registry / @thxp/llms / 3.2.26

@thxp/llms@3.2.26

A universal LLM API transformation server

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a universal LLM API transformation/router server with provider-aligned outbound requests, optional Google Vertex auth, optional webhook reporting, and local config/cache/stat files.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User imports the module or explicitly starts the server with npm start/node dist entrypoint and configures providers/plugins.

Impact

Expected proxying of user LLM requests to configured provider endpoints; optional local stats/config writes and user-configured webhook output.

Mechanism

LLM request routing and transformation with optional telemetry reporters

Rationale

Static inspection of package-owned sourcemap sources found expected LLM router behavior, not credential exfiltration or install/import-time compromise. Environment/credential reads and outbound requests are tied to user-configured providers, Vertex auth, tokenizers, or explicit webhook plugins.

Evidence

package.jsonREADME.mddist/esm/server.mjs.mapdist/cjs/server.cjsdist/esm/server.mjs~/.claude-code-router/config.json~/.claude-code-router/daily_usage.json~/.claude-code-router/.huggingface/*temporary token-speed output under configured temp directory

Network endpoints4

configured provider api_base_url valuesconfigured webhook URL<location>-aiplatform.googleapis.comHugging Face tokenizer URLs derived from modelId

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall/install/postinstall hooks and only exports dist/cjs/server.cjs and dist/esm/server.mjs.
Source map shows package-owned network calls are LLM/router functionality: src/utils/request.ts posts user requests to configured provider URLs.
Vertex transformers read GOOGLE_* env and credential file only to obtain Google access tokens for user-selected Vertex AI providers.
Webhook/temp-file output handlers are plugin/config driven; webhook URL must be supplied and temp files store token-speed stats under claude-code-router paths.
No child_process spawn/exec in package-owned sources; broad scanner hits came from bundled dependencies/source-map noise.
Server start is explicit via start script or Server.start(); importing package exports classes/services and does not run npm lifecycle mutation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 956 KB of source, external domains: 169.254.169.254, cloud.google.com, github.com, metadata.google.internal, oauth2.googleapis.com, www.googleapis.com

Source & flagged code

7 flagged

dist/esm/server.mjsView file

Lines 1-80javascript

1var k_=Object.create;var gu=Object.defineProperty;var D_=Object.getOwnPropertyDescriptor;var T_=Object.getOwnPropertyNames;var v_=Object.getPrototypeOf,R_=Object.prototype.hasOwnProperty;var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,r)=>(typeof require<"u"?require:e)[r]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var Le=(t,e)=>()=>(t&&(e=t(t=0)),e);var J=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),vf=(t,e)=>{for(var r in e)gu(t,r,{get:e[r],enumerable:!0})},O_=(t, ...

2`?(Pr++,Nt=0):t?Nt+=t.length:Nt++,t&&(Lo+=t.length),t}var Ff={default(){switch(we){case" ":case"\v":case"\f":case" ":case"\xA0":case"\uFEFF":case`

3`:case"\r":case"\u2028":case"\u2029":W();return;case"/":W(),_e="comment";return;case void 0:return W(),Be("eof")}if(ze.isSpaceSeparator(we)){W();return}return Ff[tt]()},comment(){switch(we){case"*":W(),_e="multiLineComment";return;case"/":W(),_e="singleLineComment";return}throw je(W())},multiLineComment(){switch(we){case"*":W(),_e="multiLineCommentAsterisk";return;case void 0:throw je(W())}W()},multiLineCommentAsterisk(){switch(we){case"*":W();return;case"/":W(),_e="default";return;case void 0:throw je(W())}W(),_e="multiLineComment"},singleLineComment(){switch(we){case`

4`:case"\r":case"\u2028":case"\u2029":W(),_e="default";return;case void 0:return W(),Be("eof")}W()},value(){switch(we){case"{":case"[":return Be("punctuator",W());case"n":return W(),en("ull"),Be("null",null);case"t":return W(),en("rue"),Be("boolean",!0);case"f":return W(),en("alse"),Be("boolean",!1);case"-":case"+":W()==="-"&&(hr=-1),_e="sign";return;case".":me=W(),_e="decimalPointLeading";return;case"0":me=W(),_e="zero";return;case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":me=W(),_e="decimalInteger";return;case"I":return W(),en("nfinity"),Be("numeric",1/0);case"N":retu ...

