@tritard/waterbrother: Suspicious npm security report (Warn)

Loading npm security reports…

@tritard/waterbrother: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

26 flagged

vendor/node-pty/lib/windowsPtyAgent.jsView file

Lines 1-31javascript

1"use strict";

2/**

6 */

7Object.defineProperty(exports, "__esModule", { value: true });

8exports.argsToCommandLine = exports.WindowsPtyAgent = void 0;

9var fs = require("fs");

10var os = require("os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg · L8

11var path = require("path");

12var child_process_1 = require("child_process");

13var net_1 = require("net");

High

Child Process

Package source references child process execution.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg · L11

14var windowsConoutConnection_1 = require("./windowsConoutConnection");

15var utils_1 = require("./utils");

16var conptyNative;

17var winptyNative;

18/**

19 * The amount of time to wait for additional data after the conpty shell process has exited before

20 * shutting down the socket. The timer will be reset if a new data event comes in after the timer

21 * has started.

22 */

23var FLUSH_DATA_INTERVAL = 1000;

24/**

25 * This agent sits between the WindowsTerminal class and provides a common interface for both conpty

26 * and winpty.

27 */

28var WindowsPtyAgent = /** @class */ (function () {

29 function WindowsPtyAgent(file, args, env, cwd, cols, rows, debug, _useConpty, _useConptyDll, conptyInheritCursor) {

30 var _this = this;

31 if (_useConptyDll === void 0) { _useConptyDll = false; }

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.74.8 matchedPath = dist/vendor/node-pty/lib/windowsPtyAgent.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.74.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg

src/tools.jsView file

Lines 3-43javascript

3import path from "node:path";

4import crypto from "node:crypto";

5import { exec } from "node:child_process";

6import { promisify } from "node:util";

src/codebase-index.jsView file

Lines 1-23javascript

1import fs from "node:fs/promises";

2import path from "node:path";

3import { shouldSkipCodebaseIndex } from "./ios-attach-contract.js";

4import { execFile } from "node:child_process";

src/listen-agent.jsView file

Lines 1-23javascript

1import fs from "node:fs/promises";

2import os from "node:os";

3import path from "node:path";

4import { spawnSync } from "node:child_process";

src/local-model-runtime.jsView file

Lines 1-24javascript

1import fs from "node:fs/promises";

2import fsSync from "node:fs";

3import os from "node:os";

4import path from "node:path";

src/cli.jsView file

1import { execFile, spawn } from "node:child_process"; L2: import fs from "node:fs/promises"; ... L172: const BIN_PATH = path.join(PACKAGE_ROOT, "bin", "waterbrother.js"); L173: const DOCS_BASE_URL = String(process.env.WATERBROTHER_DOCS_BASE_URL || "https://waterbrother.app").trim().replace(/\/+$/, ""); L174: const TELEGRAM_BRIDGE_SERVICE = "telegram"; ... L587: } L588: return Buffer.concat(chunks).toString("utf8").trim(); L589: } ... L681: let codeLineNo = 1; L682: const columns = clampColumns(process.stdout.columns || 100); L683: const contentWidth = Math.max(20, columns - (ASSISTANT_PREFIX.length + 4)); ... L1087: const clearLine = () => {

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/cli.jsView on unpkg · L1

1Trigger-reachable chain: scripts.start -> bin/waterbrother.js -> src/cli.js L1: import { execFile, spawn } from "node:child_process"; L2: import fs from "node:fs/promises"; ... L172: const BIN_PATH = path.join(PACKAGE_ROOT, "bin", "waterbrother.js"); L173: const DOCS_BASE_URL = String(process.env.WATERBROTHER_DOCS_BASE_URL || "https://waterbrother.app").trim().replace(/\/+$/, ""); L174: const TELEGRAM_BRIDGE_SERVICE = "telegram"; ... L587: } L588: return Buffer.concat(chunks).toString("utf8").trim(); L589: } ... L681: let codeLineNo = 1; L682: const columns = clampColumns(process.stdout.columns || 100); L683: const contentWidth = Math.max(20, columns - (ASSISTANT_PREFIX.length + 4)); ... L1087: const clearLine = () => {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/cli.jsView on unpkg · L1

src/tsnet-join.jsView file

Lines 1-21javascript

1import { execFile, spawn } from "node:child_process";

2import { createWriteStream } from "node:fs";

3import { access, chmod, mkdir, unlink, writeFile } from "node:fs/promises";

