Loading npm security reports…

@twofive/snail-pi-web@0.9.20: AI-agent control-surface risk | LPM Firewall

registry / @twofive/snail-pi-web / 0.9.20

@twofive/snail-pi-web@0.9.20

Snail Pi Web (蜗牛派) workspace for the pi coding agent

AI Security Review

scanned 28d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package runs code that rewrites pi-subagents' extension implementation. This is an unconsented mutation of a foreign AI-agent control surface.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm installation executes the postinstall lifecycle hook.

Impact

The installed pi-subagents extension behavior is altered outside that dependency's own release process.

Mechanism

Postinstall source rewrite of a dependency's agent extension.

Policy narrative

The package declares a postinstall hook. On installation, it resolves the separately installed pi-subagents package, reads src/extension/index.ts, and overwrites it with a modified error matcher. Although the visible change is narrow and no exfiltration was found, it automatically changes foreign agent-extension code in the consumer installation.

AI rationale

The automatic postinstall rewrite of a separate AI-agent extension is a concrete foreign control-surface mutation. Its narrow visible purpose reduces certainty about broader intent but does not remove the install-time risk. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonscripts/patch-pi-subagents-stale-ctx.mjsnode_modules/pi-subagents/src/extension/index.ts

Decision evidence

public snapshot

Source & flagged code

25 flagged

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = bin/pi-web.js matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/pi-web.jsView on unpkg

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.tsView file

34stdio: "inherit", L35: shell: true, L36: env: process.env,

High

Shell

Package source references shell execution.

scripts/run-automation-smokes.tsView on unpkg · L34

lib/automation-extension-runtime.tsView file

Lines 1-37typescript

1/**

2 * In-memory verified extension execution.

3 *

4 * Bundle bytes are hashed once; factories and relative package imports resolve

5 * exclusively from those verified bytes. Mutable filesystem extracts are never

6 * imported for execution (eliminates verify→import TOCTOU).

7 */

9import { createHash } from "crypto";

lib/oauth-accounts.tsView file

Lines 11-51typescript

11export const ANTIGRAVITY_PROVIDER_ID = "antigravity";

12export const COMMANDCODE_PROVIDER_ID = "commandcode";

13export const GROK_ACCOUNT_PROVIDER_IDS

lib/automation-worker-runtime.cjsView file

Lines 36-76javascript

36var automation_extension_runtime_exports = {};

37__export(automation_extension_runtime_exports, {

38 createDiscoveryExtensionApi: () => createDiscoveryExtensionApi,

39 discoverExtensionRegistrationFromBytes: () => discoverExtensionRegistrationFromBytes,

40 loadFactoryFromVerifiedBundleBytes: () =>

lib/automation-runner.tsView file

18Cross-file remote execution chain: lib/automation-runner.ts spawns lib/automation-worker-runtime.cjs; helper contains network access plus dynamic code execution. L18: } from "fs"; L19: import { fork, type ChildProcess } from "child_process"; L20: import { join, dirname, basename } from "path"; ... L165: for (const [index, art] of staged.entries()) { L166: const bundleBytes = Buffer.from(art.bundleBytesBase64, "base64"); L167: const loaded = [redacted](bundleBytes, art.bundleSha256); ... L471: /** L472: * Walk upward from start dirs looking for package.json that owns this app. L473: */ ... L476: try { L477: if (typeof __dirname !== "undefined") starts.push(__dirname); L478: } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/automation-runner.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-runner.tsView on unpkg

scripts/run-automation-smokes.cjsView file

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg

lib/quick-command-runner.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/quick-command-runner.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/quick-command-runner.tsView on unpkg

scripts/e2e-automation-run-now.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = scripts/e2e-automation-run-now.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-automation-run-now.mjsView on unpkg

scripts/e2e-server-access-auth.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = scripts/e2e-server-access-auth.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-server-access-auth.mjsView on unpkg

scripts/probe-production-catalog.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = scripts/probe-production-catalog.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/probe-production-catalog.mjsView on unpkg

scripts/run-desktop-pet.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = scripts/run-desktop-pet.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run-desktop-pet.mjsView on unpkg

lib/terminal-manager.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/terminal-manager.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/terminal-manager.tsView on unpkg

lib/automation-extension-discovery.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/automation-extension-discovery.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-extension-discovery.tsView on unpkg

lib/git-worktree.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/git-worktree.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/git-worktree.tsView on unpkg

lib/npx.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/npx.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/npx.tsView on unpkg

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/pi-web.jsView on unpkg

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.tsView file

34stdio: "inherit", L35: shell: true, L36: env: process.env,

High

Shell

Package source references shell execution.

scripts/run-automation-smokes.tsView on unpkg · L34

lib/automation-extension-runtime.tsView file

17entry: string; L18: files: Record<string, string>; // relPath -> base64 L19: }; ... L62: } L63: return path.join(process.cwd(), "lib", "automation-extension-runtime.js"); L64: } ... L140: path.posix.join(rel, "index.ts"), L141: path.posix.join(rel, "package.json"), L142: ].filter((x): x is string => Boolean(x)); ... L429: getCommands: () => [], L430: exec: async () => ({ code: 0, stdout: "", stderr: "" }), L431: };