5`:case"\r":throw je(W());case"\u2028":case"\u2029":N_(we);break;case void 0:throw je(W())}me+=W()},start(){switch(we){case

6`;case"r":return W(),"\r";case"t":return W()," ";case"v":return W(),"\v";case"0":if(W(),ze.isDigit(mr()))throw je(W());return"\0";case"x":return W(),P_();case"u":return W(),Eu();case`

7`:case"\u2028":case"\u2029":return W(),"";case"\r":return W(),mr()===`

8`&&W(),"";case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":throw je(W());case void 0:throw je(W())}return W()}function P_(){let t="",e=mr();if(!ze.isHexDigit(e)||(t+=W(),e=mr(),!ze.isHexDigit(e)))throw je(W());return t+=W(),String.fromCodePoint(parseInt(t,16))}function Eu(){let t="",e=4;for(;e-- >0;){let r=mr();if(!ze.isHexDigit(r))throw je(W());t+=W()}return String.fromCodePoint(parseInt(t,16))}var I_={start(){if(He.type==="eof")throw tn();bu()},beforePropertyName(){switch(He.type){case"identifier":case"string":Au=He.value,tt="afterPropertyName";return;case"punctuator": ...

9`+i;A=D.join(v),b=`{

10`+i+A+`,

11`+_+"}"}}return s.pop(),i=_,b}function k(y){if(y.length===0)return p(y,!0);let _=String.fromCodePoint(y.codePointAt(0));if(!Su.isIdStartChar(_))return p(y,!0);for(

12`+i,A=m.join(b);D=`[

13`+i+A+`,

14`+_+"]"}return s.pop(),i=_,D}}});var ku=J((OT,Mf)=>{var B_=Nf(),j_=jf(),M_={parse:B_,stringify:j_};Mf.exports=M_});var

15`)||n,code:i,status:s},e.data.error)}return Object.assign({message:n,code:i,status:s},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};Et.GaxiosError=Iu;function pb(t,e){switch(t){case"stream":return e;case"json":return JSON.parse(JSON.stringify(e));case"arraybuffer":return JSON.parse(Buffer.from(e).toString("utf8"));case"blob":return JSON.parse(e.text());default:return e}}function lh(t){let e="<<REDACTED> - See `errorRedactor` option in `gaxios` for configuration>.";function r(i){i&&i.forEach((u,c)=>{(/^authentication$/i.test(c)||/^authorization$/i.test(c)||/secret/i.test( ...

16`).join(`

17`+i),t.push(s+"m+"+ti.exports.humanize(this.diff)+"\x1B[0m")}else t[0]=Nb()+e+" "+t[0]}function Nb(){return Ge.inspectOpts.hideDate?"":new Date().toISOString()+

18`)}function jb(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Mb(){return process.env.DEBUG}function Lb(t){t.inspectOpts={};let e=Object.keys(Ge.inspectOpts);

19`).map(e=>e.trim()).join(" ")};Eh.O=function(t){return this.inspectOpts.colors=this.useColors,ei.inspect(t,this.inspectOpts)}});var zu=J((jv,$u)=>{typeof process>

20`).some(n=>n.indexOf("(https.js:")!==-1||n.indexOf("node:https:")!==-1)}incrementSockets(e){if(this.maxSockets===1/0&&this.maxTotalSockets===1/0)return null;this.sockets[e]||(this.sockets[e]=[]);let r=new Vb.Socket({writable:!1});return this.sockets[e].push(r),this.totalSocketCount++,r}decrementSockets(e,r){if(!this.sockets[e]||r===null)return;let n=this.sockets[e],s=n.indexOf(r);s!==-1&&(n.splice(s,1),this.totalSocketCount--,n.length===0&&delete this.sockets[e])}getName(e){return this.isSecureEndpoint(e)?Kb.Agent.prototype.getName.call(this,e):super.getName(e)}createSocket(e,r,n){let s={...r, ...