4import os from "node:os";

vendor/node-pty/prebuilds/win32-arm64/pty.nodeView file

•path = vendor/node-pty/prebuilds/win32-arm64/pty.node kind = native_binary sizeBytes = 293376 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty/prebuilds/win32-arm64/pty.nodeView on unpkg

src/terminal-shell-hooks.zshView file

•path = src/terminal-shell-hooks.zsh kind = build_helper sizeBytes = 1282 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/terminal-shell-hooks.zshView on unpkg

src/acp-proxy.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/acp-proxy.js#virtual:string-array:round1View on unpkg

src/voice.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/voice.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/voice.jsView on unpkg

src/game-mcp.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/game-mcp.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/game-mcp.jsView on unpkg

src/experiment.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/experiment.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/experiment.jsView on unpkg

src/game-pipeline.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/game-pipeline.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/game-pipeline.jsView on unpkg

src/product.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/product.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/product.jsView on unpkg

src/terminal-notifications.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/terminal-notifications.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/terminal-notifications.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.74.8 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.74.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

src/acp-proxy.jsView file

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/acp-proxy.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/acp-proxy.jsView on unpkg

Source & flagged code

26 flagged · loading source

vendor/node-pty/lib/windowsPtyAgent.jsView file

11var path = require("path"); L12: var child_process_1 = require("child_process"); L13: var net_1 = require("net");

High

Child Process

Package source references child process execution.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg · L11

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg

8exports.argsToCommandLine = exports.WindowsPtyAgent = void 0; L9: var fs = require("fs"); L10: var os = require("os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg · L8

src/tools.jsView file

23L24: const execAsync = promisify(exec); L25:

High

Shell

Package source references shell execution.

src/tools.jsView on unpkg · L23

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/tools.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/tools.jsView on unpkg

src/codebase-index.jsView file

3import { shouldSkipCodebaseIndex } from "./ios-attach-contract.js"; L4: import { execFile } from "node:child_process"; L5: import { promisify } from "node:util"; ... L249: const raw = await fs.readFile(indexPath, "utf8"); L250: existingIndex = JSON.parse(raw); L251: } catch {}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/codebase-index.jsView on unpkg · L3

src/listen-agent.jsView file

3Trigger-reachable persistence chain: scripts.start -> bin/waterbrother.js -> src/cli.js -> src/listen-agent.js L3: import path from "node:path"; L4: import { spawnSync } from "node:child_process"; L5: import { fileURLToPath } from "node:url"; ... L9: export function agentPlistPath() { L10: return path.join(os.homedir(), "Library/LaunchAgents", `${LABEL}.plist`); L11: } ... L13: export async function installListenAgent() { L14: if (process.platform !== "darwin") { L15: throw new Error("Launch agent install is macOS only."); ... L22: const fallbackPath = [path.dirname(node), "/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin"].join(path.delimiter); L23: const rawPath = process.env.PATH L24: ? `${path.dirname(node)}${path.delimiter}${process.env.PATH}`

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

src/listen-agent.jsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/listen-agent.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/listen-agent.jsView on unpkg

3import path from "node:path"; L4: import { spawnSync } from "node:child_process"; L5: import { fileURLToPath } from "node:url"; ... L9: export function agentPlistPath() { L10: return path.join(os.homedir(), "Library/LaunchAgents", `${LABEL}.plist`); L11: } ... L13: export async function installListenAgent() { L14: if (process.platform !== "darwin") { L15: throw new Error("Launch agent install is macOS only."); ... L22: const fallbackPath = [path.dirname(node), "/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin"].join(path.delimiter); L23: const rawPath = process.env.PATH L24: ? `${path.dirname(node)}${path.delimiter}${process.env.PATH}`

src/local-model-runtime.jsView file

4import path from "node:path"; L5: import net from "node:net"; L6: import { randomBytes } from "node:crypto"; L7: import { spawn } from "node:child_process"; L8: L9: export function selectedLocalModelPath({ flags = {}, config = {}, runtime = {}, env = process.env } = {}) { L10: if (flags["local-model"]) return flags["local-model"];

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/local-model-runtime.jsView on unpkg · L4

src/cli.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/cli.jsView on unpkg · L1

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/cli.jsView on unpkg · L1

src/tsnet-join.jsView file

1import { execFile, spawn } from "node:child_process"; L2: import { createWriteStream } from "node:fs"; ... L16: L17: export function tsnetHome(home = os.homedir()) { L18: return path.join(home, ".waterbrother", "tsnet"); ... L28: L29: export function linuxTarballURL({ arch = process.arch, version = TSNET_VERSION } = {}) { L30: const cpu = arch === "arm64" ? "arm64" : "amd64"; L31: return `https://pkgs.tailscale.com/stable/tailscale_${version}_${cpu}.tgz`; L32: } ... L70: env: opts.env L71: }).then((result) => String(typeof result === "string" ? result : result?.stdout || "").trim());

