@twofive/snail-pi-web: Suspicious npm security report (Warn)

Loading npm security reports…

@twofive/snail-pi-web: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

26 flagged

package.jsonView file

Lines 27-67json

27 "!.next/cache",

28 "!.next/dev",

29 "!.next/diagnostics",

30 "!.next/types",

31 "!.next/trace",

32 "!.next/trace-build",

33 "!.next/**/*.js.map",

34 "!.next/**/*.nft.json",

35 "lib",

36 "public",

37 "scripts",

38 "!scripts/smoke-*",

39 "extensions/chrome-tab-debug",

40 "ecosystem.config.cjs",

41 "proxy.ts",

42 "instrumentation.ts",

43 "next.config.ts",

44 "package.json"

45 ],

46 "scripts": {

47 "postinstall": "node scripts/patch-pi-subagents-stale-ctx.mjs && node scripts/patch-pi-commandcode-cache-race.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L47

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L47

48 "dev": "node bin/pi-web.js --dev",

49 "build": "node scripts/build-next.js",

50 "start": "node bin/pi-web.js",

51 "lint": "eslint .",

52 "test:server-auth": "npx --yes tsx@4.23.1 scripts/smoke-server-access-auth.ts && npx --yes tsx@4.23.1 scripts/smoke-server-access-proxy.ts",

53 "test:server-auth:e2e": "node scripts/e2e-server-access-auth.mjs",

54 "test:ui-theme": "npx --yes tsx@4.23.1 scripts/smoke-ui-theme-contract.ts",

55 "generate:browser-extension": "tsx scripts/generate-browser-extension-shared.ts",

56 "test:browser": "npx --yes tsx@4.23.1 scripts/generate-browser-extension-shared.ts && npx --yes tsx@4.23.1 scripts/smoke-browser-binding.ts && npx --yes tsx@4.23.1 scripts/smoke-chrome-extension-artifacts.ts",

57 "test:snflow": "npx --yes tsx@4.23.1 scripts/smoke-snflow-setup.ts && npx --yes tsx@4.23.1 scripts/smoke-workflow-store.ts && npx --yes tsx@4.23.1 scripts/smoke-workflow-session-link.ts && npx --yes tsx@4.23.1 scripts/smoke-workflow-chat-lifecycle.ts && npx --yes tsx@4.23.1 scripts/smoke-snflow-spec-review.ts",

58 "test:runtime": "npx --yes tsx@4.23.1 scripts/smoke-runtime-packaging.ts",

59 "test:npm-package": "node scripts/check-npm-package-size.mjs",

60 "test:open-folder": "npx --yes tsx@4.23.1 scripts/smoke-open-project-folder.ts",

61 "test:cwd-browse": "npx --yes tsx@4.23.1 scripts/smoke-cwd-browse.ts",

62 "test:subagent-observability": "npx --yes tsx@4.23.1 scripts/smoke-subagent-observability.ts && node --import tsx scripts/smoke-subagent-progress.mjs && npx --yes tsx@4.23.1 scripts/smoke-subagent-session-runs.ts && npx --yes tsx@4.23.1 scripts/smoke-subagent-detail.ts && npx --yes tsx@4.23.1 scripts/smoke-subagent-detail-route.ts && npx --yes tsx@4.23.1 scripts/smoke-subagent-store.ts",

63 "test:agent-stream": "node --import tsx scripts/smoke-agent-event-throttler.mjs && node --import tsx scripts/smoke-empty-completed-retry.mjs && npx --yes tsx@4.23.1 scripts/smoke-chat-lifecycle.ts && npx --yes tsx@4.23.1 scripts/smoke-pi-session-lifecycle.ts",

64 "test:chat-errors": "npx --yes tsx@4.23.1 scripts/smoke-chat-provider-errors.ts",

65 "test:model-primary-candidates": "npx --yes tsx@4.23.1 scripts/smoke-model-primary-candidates.ts",