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/automation-extension-runtime.tsView on unpkg · L17

lib/oauth-accounts.tsView file

31const OPENAI_USERINFO_URLS = [ L32: "https://auth.openai.com/oauth/userinfo", L33: "https://auth.openai.com/userinfo", ... L194: try { L195: return JSON.parse(await readFile(path, "utf8")) as unknown; L196: } catch (error) { ... L277: L278: async function writeMetadata(provider: string, metadata: OAuthAccountStoreMetadata): Promise<void> { L279: await writeJsonFile(provider, metadataPath(provider), metadata); ... L417: async function fetchCommandCodeAccountLogin(accessToken: string): Promise<string | null> { L418: const base = process.env.COMMANDCODE_API_BASE?.trim().replace(/\/+$/, "") || "https://api.commandcode.ai"; L419: try {

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

lib/oauth-accounts.tsView on unpkg · L31

lib/automation-worker-runtime.cjsView file

56} L57: return import_path2.default.join(process.cwd(), "lib", "automation-extension-runtime.js"); L58: } ... L73: try { L74: bundle = JSON.parse(bundleBytes.toString("utf8")); L75: } catch (error) { ... L117: import_path2.default.posix.join(rel, "index.ts"), L118: import_path2.default.posix.join(rel, "package.json") L119: ].filter((x) => Boolean(x)); ... L335: getCommands: () => [], L336: exec: async () => ({ code: 0, stdout: "", stderr: "" }) L337: };

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/automation-worker-runtime.cjsView on unpkg · L56

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.19 matchedPath = lib/automation-worker-runtime.cjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.19 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-worker-runtime.cjsView on unpkg

lib/automation-runner.tsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-runner.tsView on unpkg

scripts/run-automation-smokes.cjsView file

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg

lib/quick-command-runner.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/quick-command-runner.tsView on unpkg

scripts/e2e-automation-run-now.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-automation-run-now.mjsView on unpkg

scripts/e2e-server-access-auth.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-server-access-auth.mjsView on unpkg

scripts/probe-production-catalog.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/probe-production-catalog.mjsView on unpkg

scripts/run-desktop-pet.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run-desktop-pet.mjsView on unpkg

lib/terminal-manager.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/terminal-manager.tsView on unpkg

lib/automation-extension-discovery.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-extension-discovery.tsView on unpkg

lib/git-worktree.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/git-worktree.tsView on unpkg

lib/npx.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/npx.tsView on unpkg

Source & flagged code

25 flagged

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/pi-web.jsView on unpkg

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.tsView file

34stdio: "inherit", L35: shell: true, L36: env: process.env,

High

Shell

Package source references shell execution.

scripts/run-automation-smokes.tsView on unpkg · L34

lib/automation-extension-runtime.tsView file

Lines 1-37typescript

1/**

2 * In-memory verified extension execution.

3 *

4 * Bundle bytes are hashed once; factories and relative package imports resolve

5 * exclusively from those verified bytes. Mutable filesystem extracts are never

6 * imported for execution (eliminates verify→import TOCTOU).

7 */

9import { createHash } from "crypto";

lib/oauth-accounts.tsView file

Lines 11-51typescript

11export const ANTIGRAVITY_PROVIDER_ID = "antigravity";

12export const COMMANDCODE_PROVIDER_ID = "commandcode";

13export const GROK_ACCOUNT_PROVIDER_IDS

lib/automation-worker-runtime.cjsView file

Lines 36-76javascript

36var automation_extension_runtime_exports = {};

37__export(automation_extension_runtime_exports, {

38 createDiscoveryExtensionApi: () => createDiscoveryExtensionApi,

39 discoverExtensionRegistrationFromBytes: () => discoverExtensionRegistrationFromBytes,

40 loadFactoryFromVerifiedBundleBytes: () =>

lib/automation-runner.tsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-runner.tsView on unpkg

scripts/run-automation-smokes.cjsView file

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg

lib/quick-command-runner.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/quick-command-runner.tsView on unpkg

scripts/e2e-automation-run-now.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-automation-run-now.mjsView on unpkg

scripts/e2e-server-access-auth.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-server-access-auth.mjsView on unpkg

scripts/probe-production-catalog.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/probe-production-catalog.mjsView on unpkg

scripts/run-desktop-pet.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run-desktop-pet.mjsView on unpkg

lib/terminal-manager.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/terminal-manager.tsView on unpkg

lib/automation-extension-discovery.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-extension-discovery.tsView on unpkg

lib/git-worktree.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/git-worktree.tsView on unpkg

lib/npx.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/npx.tsView on unpkg

@twofive/snail-pi-web@0.9.20

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code