@tapi-dev/sdk@0.2.6: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@tapi-dev/sdk@0.2.6: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

11 flagged · loading source

dist/auth.jsView file

6patternName = google_api_key severity = high line = 6

High

High Secret

Package contains a high-severity secret pattern.

dist/auth.jsView on unpkg · L6

6patternName = google_api_key severity = high line = 6

High

Secret Pattern

Google API key in dist/auth.js

dist/auth.jsView on unpkg · L6

dist/workflow-cli.jsView file

3import { resolve, join } from "node:path"; L4: import { spawn } from "node:child_process"; L5: import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

dist/workflow-cli.jsView on unpkg · L3

3Cross-file remote execution chain: dist/workflow-cli.js spawns dist/cli.js; helper contains network access plus dynamic code execution. L3: import { resolve, join } from "node:path"; L4: import { spawn } from "node:child_process"; L5: import { fileURLToPath } from "node:url"; ... L9: export function workspaceArguments(args) { L10: const root = resolve(option(args, "--workspace") || process.cwd()); L11: const workspace = loadWorkspace(root); ... L104: throw new Error("Choose an existing session with --session; dev does not open or reset a browser"); L105: const job = await client.workflows.run({ sessionId, versionId: version.version_id, inputs: JSON.parse(option(expanded, "--input") || "{}") }); L106: await serveWorkflowJobs(options, { jobId: job.job_id, once: true });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/workflow-cli.jsView on unpkg · L3

dist/studio-dev.jsView file

1import { spawn } from "node:child_process"; L2: import { createServer } from "node:net"; L3: import { existsSync, readFileSync } from "node:fs"; ... L22: const phases = [{ message: "SDK development launch requested" }]; L23: const workspaceRoot = findWorkspaceRoot(options.workspaceRoot || process.cwd()); L24: const uiRoot = join(workspaceRoot, "tapi_v3", "studio", "browser"); ... L39: const env = { L40: ...process.env, L41: TAPI_DEV_CONFIG: runner.context.configPath, ... L49: phases.push({ message: "Vite UI is ready", detail: `${DEV_HOST}:${uiPort}` }); L50: const launchTrace = Buffer.from(JSON.stringify({ phases }), "utf8").toString("base64url"); L51: const url = `http://${DEV_HOST}:${uiPort}/?tapp=${encodeURIComponent(tappId)}&tapiDevLaunch=${launchTrace}`;

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/studio-dev.jsView on unpkg · L1

1Trigger-reachable chain: manifest.bin -> dist/cli.js -> dist/studio-dev.js L1: import { spawn } from "node:child_process"; L2: import { createServer } from "node:net"; L3: import { existsSync, readFileSync } from "node:fs"; ... L22: const phases = [{ message: "SDK development launch requested" }]; L23: const workspaceRoot = findWorkspaceRoot(options.workspaceRoot || process.cwd()); L24: const uiRoot = join(workspaceRoot, "tapi_v3", "studio", "browser"); ... L39: const env = { L40: ...process.env, L41: TAPI_DEV_CONFIG: runner.context.configPath, ... L49: phases.push({ message: "Vite UI is ready", detail: `${DEV_HOST}:${uiPort}` }); L50: const launchTrace = Buffer.from(JSON.stringify({ phases }), "utf8").toString("base64url"); L51: const url = `http://${DEV_HOST}:${uiPort}/?tapp=${encodeURIC

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/studio-dev.jsView on unpkg · L1