66 "test:model-extra-prompts": "npx --yes tsx@4.23.1 scripts/smoke-model-extra-prompts.ts",

67 "test:model-default": "npx --yes tsx@4.23.1 scripts/smoke-model-default.ts",

bin/pi-web.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2"use strict";

4// eslint-disable-next-line @typescript-eslint/no-require-imports

5const { spawn } = require("child_process");

6// eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.cjsView file

Lines 10-47javascript

10 "smoke-automation-runner.ts",

11 "smoke-automation-session.ts",

12 "fault-inject-automation-promotion.ts",

13 "smoke-automation-scheduler.ts",

14 "smoke-automation-api.ts",

15 "smoke-automation-approval.ts",

bin/launcher-log.jsView file

Lines 1-37javascript

1"use strict";

3/**

4 * Bounded, redacted startup log owned by the `spi` parent process.

5 *

6 * During a launcher-managed start the Next server writes to a pipe we own, not to

7 * a console. We therefore own rotation too: if the launcher GUI exits, the log must

8 * keep working without a dangling stdout reader, and it must never grow without

9 * bound. Everything goes through `redact()` twice — once before it hits the disk

10 * and once before it is projected into the launcher UI (the UI side re-checks with

lib/automation-extension-runtime.tsView file

Lines 1-37typescript

1/**

2 * In-memory verified extension execution.

3 *

4 * Bundle bytes are hashed once; factories and relative package imports resolve

5 * exclusively from those verified bytes. Mutable filesystem extracts are never

6 * imported for execution (eliminates verify→import TOCTOU).

7 */

9import { createHash } from "crypto";

lib/oauth-accounts.tsView file

Lines 17-57typescript

17 * so Pi's `xai` fully covers the subscription and the extra key is gone.

18 */

19export const GROK_ACCOUNT_PROVIDER_IDS = ["xai"] as const;

21const

lib/automation-worker-runtime.cjsView file

Lines 36-76javascript

36var automation_extension_runtime_exports = {};

37__export(automation_extension_runtime_exports, {

38 createDiscoveryExtensionApi: () => createDiscoveryExtensionApi,

39 discoverExtensionRegistrationFromBytes: () => discoverExtensionRegistrationFromBytes,

40 loadFactoryFromVerifiedBundleBytes: () =>

lib/automation-runner.tsView file

18Cross-file remote execution chain: lib/automation-runner.ts spawns lib/automation-worker-runtime.cjs; helper contains network access plus dynamic code execution. L18: } from "fs"; L19: import { fork, type ChildProcess } from "child_process"; L20: import { join, dirname, basename } from "path"; ... L165: for (const [index, art] of staged.entries()) { L166: const bundleBytes = Buffer.from(art.bundleBytesBase64, "base64"); L167: const loaded = [redacted](bundleBytes, art.bundleSha256); ... L471: /** L472: * Walk upward from start dirs looking for package.json that owns this app. L473: */ ... L476: try { L477: if (typeof __dirname !== "undefined") starts.push(__dirname); L478: } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg

lib/quick-command-runner.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/quick-command-runner.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/quick-command-runner.tsView on unpkg

scripts/e2e-automation-run-now.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = scripts/e2e-automation-run-now.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-automation-run-now.mjsView on unpkg

scripts/e2e-server-access-auth.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = scripts/e2e-server-access-auth.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-server-access-auth.mjsView on unpkg

scripts/run-desktop-pet.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = scripts/run-desktop-pet.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run-desktop-pet.mjsView on unpkg

lib/terminal-manager.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/terminal-manager.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/terminal-manager.tsView on unpkg

lib/automation-extension-discovery.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/automation-extension-discovery.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-extension-discovery.tsView on unpkg

lib/npx.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/npx.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/npx.tsView on unpkg

lib/pi-runtime-resolver.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/pi-runtime-resolver.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/pi-runtime-resolver.tsView on unpkg

lib/pi-web-config.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/pi-web-config.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/pi-web-config.tsView on unpkg

lib/server-access-policy.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/server-access-policy.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/server-access-policy.tsView on unpkg

lib/web-tools-config.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/web-tools-config.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/web-tools-config.tsView on unpkg

lib/automation-worker-host.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/automation-worker-host.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-worker-host.tsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs && node scripts/patch-pi-commandcode-cache-race.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs && node scripts/patch-pi-commandcode-cache-race.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.cjsView file