21\r

22`);if(g===-1){ri("have not received end of HTTP headers yet..."),i();return}let k=p.slice(0,g).toString("ascii").split(`\r

23`),E=k.shift();if(!E)return t.destroy(),r(new Error("No header received from proxy CONNECT response"));let y=E.split(" "),_=+y[1],m=y.slice(2).join(" "),D={};for

24`;if(n.username||n.password){let g=`${decodeURIComponent(n.username)}:${decodeURIComponent(n.password)}`;i["Proxy-Authorization"]=`Basic ${Buffer.from(g).toString("base64")}`}i.Host=`${u}:${r.port}`,

25`;let l=(0,oC.parseProxyResponse)(s);s.write(`${c}\r

26`);let{connect:d,buffered:h}=await l;if(e.emit("proxyConnect",d),this.emit("proxyConnect",d,e),d.statusCode===200)return e.once("socket",iC),r.secureEndpoint?(As("Upgrading socket connection to TLS"),Fh.connect({...Ih(Ph(r),"host","path","port"),socket:s})):s;s.destroy();let p=new ni.Socket({writable:!1});return p.readable=!0,e.once("socket",g=>{As("Replaying proxy buffer for failed request"),(0,tC.default)(g.listenerCount("data")>0),g.push(h),g.push(null)}),p}};si.protocols=["http","https"];St.HttpsProxyAgent=si;function iC(t){t.resume()}function Ih(t,...e){let r={},n;for(n in t)e.includes(n) ...

27Content-Disposition: form-data; name="`;return t.forEach((i,u)=>typeof i=="string"?n.push(s+Vu(u)+`"\r

29${i.replace(/\r(?!\n)|(?<!\r)\n/g,`\r

30`)}\r

31`):n.push(s+Vu(u)+`"; filename="${Vu(i.name,1)}"\r

32Content-Type: ${i.type||"application/octet-stream"}\r

33\r

34`,i,`\r

35`)),n.push(`--${r}--`),new e(n,{type:"multipart/form-data; boundary="+r})}var ks,dC,fC,Wh,hC,Gh,Vu,sn,jr,ii=Le(()=>{Ss();Ju();({toStringTag:ks,iterator:dC,hasInstance:fC}=Symbol),Wh=Math.random,hC="append,set,get,getAll,delete,keys,values,entries,forEach,constructor".split(","),Gh=(t,e,r)=>(t+="",/^(Blob|File)$/.test(e&&e[ks])?[(r=r!==void 0?r+"":e[ks]=="File"?e.name:"blob",t),e.name!==r||e[ks]=="blob"?new Br([e],r,e):e]:[t,e+""]),Vu=(t,e)=>(e?t:t.replace(/\r?\n|\r/g,`\r

36`)).replace(/\n/g,"%0A").replace(/\r/g,"%0D").replace(/"/g,"%22"),sn=(t,e,r)=>{if(e.length<r)throw new TypeError(`Failed to execute '${t}' on 'FormData': ${r} arguments required, but only ${e.length} present.`)},jr=class

37--`+e;let r=new Uint8Array(e.length);for(let n=0;n<e.length;n++)r[n]=e.charCodeAt(n),this.boundaryChars[r[n]]=!0;this.boundary=r,this.lookbehind=new Uint8Array(this.boundary.length+8),this.state=Ie.START_BOUNDARY

38\r

39`),n=!1,s=!1,i;t.on("response",u=>{let{headers:c}=u;n=c["transfer-encoding"]==="chunked"&&!c["content-length"]}),t.on("socket",u=>{let c=()=>{if(n&&!s){let d=new Error("Premature close");d.code="ERR_STREAM_PREMATURE_CLOSE",e(d)}},l=d=>{s=_i.compare(d.slice(-5),r)===0,!s&&i&&(s=_i.compare(i.slice(-3),r.slice(0,3))===0&&_i.compare(d.slice(-2),r.slice(3))===0),i=d};u.prependListener("close",c),u.on("data",l),t.on("close",()=>{u.removeListener("close",c),u.removeListener("data",l)})})}var NC,xp=Le(()=>{Lh();pi();gp();yi();Dp();Ku();Tp();nc();ii();ci();sc();Qu();NC=new Set(["data:","http:","https:" ...

