registry / @threadlines/server / 0.6.1
@threadlines/server@0.6.1
Threadlines server and CLI for running coding-agent sessions.
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection did not substantiate the scanner’s exfiltration or persistence claims. The flagged Unicode is a whitespace fallback character, and the inspected registry use downloads a speech runtime.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Invoking the CLI starts the server; the inspected runtime download belongs to the dictation component.
Impact
No malicious effect was established from the inspected source.
Mechanism
The bundle downloads and extracts a runtime package locally; the inspected code does not show it uploading local files or credentials.
AI rationale
Source inspection did not substantiate the scanner’s exfiltration or persistence claims. The flagged Unicode is a whitespace fallback character, and the inspected registry use downloads a speech runtime.
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest maps the `threadlines` command to `dist/bin.mjs`.
- The CLI command handler starts the server when invoked.
- The server bundle selects a platform-specific speech runtime package and constructs its registry tarball URL.
- The runtime code downloads and extracts that tarball into its runtime directory.
- The client bundle’s invisible character appears in a whitespace fallback constant; no Trojan Source bidi control was found.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
15 flaggeddist/bin-Biflnq7u.mjsView file
9import { Argument, Command, Flag, GlobalFlag } from "effect/unstable/cli";
L10: import * as NodeNet from "node:net";
L11: import * as Data from "effect/Data";
...
L38: import * as Migrator from "effect/unstable/sql/Migrator";
L39: import * as childProcess from "node:child_process";
L40: import { execFile, execFileSync, spawn } from "node:child_process";
...
L66: import * as zlib from "node:zlib";
L67: import { brotliCompress, constants as constants$1, createGunzip, gzip, zstdDecompress } from "node:zlib";
L68: import * as Stdio from "effect/Stdio";
...
L82: import { RpcSerialization, RpcServer } from "effect/unstable/rpc";
L83: import * as dns from "node:dns";
L84: import * as http from "node:http";
Critical
Sensitive Archive Exfiltration
Source archives sensitive local configuration and publishes encoded chunks through an authenticated package-registry request.
dist/bin-Biflnq7u.mjsView on unpkg · L99import { Argument, Command, Flag, GlobalFlag } from "effect/unstable/cli";
L10: import * as NodeNet from "node:net";
L11: import * as Data from "effect/Data";
...
L38: import * as Migrator from "effect/unstable/sql/Migrator";
L39: import * as childProcess from "node:child_process";
L40: import { execFile, execFileSync, spawn } from "node:child_process";
...
L66: import * as zlib from "node:zlib";
L67: import { brotliCompress, constants as constants$1, createGunzip, gzip, zstdDecompress } from "node:zlib";
L68: import * as Stdio from "effect/Stdio";
...
L82: import { RpcSerialization, RpcServer } from "effect/unstable/rpc";
L83: import * as dns from "node:dns";
L84: import * as http from "node:http";
Findings
6 Critical7 High5 Medium4 Low
CriticalSensitive Archive Exfiltrationdist/bin-Biflnq7u.mjs
CriticalCredential Exfiltrationdist/bin-Biflnq7u.mjs
CriticalPersistence Backdoordist/bin-Biflnq7u.mjs
CriticalTrojan Source Unicodedist/client/assets/SourceControlPanel-Bu0bSbDf.js
CriticalTrigger Reachable Dangerous Capabilitydist/bin-Biflnq7u.mjs
CriticalPrevious Version Dangerous Deltadist/bin-Biflnq7u.mjs
HighChild Processdist/bin-Biflnq7u.mjs
HighCredential Redirect Persistencedist/bin-Biflnq7u.mjs
HighCommand Output Exfiltrationdist/bin-Biflnq7u.mjs
HighRemote Agent Bridgedist/bin-Biflnq7u.mjs
HighTrigger Reachable Credential Exfiltration
Affected versions and remediation
This report applies to @threadlines/server@0.6.1.
See all versions of @threadlines/server for other recorded verdicts.
- Review the evidence and your use of @threadlines/server@0.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.