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tapi-dev/sdk@0.1.45 matchedIdentity = npm:QHRhcGktZGV2L3Nkaw:0.1.45 similarity = 0.611 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: import { mkdir, readFile, readdir, rename, rm, stat, statfs, unlink, writeFile } from "node:fs/promises"; import { emitKeypressEvents } from "node:readline"; raw.apiBaseUrl = requireOptionValue(args, ++index, arg); raw.apiBaseUrl = arg.slice("--api-base-url=".length); raw.apiBaseUrl = arg.slice("--server=".length); const apiBaseUrl = normalizeHttpUrl(raw.apiBaseUrl const downloadsBaseUrl = normalizeHttpUrl(envString("TAPI_DOWNLOADS_BASE_URL") ?? DEFAULT_DOWNLOADS_BASE_URL, "TAPI_DOWNLOADS_BASE_URL"); : `${downloadsBaseUrl.replace(/\/+$/, "")}/studio/channels/${channel}/latest.json`;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

27patternName = google_api_key severity = high line = 27

High

Secret Pattern

Google API key in dist/cli.js

dist/cli.jsView on unpkg · L27

Source & flagged code

11 flagged

dist/auth.jsView file

Lines 1-26javascript

1import { randomUUID } from "node:crypto";

2import { existsSync, readFileSync } from "node:fs";

3import { mkdir, rename, rm, writeFile } from "node:fs/promises";

4import { homedir } from "node:os";

5import { dirname, join } from "node:path";

6const DEFAULT_FIREBASE_API_KEY = "AIzaSyCDZR8lWyVQcWYfFdNZa4vuL4IWEC0h6gE";

High

High Secret

Package contains a high-severity secret pattern.

dist/auth.jsView on unpkg · L6

High

Secret Pattern

Google API key in dist/auth.js

dist/auth.jsView on unpkg · L6

7const DEFAULT_EXPIRY_SKEW_MS = 60_000;

8export function getTapiDataDir() {

9 if (process.platform === "win32") {

10 return join(process.env.LOCALAPPDATA || join(process.env.USERPROFILE || homedir(), "AppData", "Local"), "Tapi");

11 }

12 return join(process.env.XDG_DATA_HOME || join(homedir(), ".local", "share"), "tapi");

13}

14export function getTapiAuthCachePath(options = {}) {

15 return options.cachePath || join(getTapiDataDir(), "auth.json");

16}

17export function readTapiCredentials(options = {}) {

18 const path = getTapiAuthCachePath(options);

19 if (!existsSync(path))

20 return null;

21 try {

22 const value = JSON.parse(readFileSync(path, "utf8"));

23 const credentials = {

24 uid: String(value.uid || "").trim(),

25 idToken: String(value.id_token || "").trim(),

26 refreshToken: String(value.refresh_token || "").trim(),

dist/workflow-cli.jsView file

Lines 1-23javascript

1import { mkdir, writeFile } from "node:fs/promises";

2import { loadWorkspace } from "./workspace.js";

3import { resolve, join } from "node:path";

4import { spawn } from "node:child_process";

dist/studio-dev.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { createServer } from "node:net";

3import { existsSync, readFileSync } from "node:fs";

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

dist/studio-dev.jsView on unpkg · L1

Critical

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tapi-dev/sdk@0.1.45 matchedIdentity = npm:QHRhcGktZGV2L3Nkaw:0.1.45 similarity = 0.611 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: import { mkdir, readFile, readdir, rename, rm, stat, statfs, unlink, writeFile } from "node:fs/promises"; import { emitKeypressEvents } from "node:readline"; raw.apiBaseUrl = requireOptionValue(args, ++index, arg); raw.apiBaseUrl = arg.slice("--api-base-url=".length); raw.apiBaseUrl = arg.slice("--server=".length); const apiBaseUrl = normalizeHttpUrl(raw.apiBaseUrl const downloadsBaseUrl = normalizeHttpUrl(envString("TAPI_DOWNLOADS_BASE_URL") ?? DEFAULT_DOWNLOADS_BASE_URL, "TAPI_DOWNLOADS_BASE_URL"); : `${downloadsBaseUrl.replace(/\/+$/, "")}/studio/channels/${channel}/latest.json`;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

27patternName = google_api_key severity = high line = 27

High

Secret Pattern

Google API key in dist/cli.js

dist/cli.jsView on unpkg · L27