tsView on unpkg

dist/extensions/sycode-background/src/core/attested-pi-run.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/extensions/sycode-background/src/core/attested-pi-run.jsView on unpkg

@synotech/code@1.6.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code