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/tsnet-join.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = @tritard/waterbrother@0.17.7 matchedPath = src/tsnet-join.js matchedIdentity = npm:QHRyaXRhcmQvd2F0ZXJicm90aGVy:0.17.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/tsnet-join.jsView on unpkg

vendor/node-pty/prebuilds/win32-arm64/pty.nodeView file

•path = vendor/node-pty/prebuilds/win32-arm64/pty.node kind = native_binary sizeBytes = 293376 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty/prebuilds/win32-arm64/pty.nodeView on unpkg

src/terminal-shell-hooks.zshView file

•path = src/terminal-shell-hooks.zsh kind = build_helper sizeBytes = 1282 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/terminal-shell-hooks.zshView on unpkg

src/acp-proxy.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/acp-proxy.js#virtual:string-array:round1View on unpkg

src/voice.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/voice.jsView on unpkg

src/game-mcp.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/game-mcp.jsView on unpkg

src/experiment.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/experiment.jsView on unpkg

src/game-pipeline.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/game-pipeline.jsView on unpkg

src/product.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/product.jsView on unpkg

src/terminal-notifications.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/terminal-notifications.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

src/acp-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/acp-proxy.jsView on unpkg

Source & flagged code

26 flagged

vendor/node-pty/lib/windowsPtyAgent.jsView file

Lines 1-31javascript

1"use strict";

2/**

6 */

7Object.defineProperty(exports, "__esModule", { value: true });

8exports.argsToCommandLine = exports.WindowsPtyAgent = void 0;

9var fs = require("fs");

10var os = require("os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg · L8

11var path = require("path");

12var child_process_1 = require("child_process");

13var net_1 = require("net");

High

Child Process

Package source references child process execution.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg · L11

14var windowsConoutConnection_1 = require("./windowsConoutConnection");

15var utils_1 = require("./utils");

16var conptyNative;

17var winptyNative;

18/**

19 * The amount of time to wait for additional data after the conpty shell process has exited before

20 * shutting down the socket. The timer will be reset if a new data event comes in after the timer

21 * has started.

22 */

23var FLUSH_DATA_INTERVAL = 1000;

24/**

25 * This agent sits between the WindowsTerminal class and provides a common interface for both conpty

26 * and winpty.

27 */

28var WindowsPtyAgent = /** @class */ (function () {

29 function WindowsPtyAgent(file, args, env, cwd, cols, rows, debug, _useConpty, _useConptyDll, conptyInheritCursor) {

30 var _this = this;

31 if (_useConptyDll === void 0) { _useConptyDll = false; }

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/windowsPtyAgent.jsView on unpkg

src/tools.jsView file

Lines 3-43javascript

3import path from "node:path";

4import crypto from "node:crypto";

5import { exec } from "node:child_process";

6import { promisify } from "node:util";

src/codebase-index.jsView file

Lines 1-23javascript

1import fs from "node:fs/promises";

2import path from "node:path";

3import { shouldSkipCodebaseIndex } from "./ios-attach-contract.js";

4import { execFile } from "node:child_process";

src/listen-agent.jsView file

Lines 1-23javascript

1import fs from "node:fs/promises";

2import os from "node:os";

3import path from "node:path";

4import { spawnSync } from "node:child_process";

src/local-model-runtime.jsView file

Lines 1-24javascript

1import fs from "node:fs/promises";

2import fsSync from "node:fs";

3import os from "node:os";

4import path from "node:path";

src/cli.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/cli.jsView on unpkg · L1

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/cli.jsView on unpkg · L1

src/tsnet-join.jsView file

Lines 1-21javascript

1import { execFile, spawn } from "node:child_process";

2import { createWriteStream } from "node:fs";

3import { access, chmod, mkdir, unlink, writeFile } from "node:fs/promises";

4import os from "node:os";

vendor/node-pty/prebuilds/win32-arm64/pty.nodeView file

•path = vendor/node-pty/prebuilds/win32-arm64/pty.node kind = native_binary sizeBytes = 293376 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty/prebuilds/win32-arm64/pty.nodeView on unpkg

src/terminal-shell-hooks.zshView file

•path = src/terminal-shell-hooks.zsh kind = build_helper sizeBytes = 1282 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/terminal-shell-hooks.zshView on unpkg

src/acp-proxy.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/acp-proxy.js#virtual:string-array:round1View on unpkg

src/voice.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/voice.jsView on unpkg

src/game-mcp.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/game-mcp.jsView on unpkg

src/experiment.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/experiment.jsView on unpkg

src/game-pipeline.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/game-pipeline.jsView on unpkg

src/product.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/product.jsView on unpkg

src/terminal-notifications.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/terminal-notifications.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

src/acp-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/acp-proxy.jsView on unpkg

@tritard/waterbrother@0.17.11

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code