@todoforai/cli@0.1.57: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@todoforai/cli@0.1.57: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

11 flagged · loading source

dist/todoforai-cli.jsView file

46688// src/ensure-bridge.ts L46689: import { spawn, spawnSync } from "child_process"; L46690: import fs2 from "fs"; ... L46692: import os2 from "os"; L46693: var INSTALLER_URL = "https://todofor.ai/bridge"; L46694: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin"); L46695: var INSTALL_TIMEOUT_MS = 90000;

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/todoforai-cli.jsView on unpkg · L46688

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L309

46677if (!content) { L46678: process.stderr.write(`Error: Empty input L46679: `); ... L46688: // src/ensure-bridge.ts L46689: import { spawn, spawnSync } from "child_process"; L46690: import fs2 from "fs"; ... L46692: import os2 from "os"; L46693: var INSTALLER_URL = "https://todofor.ai/bridge"; L46694: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin");

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L46677

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/todoforai-cli.jsView on unpkg · L309

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/todoforai-cli.jsView on unpkg · L309

26587keyword: "and case default else elsif false if in import enherits node or true undef unless main settings $string ", L26588: literal: "alias audit before loglevel noop require subscribe tag " + "owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_dif... L26589: built_in: "architecture augeasversion blockdevices boardmanufacturer boardproductname boardserialnumber cfkey dhcp_servers " + "domain ec2_ ec2_userdata facterversion filesystems l... ... L42712: try { L42713: cache = JSON.parse(fs.readFileSync(cacheFile, "utf8")); L42714: } catch {} ... L44823: credentialPaths: ["~/.config/shopify-cli-kit-nodejs/config.json"], L44824: versionCmd: `node -p "require(require('fs').realpathSync(require('child_process').execSync('command -v

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

•matchType = normalized_sha256 matchedPackage = @todoforai/cli@0.1.50 matchedPath = dist/todoforai-cli.js matchedIdentity = npm:QHRvZG9mb3JhaS9jbGk:0.1.50 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/todoforai-cli.jsView on unpkg

bin/todoforai-cli.jsView file

4// the @shared/* file: deps are bundled in. L5: // import() takes the URL, not a path: on Windows fileURLToPath gives `C:\...`, L6: // which the ESM loader rejects (ERR_UNSUPPORTED_ESM_URL_SCHEME, protocol 'c:').

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/todoforai-cli.jsView on unpkg · L4

Source & flagged code

11 flagged

dist/todoforai-cli.jsView file

46688// src/ensure-bridge.ts L46689: import { spawn, spawnSync } from "child_process"; L46690: import fs2 from "fs"; ... L46692: import os2 from "os"; L46693: var INSTALLER_URL = "https://todofor.ai/bridge"; L46694: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin"); L46695: var INSTALL_TIMEOUT_MS = 90000;

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/todoforai-cli.jsView on unpkg · L46688

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L309

46677if (!content) { L46678: process.stderr.write(`Error: Empty input L46679: `); ... L46688: // src/ensure-bridge.ts L46689: import { spawn, spawnSync } from "child_process"; L46690: import fs2 from "fs"; ... L46692: import os2 from "os"; L46693: var INSTALLER_URL = "https://todofor.ai/bridge"; L46694: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin");

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L46677

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/todoforai-cli.jsView on unpkg · L309

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/todoforai-cli.jsView on unpkg · L309

26587keyword: "and case default else elsif false if in import enherits node or true undef unless main settings $string ", L26588: literal: "alias audit before loglevel noop require subscribe tag " + "owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_dif... L26589: built_in: "architecture augeasversion blockdevices boardmanufacturer boardproductname boardserialnumber cfkey dhcp_servers " + "domain ec2_ ec2_userdata facterversion filesystems l... ... L42712: try { L42713: cache = JSON.parse(fs.readFileSync(cacheFile, "utf8")); L42714: } catch {} ... L44823: credentialPaths: ["~/.config/shopify-cli-kit-nodejs/config.json"], L44824: versionCmd: `node -p "require(require('fs').realpathSync(require('child_process').execSync('command -v

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

•matchType = normalized_sha256 matchedPackage = @todoforai/cli@0.1.50 matchedPath = dist/todoforai-cli.js matchedIdentity = npm:QHRvZG9mb3JhaS9jbGk:0.1.50 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/todoforai-cli.jsView on unpkg

bin/todoforai-cli.jsView file

Lines 1-13javascript

1#!/usr/bin/env node

2// Dev (linked repo) under bun: run src directly so there is no stale-build step.

3// Node (and the published package, which ships only dist/) runs the bundle;

4// the @shared/* file: deps are bundled in.

5// import() takes the URL, not a path: on Windows fileURLToPath gives `C:\...`,

6// which the ESM loader rejects (ERR_UNSUPPORTED_ESM_URL_SCHEME, protocol 'c:').

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/todoforai-cli.jsView on unpkg · L4

7import { existsSync } from