40Content-Type: ${i}\r

41\r

42`,typeof s.content=="string"?yield s.content:yield*s.content,yield`\r

43`}yield n}static#o;static#i;static async#a(){return this.#o||=(await Promise.resolve().then(()=>Fr(jh()))).HttpsProxyAgent,this.#o}static async#u(){let e=typeof window<"u"&&!!window;return this.#i||=e?window.fetch

44`+n+_.join(`,

45`+n)+`

46`+y+"]":"["+_.join(",")+"]",n=y,k}if(u&&typeof u=="object")for(E=u.length,p=0;p<E;p+=1)typeof u[p]=="string"&&(g=u[p],k=l(g,m),k&&_.push(c(g)+(n?": ":":")+k));else Object.keys(m).forEach(function(b){var A=l(b,m);A&&_.push(c(b)+(n?": ":":")+A)});return k=_.length===0?"{}":n?`{

47`+n+_.join(`,

48`+n)+`

49`+y+"}":"{"+_.join(",")+"}",n=y,k}}typeof Mp.stringify!="function"&&(Mp.stringify=function(d,h,p){var g;if(n="",s="",typeof p=="number")for(g=0;g<p;g+=1)s+=" ";else typeof p=="string"&&(s=p);if(u=h,h&&typeof h!="function"&&(typeof h!="object"||typeof h.length!="number"))throw new Error("JSON.stringify");return l("",{"":d})})})()});var $p=J((u1,qp)=>{var wi=null,GC=/(?:_|\\u005[Ff])(?:_|\\u005[Ff])(?:p|\\u0070)(?:r|\\u0072)(?:o|\\u006[Ff])(?:t|\\u0074)(?:o|\\u006[Ff])(?:_|\\u005[Ff])(?:_|\\u005[Ff])/,JC=/(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\ ...

50`,r:"\r",t:" "},i,u=function(y){throw{name:"SyntaxError",message:y,at:r,text:i}},c=function(y){return y&&y!==n&&u("Expected '"+y+"' instead of '"+n+"'"),n=i.charAt(r),r+=1,n},l

51 Supported algorithms are:

52 "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".`,Ls="secret must be a string or buffer",Jn="key must be a string or a buffer",SE="key must be a string, a buffer or an object",zc=typeof Tt.createPublicKey=="function";zc&&(Jn+=" or a KeyObject",Ls+="or a KeyObject");function Mm(t){if(!Vn.isBuffer(t)&&typeof t!="string"&&(!zc||typeof t!="object"||typeof t.type!="string"||typeof t.asymmetricKeyType!="string"||typeof t.export!="function"))throw $t(Jn)}function Lm(t){if(!Vn.isBuffer(t)&&typeof t!="string"&&typeof t!="object")th ...

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/esm/server.mjsView on unpkg · L7

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/esm/server.mjs

53`});let h=d.join(";"),p=await t.crypto.sha256DigestHex(r),g=`${t.method.toUpperCase()}

54${t.canonicalUri}

55${t.canonicalQuerystring}

56${l}

57${h}

58${p}`,k=`${u}/${t.region}/${n}/${HA}`,E=`${Ig}

59${i}

60${k}

61`+await t.crypto.sha256DigestHex(g),y=await WA(t.crypto,t.securityCredentials.secretAccessKey,u,t.region,n),_=await Gs(t.crypto,y,E),m

62To learn more about authentication and Google APIs, visit:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/server.mjsView on unpkg · L49

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/esm/server.mjsView on unpkg · L49

High

Child Process

Package source references child process execution.

dist/esm/server.mjsView on unpkg · L60

63https://cloud.google.com/docs/authentication/getting-started`,NO_CREDENTIALS_FOUND:`Unable to find credentials in current environment.

64To learn more about authentication and Google APIs, visit:

65https://cloud.google.com/docs/authentication/getting-started`,NO_ADC_FOUND:"Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started for more information.",NO_UNIVERSE_DOMAIN_FOUND:`Unable to detect a Universe Domain in the current environment.