30stdio: "inherit", L31: shell: true, L32: env: process.env,

High

Shell

Package source references shell execution.

scripts/run-automation-smokes.cjsView on unpkg · L30

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

bin/launcher-log.jsView file

17// eslint-disable-next-line @typescript-eslint/no-require-imports L18: const fs = require("fs"); L19: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/launcher-log.jsView on unpkg · L17

lib/automation-extension-runtime.tsView file

17entry: string; L18: files: Record<string, string>; // relPath -> base64 L19: }; ... L62: } L63: return path.join(process.cwd(), "lib", "automation-extension-runtime.js"); L64: } ... L140: path.posix.join(rel, "index.ts"), L141: path.posix.join(rel, "package.json"), L142: ].filter((x): x is string => Boolean(x)); ... L429: getCommands: () => [], L430: exec: async () => ({ code: 0, stdout: "", stderr: "" }), L431: };

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/automation-extension-runtime.tsView on unpkg · L17

lib/oauth-accounts.tsView file

37const OPENAI_USERINFO_URLS = [ L38: "https://auth.openai.com/oauth/userinfo", L39: "https://auth.openai.com/userinfo", ... L200: try { L201: return JSON.parse(await readFile(path, "utf8")) as unknown; L202: } catch (error) { ... L283: L284: async function writeMetadata(provider: string, metadata: OAuthAccountStoreMetadata): Promise<void> { L285: await writeJsonFile(provider, metadataPath(provider), metadata); ... L423: async function fetchCommandCodeAccountLogin(accessToken: string): Promise<string | null> { L424: const base = process.env.COMMANDCODE_API_BASE?.trim().replace(/\/+$/, "") || "https://api.commandcode.ai"; L425: try {

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

lib/oauth-accounts.tsView on unpkg · L37

lib/automation-worker-runtime.cjsView file

56} L57: return import_path2.default.join(process.cwd(), "lib", "automation-extension-runtime.js"); L58: } ... L73: try { L74: bundle = JSON.parse(bundleBytes.toString("utf8")); L75: } catch (error) { ... L117: import_path2.default.posix.join(rel, "index.ts"), L118: import_path2.default.posix.join(rel, "package.json") L119: ].filter((x) => Boolean(x)); ... L335: getCommands: () => [], L336: exec: async () => ({ code: 0, stdout: "", stderr: "" }) L337: };

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/automation-worker-runtime.cjsView on unpkg · L56

lib/automation-runner.tsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg

lib/quick-command-runner.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/quick-command-runner.tsView on unpkg

scripts/e2e-automation-run-now.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-automation-run-now.mjsView on unpkg

scripts/e2e-server-access-auth.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-server-access-auth.mjsView on unpkg

scripts/run-desktop-pet.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run-desktop-pet.mjsView on unpkg

lib/terminal-manager.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/terminal-manager.tsView on unpkg

lib/automation-extension-discovery.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-extension-discovery.tsView on unpkg

lib/npx.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/npx.tsView on unpkg

lib/pi-runtime-resolver.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/pi-runtime-resolver.tsView on unpkg

lib/pi-web-config.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/pi-web-config.tsView on unpkg

lib/server-access-policy.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/server-access-policy.tsView on unpkg

lib/web-tools-config.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/web-tools-config.tsView on unpkg

lib/automation-worker-host.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-worker-host.tsView on unpkg