@todoforai/cli@0.1.63: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@todoforai/cli@0.1.63: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

11 flagged · loading source

dist/todoforai-cli.jsView file

46929// src/ensure-bridge.ts L46930: import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process"; L46931: import fs2 from "fs"; ... L46933: import os2 from "os"; L46934: var INSTALLER_URL = "https://todofor.ai/bridge"; L46935: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin"); L46936: var INSTALL_TIMEOUT_MS = 90000;

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/todoforai-cli.jsView on unpkg · L46929

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L309

46918if (!content) { L46919: process.stderr.write(`Error: Empty input L46920: `); ... L46929: // src/ensure-bridge.ts L46930: import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process"; L46931: import fs2 from "fs"; ... L46933: import os2 from "os"; L46934: var INSTALLER_URL = "https://todofor.ai/bridge"; L46935: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin");

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L46918

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

26083L26084: // node_modules/highlight.js/lib/languages/powershell.js L26085: var require_powershell = __commonJS((exports, module) => {

High

Shell

Package source references shell execution.

dist/todoforai-cli.jsView on unpkg · L26083

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/todoforai-cli.jsView on unpkg · L309

26587keyword: "and case default else elsif false if in import enherits node or true undef unless main settings $string ", L26588: literal: "alias audit before loglevel noop require subscribe tag " + "owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_dif... L26589: built_in: "architecture augeasversion blockdevices boardmanufacturer boardproductname boardserialnumber cfkey dhcp_servers " + "domain ec2_ ec2_userdata facterversion filesystems l... ... L42687: import os from "node:os"; L42688: import { spawn, spawnSync } from "node:child_process"; L42689: function installer() { ... L42704: try { L42705: return JSON.parse(fs.readFileSync(cacheFileFor(name), "utf8")); L42706: } catch {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

•matchType = normalized_sha256 matchedPackage = @todoforai/cli@0.1.50 matchedPath = dist/todoforai-cli.js matchedIdentity = npm:QHRvZG9mb3JhaS9jbGk:0.1.50 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/todoforai-cli.jsView on unpkg

bin/todoforai-cli.jsView file

4// the @shared/* file: deps are bundled in. L5: // import() takes the URL, not a path: on Windows fileURLToPath gives `C:\...`, L6: // which the ESM loader rejects (ERR_UNSUPPORTED_ESM_URL_SCHEME, protocol 'c:').

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/todoforai-cli.jsView on unpkg · L4

Source & flagged code

11 flagged

dist/todoforai-cli.jsView file

46929// src/ensure-bridge.ts L46930: import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process"; L46931: import fs2 from "fs"; ... L46933: import os2 from "os"; L46934: var INSTALLER_URL = "https://todofor.ai/bridge"; L46935: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin"); L46936: var INSTALL_TIMEOUT_MS = 90000;

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/todoforai-cli.jsView on unpkg · L46929

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L309

46918if (!content) { L46919: process.stderr.write(`Error: Empty input L46920: `); ... L46929: // src/ensure-bridge.ts L46930: import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process"; L46931: import fs2 from "fs"; ... L46933: import os2 from "os"; L46934: var INSTALLER_URL = "https://todofor.ai/bridge"; L46935: var INSTALL_PREFIX = process.env.TODOFORAI_PREFIX || path2.join(os2.homedir(), ".todoforai", "bin");

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/todoforai-cli.jsView on unpkg · L46918

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/todoforai-cli.jsView on unpkg · L309

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

dist/todoforai-cli.jsView on unpkg · L309

1919} L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/todoforai-cli.jsView on unpkg · L1919

26083L26084: // node_modules/highlight.js/lib/languages/powershell.js L26085: var require_powershell = __commonJS((exports, module) => {

High

Shell

Package source references shell execution.

dist/todoforai-cli.jsView on unpkg · L26083

309if (lineHash.hasOwnProperty ? lineHash.hasOwnProperty(line) : lineHash[line] !== undefined) { L310: chars += String.fromCharCode(lineHash[line]); L311: } else { ... L1919: } L1920: exec(s) { L1921: this.matcherRe.lastIndex = this.lastIndex; ... L2089: props: ["language", "code", "autodetect"], L2090: data: function() { L2091: return { ... L2287: deprecated("10.7.0", `Please use highlight(code, options) instead. L2288: https://github.com/highlightjs/highlight.js/issues/2277`); L2289: languageName = codeOrlanguageName;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/todoforai-cli.jsView on unpkg · L309

26587keyword: "and case default else elsif false if in import enherits node or true undef unless main settings $string ", L26588: literal: "alias audit before loglevel noop require subscribe tag " + "owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_dif... L26589: built_in: "architecture augeasversion blockdevices boardmanufacturer boardproductname boardserialnumber cfkey dhcp_servers " + "domain ec2_ ec2_userdata facterversion filesystems l... ... L42687: import os from "node:os"; L42688: import { spawn, spawnSync } from "node:child_process"; L42689: function installer() { ... L42704: try { L42705: return JSON.parse(fs.readFileSync(cacheFileFor(name), "utf8")); L42706: } catch {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/todoforai-cli.jsView on unpkg · L26587

•matchType = normalized_sha256 matchedPackage = @todoforai/cli@0.1.50 matchedPath = dist/todoforai-cli.js matchedIdentity = npm:QHRvZG9mb3JhaS9jbGk:0.1.50 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/todoforai-cli.jsView on unpkg

bin/todoforai-cli.jsView file

Lines 1-13javascript

1#!/usr/bin/env node

2// Dev (linked repo) under bun: run src directly so there is no stale-build step.

3// Node (and the published package, which ships only dist/) runs the bundle;

4// the @shared/* file: deps are bundled in.

5// import() takes the URL, not a path: on Windows fileURLToPath gives `C:\...`,

6// which the ESM loader rejects (ERR_UNSUPPORTED_ESM_URL_SCHEME, protocol 'c:').

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/todoforai-cli.jsView on unpkg · L4

7import { existsSync } from