registry / @threadlines/server / 0.6.0
@threadlines/server@0.6.0
Threadlines server and CLI for running coding-agent sessions.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest has no install lifecycle trigger, and the CLI begins through a Node-version check. The inspected flagged source did not establish credential exfiltration, persistence, or reviewer manipulation, so the scanner hints do not support a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the `threadlines` CLI.
Impact
No malicious effect was established from the inspected source.
Mechanism
The entrypoint checks the Node version and then loads the server CLI; inspected account-folder code keeps credential files private.
AI rationale
The manifest has no install lifecycle trigger, and the CLI begins through a Node-version check. The inspected flagged source did not establish credential exfiltration, persistence, or reviewer manipulation, so the scanner hints do not support a malicious verdict.
Evidence
package.jsondist/bin.mjsdist/bin-CB_31XgK.mjsdist/client/assets/SourceControlPanel-CxKzDWz3.js
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and has no lifecycle hook, runtime self-dependency, or install-time trigger.
- The CLI checks the Node version before importing the server bundle.
- The account-folder code keeps Claude credential files private instead of sharing them.
- The flagged client bundle contains ordinary reviewer interface text; inspected source did not establish an attack.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
15 flaggeddist/bin-CB_31XgK.mjsView file
9import { Argument, Command, Flag, GlobalFlag } from "effect/unstable/cli";
L10: import * as NodeNet from "node:net";
L11: import * as Data from "effect/Data";
...
L38: import * as Migrator from "effect/unstable/sql/Migrator";
L39: import * as childProcess from "node:child_process";
L40: import { execFile, execFileSync, spawn } from "node:child_process";
...
L66: import * as zlib from "node:zlib";
L67: import { brotliCompress, constants as constants$1, createGunzip, gzip, zstdDecompress } from "node:zlib";
L68: import * as Stdio from "effect/Stdio";
...
L82: import { RpcSerialization, RpcServer } from "effect/unstable/rpc";
L83: import * as dns from "node:dns";
L84: import * as http from "node:http";
Critical
Sensitive Archive Exfiltration
Source archives sensitive local configuration and publishes encoded chunks through an authenticated package-registry request.
dist/bin-CB_31XgK.mjsView on unpkg · L99import { Argument, Command, Flag, GlobalFlag } from "effect/unstable/cli";
L10: import * as NodeNet from "node:net";
L11: import * as Data from "effect/Data";
...
L38: import * as Migrator from "effect/unstable/sql/Migrator";
L39: import * as childProcess from "node:child_process";
L40: import { execFile, execFileSync, spawn } from "node:child_process";
...
L66: import * as zlib from "node:zlib";
L67: import { brotliCompress, constants as constants$1, createGunzip, gzip, zstdDecompress } from "node:zlib";
L68: import * as Stdio from "effect/Stdio";
...
L82: import { RpcSerialization, RpcServer } from "effect/unstable/rpc";
L83: import * as dns from "node:dns";
L84: import * as http from "node:http";
Findings
6 Critical8 High5 Medium4 Low
CriticalSensitive Archive Exfiltrationdist/bin-CB_31XgK.mjs
CriticalCredential Exfiltrationdist/bin-CB_31XgK.mjs
CriticalPersistence Backdoordist/bin-CB_31XgK.mjs
CriticalTrojan Source Unicodedist/client/assets/SourceControlPanel-CxKzDWz3.js
CriticalTrigger Reachable Dangerous Capabilitydist/bin-CB_31XgK.mjs
CriticalPrevious Version Dangerous Deltadist/bin-CB_31XgK.mjs
HighChild Processdist/bin-CB_31XgK.mjs
HighShell
HighCredential Redirect Persistencedist/bin-CB_31XgK.mjs
HighCommand Output Exfiltrationdist/bin-CB_31XgK.mjs
HighRemote Agent Bridgedist/bin-CB_31XgK.mjs
Affected versions and remediation
This report applies to @threadlines/server@0.6.0.
See all versions of @threadlines/server for other recorded verdicts.
- Review the evidence and your use of @threadlines/server@0.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.