66To learn more about Universe Domain retrieval, visit:

67https://cloud.google.com/compute/docs/metadata/predefined-metadata-keys`};var Hl=class{checkIsGCE=void 0;useJWTAccessWithScope;defaultServicePath;get isGCE(){return this.checkIsGCE}_findProjectIdPromise;_cachedProjectId;jsonContent=null;apiKey;cachedCredential=null;#e=null;defaultScopes;keyFilename;scopes;clientOptions={};constructor(e={}){if(this._cachedProjectId=e.projectId||null,this.cachedCredential=e.authClient||null,this.keyFilename=e.keyFilename||e.keyFile,this.keyFilename&&console.warn("The `keyFilename` option is deprecated. Please use the `credentials` option instead. For more detail ...

68`+(this.config.colors?`${this.colors.dim}`:""),c+="Metadata: "+JSON.stringify(u,null,2),this.config.colors&&(c+=this.colors.reset)),c}toMarkdown(e,r=0){let n=" ".repeat(r);return Array.isArray(e)?e.map(s=>typeof s=="object"?`${n}-

69${this.toMarkdown(s,r+1)}`:`${n}- ${s}`).join(`

70`):typeof e=="object"&&e!==null?Object.entries(e).map(([s,i])=>typeof i=="object"&&i!==null?`${n}${s}:

71${this.toMarkdown(i,r+1)}`:`${n}${s}: ${i}`).join(`

72`):`${n}${e}`}async output(e,r={}){try{let n=this.formatData(e,r);switch(this.config.level||"log"){case"info":console.info(n);break;case"warn":console.warn(n);break;case"error":console.error(n);break;case"debug":console.debug(n);break;case"log":default:console.log(n);break}return!0}catch(n){return console.error("[ConsoleOutputHandler] Output failed:",n),!1}}}});var oo,Cd=Le(()=>{"use strict";oo=class{type="webhook";config;defaultTimeout=3e4;constructor(e){if(!e.url)throw new Error("Webhook URL is required");this.config={method:"POST",retry:{maxAttempts:3,backoffMs:1e3},silent:!1,...e}}buildHea ...

73`);this.buffer=n.pop()||"";for(let s of n){let i=this.processLine(s);i&&r.enqueue(i)}},flush:e=>{if(this.buffer.trim()){let r=[];this.processLine(this.buffer.

74`),e.id&&(n+=`id: ${e.id}

75`),e.retry&&(n+=`retry: ${e.retry}

76`),e.data&&(e.data.type==="done"?n+=`data: [DONE]

77`:n+=`data: ${JSON.stringify(e.data)}

78`),n+=`

79`,r.enqueue(n)}})}};var $o=(t,e)=>{let r=t.getReader();return new ReadableStream({async start(n){try{for(;;){let{done:s,value:i}=await r.read();if(s){n.close();break}

80`));let l=i.content.filter(h=>h.type==="tool_use"&&h.id);l.length&&(u.tool_calls=l.map(h=>{let p=h.input;return(typeof p!="object"||p===null)&&(p=p?{text:String(p)}:{}),{id:h.id,type:"function",function:{name:h.name,arguments:JSON.stringify(p)}}}));let d=i.content.find(h=>h.type==="thinking"&&h.signature);d&&(u.thinking={content:d.thinking,signature:d.signature}),r.push(u)}return}}});let s={messages:r,model:e.model,max_tokens:e.max_tokens,temperature:e.temperature,stream:e.stream,tools:e.tools?.length?this.convertAnthropicToolsToUnified(e.tools):void 0,tool_choice:e.tool_choice};return e.think ...

