@topolo/cli@0.12.9: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@topolo/cli@0.12.9: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { createInterface } from "readline/promises"; headers.set("Authorization", `${credential.kind === "dpop_access_token" ? "DPoP" : "Bearer"} ${credential.accessToken}`); "action_runtime_authorization_required", "authorization_pending", return "The current identity or resource context is not authorized. Review the structured details and published authorization contract."; const apiBaseUrl = firstString(entry.apiBaseUrl, entry.api_base_url); if (apiBaseUrl) return apiBaseUrl; if (["authorization", "cookie", "set-cookie", "proxy-authorization", "x-api-key"].includes(header.toLowerCase())) {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @topolo/cli@0.12.2 matchedPath = dist/index.js matchedIdentity = npm:QHRvcG9sby9jbGk:0.12.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = ad6ad34a80299fe3 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @topolo/cli@0.12.2 matchedPath = dist/index.js matchedIdentity = npm:QHRvcG9sby9jbGk:0.12.2 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "@topolo/cli",

3 "packageManager": "pnpm@10.17.1",

4 "version": "0.12.9",

5 "topoloPublishedVersion": "0.12.9",

6 "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",

7 "license": "UNLICENSED",

8 "author": "Topolo",

9 "homepage": "https://docs.topolo.app/guides/agents-and-automation",

10 "type": "module",

11 "bin": {

12 "topolo": "dist/index.js"

13 },

14 "files": [

15 "dist",

16 "skills",

17 "postinstall.mjs"

18 ],

19 "scripts": {

20 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 "build": "tsup",

22 "dev": "tsup --watch",

23 "typecheck": "tsc --noEmit",

24 "start": "node dist/index.js",

25 "test": "vitest run",

26 "test:watch": "vitest",

27 "coverage": "vitest run --coverage"

28 },

29 "dependencies": {

30 "@modelcontextprotocol/sdk": "^1.0.0",

31 "@topolo/mcp": "0.14.2",

32 "@topolo/sdk": "0.21.2",

33 "commander": "^12.1.0"

34 },

35 "devDependencies": {

36 "@types/node": "^20.12.0",

37 "@vitest/coverage-v8": "3.2.6",

38 "tsup": "^8.0.0",

39 "typescript": "^5.4.0",

40 "vitest": "3.2.6"

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { createInterface } from "readline/promises"; headers.set("Authorization", `${credential.kind === "dpop_access_token" ? "DPoP" : "Bearer"} ${credential.accessToken}`); "action_runtime_authorization_required", "authorization_pending", return "The current identity or resource context is not authorized. Review the structured details and published authorization contract."; const apiBaseUrl = firstString(entry.apiBaseUrl, entry.api_base_url); if (apiBaseUrl) return apiBaseUrl; if (["authorization", "cookie", "set-cookie", "proxy-authorization", "x-api-key"].includes(header.toLowerCase())) {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @topolo/cli@0.12.2 matchedPath = dist/index.js matchedIdentity = npm:QHRvcG9sby9jbGk:0.12.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = ad6ad34a80299fe3 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @topolo/cli@0.12.2 matchedPath = dist/index.js matchedIdentity = npm:QHRvcG9sby9jbGk:0.12.2 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious