@tokenharbor/halyard@0.2.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@tokenharbor/halyard@0.2.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/rebrand.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/rebrand.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/halyard.mjsView file

7// layer. Upgrading Halyard to a new DeepSeek Harness is a version bump in L8: // package.json, with no merge to perform, because we never edited their tree. L9: // ... L13: L14: import { spawn } from "node:child_process"; L15: import { existsSync, readFileSync } from "node:fs"; ... L48: L49: process.env.DSH_HOME ||= join(homedir(), ".halyard"); L50: const dshHome = process.env.DSH_HOME; ... L84: // reporting a bug would have quoted the wrong number. L85: const ownVersion = JSON.parse( L86: readFileSync(join(pkgRoot, "package.json"), "utf8"),

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/halyard.mjsView on unpkg · L7

7Trigger-reachable chain: manifest.bin -> bin/halyard.mjs L7: // layer. Upgrading Halyard to a new DeepSeek Harness is a version bump in L8: // package.json, with no merge to perform, because we never edited their tree. L9: // ... L13: L14: import { spawn } from "node:child_process"; L15: import { existsSync, readFileSync } from "node:fs"; ... L48: L49: process.env.DSH_HOME ||= join(homedir(), ".halyard"); L50: const dshHome = process.env.DSH_HOME; ... L84: // reporting a bug would have quoted the wrong number. L85: const ownVersion = JSON.parse( L86: readFileSync(join(pkgRoot, "package.json"), "utf8"),

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/halyard.mjsView on unpkg · L7

•matchType = previous_version_dangerous_delta matchedPackage = @tokenharbor/halyard@0.1.3 matchedIdentity = npm:QHRva2VuaGFyYm9yL2hhbHlhcmQ:0.1.3 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/halyard.mjsView on unpkg

7// layer. Upgrading Halyard to a new DeepSeek Harness is a version bump in L8: // package.json, with no merge to perform, because we never edited their tree. L9: // ... L13: L14: import { spawn } from "node:child_process"; L15: import { existsSync, readFileSync } from "node:fs"; ... L48: L49: process.env.DSH_HOME ||= join(homedir(), ".halyard"); L50: const dshHome = process.env.DSH_HOME; ... L84: // reporting a bug would have quoted the wrong number. L85: const ownVersion = JSON.parse( L86: readFileSync(join(pkgRoot, "package.json"), "utf8"),

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/halyard.mjsView on unpkg · L7

7Trigger-reachable credential exfiltration chain: manifest.bin -> bin/halyard.mjs L7: // layer. Upgrading Halyard to a new DeepSeek Harness is a version bump in L8: // package.json, with no merge to perform, because we never edited their tree. L9: // ... L13: L14: import { spawn } from "node:child_process"; L15: import { existsSync, readFileSync } from "node:fs"; ... L48: L49: process.env.DSH_HOME ||= join(homedir(), ".halyard"); L50: const dshHome = process.env.DSH_HOME; ... L84: // reporting a bug would have quoted the wrong number. L85: const ownVersion = JSON.parse( L86: readFileSync(join(pkgRoot, "package.json"), "utf8"),

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

bin/halyard.mjsView on unpkg · L7