@todoforai/cli@0.1.46: Unknown npm security report (Allow)

Loading npm security reports…

@todoforai/cli@0.1.46: Unknown npm security report (Allow) | LPM Firewall

Source & flagged code

6 flagged

dist/todoforai-cli.jsView file

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

26083L26084: // node_modules/highlight.js/lib/languages/powershell.js L26085: var require_powershell = __commonJS((exports, module) => {

High

Shell

Package source references shell execution.

dist/todoforai-cli.jsView on unpkg · L26083

47705const shortLog = logFile.replace(os4.homedir(), "~"); L47706: const reason = exited ? `exit ${exitCode}` : "startup timed out"; L47707: console.error(`\x1B[33mBridge not ready (${reason}), see ${shortLog}\x1B[0m`); ... L47711: // src/isolated.ts L47712: import { spawn as spawn4 } from "child_process"; L47713: async function mintMayflyToken(apiUrl, apiKey, todoId) { L47714: const res = await fetch(`${apiUrl}${restBasePath(apiKey)}/cli/mayfly/token`, { L47715: method: "POST", L47716: headers: { "content-type": "application/json", "x-api-key": apiKey }, L47717: body: JSON.stringify({ todoId }), L47718: signal: AbortSignal.timeout(30000)

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/todoforai-cli.jsView on unpkg · L47705

26587keyword: "and case default else elsif false if in import enherits node or true undef unless main settings $string ", L26588: literal: "alias audit before loglevel noop require subscribe tag " + "owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_dif... L26589: built_in: "architecture augeasversion blockdevices boardmanufacturer boardproductname boardserialnumber cfkey dhcp_servers " + "domain ec2_ ec2_userdata facterversion filesystems l... ... L42712: try { L42713: cache = JSON.parse(fs.readFileSync(cacheFile, "utf8")); L42714: } catch {} ... L44981: // src/ensure-bridge.ts L44982: import { spawn, spawnSync } from "child_process"; L44983: import fs2 from "fs";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

bin/todoforai-cli.jsView file

Lines 1-11javascript

1#!/usr/bin/env node

2// Dev (linked repo) under bun: run src directly so there is no stale-build step.

3// Node (and the published package, which ships only dist/) runs the bundle;

4// the @shared/* file: deps are bundled in.

5import { existsSync } from "node:fs";

6import { fileURLToPath } from "node:url";

Source & flagged code

6 flagged · loading source

dist/todoforai-cli.jsView file

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

26083L26084: // node_modules/highlight.js/lib/languages/powershell.js L26085: var require_powershell = __commonJS((exports, module) => {

High

Shell

Package source references shell execution.

dist/todoforai-cli.jsView on unpkg · L26083

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/todoforai-cli.jsView on unpkg · L47705

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

bin/todoforai-cli.jsView file

9const dist = fileURLToPath(new URL("../dist/todoforai-cli.js", import.meta.url)); L10: await import(existsSync(src) && typeof Bun !== "undefined" ? src : dist);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/todoforai-cli.jsView on unpkg · L9

Source & flagged code

6 flagged

dist/todoforai-cli.jsView file

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

26083L26084: // node_modules/highlight.js/lib/languages/powershell.js L26085: var require_powershell = __commonJS((exports, module) => {

High

Shell

Package source references shell execution.

dist/todoforai-cli.jsView on unpkg · L26083

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/todoforai-cli.jsView on unpkg · L47705

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

bin/todoforai-cli.jsView file

Lines 1-11javascript

1#!/usr/bin/env node

2// Dev (linked repo) under bun: run src directly so there is no stale-build step.

3// Node (and the published package, which ships only dist/) runs the bundle;

4// the @shared/* file: deps are bundled in.

5import { existsSync } from "node:fs";

6import { fileURLToPath } from "node:url";

@todoforai/cli@0.1.46

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code