Long lines were clipped for display.

dist/cjs/server.cjsView file

Lines 1-34javascript

1"use strict";var z_=Object.create;var Vo=Object.defineProperty;var H_=Object.getOwnPropertyDescriptor;var W_=Object.getOwnPropertyNames;var G_=Object.getPrototypeOf,J_=Object.prototype.hasOwnProperty;var Me=(t,e)=>

Source & flagged code

7 flagged · loading source

dist/esm/server.mjsView file

7`:case"\u2028":case"\u2029":return W(),"";case"\r":return W(),mr()===` L8: `&&W(),"";case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":throw je(W());case void 0:throw je(W())}return W()}function P_(){let t="",e=mr();if(!ze.isHexDigit... L9: `+i;A=D.join(v),b=`{ ... L13: `+i+A+`, L14: `+_+"]"}return s.pop(),i=_,D}}});var ku=J((OT,Mf)=>{var B_=Nf(),j_=jf(),M_={parse:B_,stringify:j_};Mf.exports=M_});var Fu=J((Tv,sh)=>{"use strict";var Yo=Object.prototype.hasOwnPro... L15: `)||n,code:i,status:s},e.data.error)}return Object.assign({message:n,code:i,status:s},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};Et.GaxiosError=Iu;functio... L16: `).join(` ... L49: `+y+"}":"{"+_.join(",")+"}",n=y,k}}typeof Mp.stringify!="function"&&(Mp.stringify=function(d,h,p){var g;if(n="",s="",typeof p=="number")for(g=0;g<p;g+=1)s+=" ";else typeof p=="stri... L50: `,r:"\r",t:" "},i,u=function(y){throw{name:"SyntaxError",message:y,at:r,text:i}},c=function(y){return y&&y!==n&&u("Expected '"+y+"' instead of '"+n+"'"),n=i.charAt(r),r+=1,n},l=fun... L51: Supported algorithms are: L52: "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "E

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/esm/server.mjsView on unpkg · L7

60${k} L61: `+await t.crypto.sha256DigestHex(g),y=await WA(t.crypto,t.securityCredentials.secretAccessKey,u,t.region,n),_=await Gs(t.crypto,y,E),m=`${Ig} Credential=${t.securityCredentials.acc... L62: To learn more about authentication and Google APIs, visit:

High

Child Process

Package source references child process execution.

dist/esm/server.mjsView on unpkg · L60

49`+y+"}":"{"+_.join(",")+"}",n=y,k}}typeof Mp.stringify!="function"&&(Mp.stringify=function(d,h,p){var g;if(n="",s="",typeof p=="number")for(g=0;g<p;g+=1)s+=" ";else typeof p=="stri... L50: `,r:"\r",t:" "},i,u=function(y){throw{name:"SyntaxError",message:y,at:r,text:i}},c=function(y){return y&&y!==n&&u("Expected '"+y+"' instead of '"+n+"'"),n=i.charAt(r),r+=1,n},l=fun... L51: Supported algorithms are: ... L60: ${k} L61: `+await t.crypto.sha256DigestHex(g),y=await WA(t.crypto,t.securityCredentials.secretAccessKey,u,t.region,n),_=await Gs(t.crypto,y,E),m=`${Ig} Credential=${t.securityCredentials.acc... L62: To learn more about authentication and Google APIs, visit:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/server.mjsView on unpkg · L49

49`+y+"}":"{"+_.join(",")+"}",n=y,k}}typeof Mp.stringify!="function"&&(Mp.stringify=function(d,h,p){var g;if(n="",s="",typeof p=="number")for(g=0;g<p;g+=1)s+=" ";else typeof p=="stri... L50: `,r:"\r",t:" "},i,u=function(y){throw{name:"SyntaxError",message:y,at:r,text:i}},c=function(y){return y&&y!==n&&u("Expected '"+y+"' instead of '"+n+"'"),n=i.charAt(r),r+=1,n},l=fun... L51: Supported algorithms are: ... L60: ${k} L61: `+await t.crypto.sha256DigestHex(g),y=await WA(t.crypto,t.securityCredentials.secretAccessKey,u,t.region,n),_=await Gs(t.crypto,y,E),m=`${Ig} Credential=${t.securityCredentials.acc... L62: To learn more about authentication and Google APIs, visit:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/esm/server.mjsView on unpkg · L49

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/esm/server.mjsView on unpkg · L7

dist/cjs/server.cjsView file

7Trigger-reachable chain: manifest.main -> dist/cjs/server.cjs L7: `:case"\u2028":case"\u2029":return W(),"";case"\r":return W(),yr()===` L8: `&&W(),"";case"1":case"2":case"3":case"4":case"5":case"6":case"7":case"8":case"9":throw Be(W());case void 0:throw Be(W())}return W()}function X_(){let t="",e=yr();if(!ze.isHexDigit... L9: `+i;A=D.join(v),b=`{ ... L13: `+i+A+`, L14: `+_+"]"}return s.pop(),i=_,D}}});var ju=J((yT,Xf)=>{var eb=Vf(),tb=Yf(),rb={parse:eb,stringify:tb};Xf.exports=rb});var Hu=J((ov,Eh)=>{"use strict";var ui=Object.prototype.hasOwnPro... L15: `)||n,code:i,status:s},e.data.error)}return Object.assign({message:n,code:i,status:s},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};St.GaxiosError=Gu;functio... L16: `).join(` ... L49: `+y+"}":"{"+_.join(",")+"}",n=y,k}}typeof rm.stringify!="function"&&(rm.stringify=function(d,h,p){var g;if(n="",s="",typeof p=="number")for(g=0;g<p;g+=1)s+=" ";else typeof p=="stri... L50: `,r:"\r",t:" "},i,u=function(y){throw{name:"SyntaxError",message:y,at:r,text:i}},c=function(y){return y&&y!==n&&u("Expected '"+y+"' instead of '"+n+"'"),n=i.charAt(r),r+=1,n},l=fun... L51: Supported algorithms are: L52: "HS256", "HS384", "H…

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cjs/server.cjsView on unpkg · L7

14`+_+"]"}return s.pop(),i=_,D}}});var ju=J((yT,Xf)=>{var eb=Vf(),tb=Yf(),rb={parse:eb,stringify:tb};Xf.exports=rb});var Hu=J((ov,Eh)=>{"use strict";var ui=Object.prototype.hasOwnPro... L15: `)||n,code:i,status:s},e.data.error)}return Object.assign({message:n,code:i,status:s},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};St.GaxiosError=Gu;functio... L16: `).join(`

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cjs/server.cjsView on unpkg · L14

Findings

2 Critical4 High4 Medium4 Low

CriticalCredential Exfiltrationdist/esm/server.mjs

CriticalTrigger Reachable Dangerous Capabilitydist/cjs/server.cjs

HighChild Processdist/esm/server.mjs

HighSame File Env Network Executiondist/esm/server.mjs

HighCommand Output Exfiltrationdist/esm/server.mjs

HighCloud Metadata Accessdist/esm/server.mjs

MediumDynamic Requiredist/cjs/server.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/esm/server.mjsView file

Lines 1-80javascript

2`?(Pr++,Nt=0):t?Nt+=t.length:Nt++,t&&(Lo+=t.length),t}var Ff={default(){switch(we){case" ":case"\v":case"\f":case" ":case"\xA0":case"\uFEFF":case`

5`:case"\r":throw je(W());case"\u2028":case"\u2029":N_(we);break;case void 0:throw je(W())}me+=W()},start(){switch(we){case

6`;case"r":return W(),"\r";case"t":return W()," ";case"v":return W(),"\v";case"0":if(W(),ze.isDigit(mr()))throw je(W());return"\0";case"x":return W(),P_();case"u":return W(),Eu();case`

7`:case"\u2028":case"\u2029":return W(),"";case"\r":return W(),mr()===`

9`+i;A=D.join(v),b=`{

10`+i+A+`,

11`+_+"}"}}return s.pop(),i=_,b}function k(y){if(y.length===0)return p(y,!0);let _=String.fromCodePoint(y.codePointAt(0));if(!Su.isIdStartChar(_))return p(y,!0);for(

12`+i,A=m.join(b);D=`[

13`+i+A+`,

14`+_+"]"}return s.pop(),i=_,D}}});var ku=J((OT,Mf)=>{var B_=Nf(),j_=jf(),M_={parse:B_,stringify:j_};Mf.exports=M_});var

16`).join(`

17`+i),t.push(s+"m+"+ti.exports.humanize(this.diff)+"\x1B[0m")}else t[0]=Nb()+e+" "+t[0]}function Nb(){return Ge.inspectOpts.hideDate?"":new Date().toISOString()+

18`)}function jb(t){t?process.env.DEBUG=t:delete process.env.DEBUG}function Mb(){return process.env.DEBUG}function Lb(t){t.inspectOpts={};let e=Object.keys(Ge.inspectOpts);

19`).map(e=>e.trim()).join(" ")};Eh.O=function(t){return this.inspectOpts.colors=this.useColors,ei.inspect(t,this.inspectOpts)}});var zu=J((jv,$u)=>{typeof process>

21\r

22`);if(g===-1){ri("have not received end of HTTP headers yet..."),i();return}let k=p.slice(0,g).toString("ascii").split(`\r

23`),E=k.shift();if(!E)return t.destroy(),r(new Error("No header received from proxy CONNECT response"));let y=E.split(" "),_=+y[1],m=y.slice(2).join(" "),D={};for

25`;let l=(0,oC.parseProxyResponse)(s);s.write(`${c}\r

27Content-Disposition: form-data; name="`;return t.forEach((i,u)=>typeof i=="string"?n.push(s+Vu(u)+`"\r

29${i.replace(/\r(?!\n)|(?<!\r)\n/g,`\r

30`)}\r

31`):n.push(s+Vu(u)+`"; filename="${Vu(i.name,1)}"\r

32Content-Type: ${i.type||"application/octet-stream"}\r

33\r

34`,i,`\r

38\r

40Content-Type: ${i}\r

41\r

42`,typeof s.content=="string"?yield s.content:yield*s.content,yield`\r

44`+n+_.join(`,

45`+n)+`

47`+n+_.join(`,

48`+n)+`

50`,r:"\r",t:" "},i,u=function(y){throw{name:"SyntaxError",message:y,at:r,text:i}},c=function(y){return y&&y!==n&&u("Expected '"+y+"' instead of '"+n+"'"),n=i.charAt(r),r+=1,n},l

51 Supported algorithms are:

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/esm/server.mjsView on unpkg · L7

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/esm/server.mjs

53`});let h=d.join(";"),p=await t.crypto.sha256DigestHex(r),g=`${t.method.toUpperCase()}

54${t.canonicalUri}

55${t.canonicalQuerystring}

56${l}

57${h}

58${p}`,k=`${u}/${t.region}/${n}/${HA}`,E=`${Ig}

59${i}

60${k}

61`+await t.crypto.sha256DigestHex(g),y=await WA(t.crypto,t.securityCredentials.secretAccessKey,u,t.region,n),_=await Gs(t.crypto,y,E),m

62To learn more about authentication and Google APIs, visit:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/server.mjsView on unpkg · L49

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/esm/server.mjsView on unpkg · L49

High

Child Process

Package source references child process execution.

dist/esm/server.mjsView on unpkg · L60

63https://cloud.google.com/docs/authentication/getting-started`,NO_CREDENTIALS_FOUND:`Unable to find credentials in current environment.

64To learn more about authentication and Google APIs, visit:

66To learn more about Universe Domain retrieval, visit:

69${this.toMarkdown(s,r+1)}`:`${n}- ${s}`).join(`

70`):typeof e=="object"&&e!==null?Object.entries(e).map(([s,i])=>typeof i=="object"&&i!==null?`${n}${s}:

71${this.toMarkdown(i,r+1)}`:`${n}${s}: ${i}`).join(`

73`);this.buffer=n.pop()||"";for(let s of n){let i=this.processLine(s);i&&r.enqueue(i)}},flush:e=>{if(this.buffer.trim()){let r=[];this.processLine(this.buffer.

74`),e.id&&(n+=`id: ${e.id}

75`),e.retry&&(n+=`retry: ${e.retry}

76`),e.data&&(e.data.type==="done"?n+=`data: [DONE]

77`:n+=`data: ${JSON.stringify(e.data)}

78`),n+=`

79`,r.enqueue(n)}})}};var $o=(t,e)=>{let r=t.getReader();return new ReadableStream({async start(n){try{for(;;){let{done:s,value:i}=await r.read();if(s){n.close();break}

Long lines were clipped for display.

dist/cjs/server.cjsView file

Lines 1-34javascript