@twofive/snail-pi-web@0.9.24: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@twofive/snail-pi-web@0.9.24: Suspicious npm security report | LPM Firewall

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs && node scripts/patch-pi-commandcode-cache-race.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs && node scripts/patch-pi-commandcode-cache-race.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.cjsView file

30stdio: "inherit", L31: shell: true, L32: env: process.env,

High

Shell

Package source references shell execution.

scripts/run-automation-smokes.cjsView on unpkg · L30

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

bin/launcher-log.jsView file

17// eslint-disable-next-line @typescript-eslint/no-require-imports L18: const fs = require("fs"); L19: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/launcher-log.jsView on unpkg · L17

lib/automation-extension-runtime.tsView file

17entry: string; L18: files: Record<string, string>; // relPath -> base64 L19: }; ... L62: } L63: return path.join(process.cwd(), "lib", "automation-extension-runtime.js"); L64: } ... L140: path.posix.join(rel, "index.ts"), L141: path.posix.join(rel, "package.json"), L142: ].filter((x): x is string => Boolean(x)); ... L429: getCommands: () => [], L430: exec: async () => ({ code: 0, stdout: "", stderr: "" }), L431: };

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/automation-extension-runtime.tsView on unpkg · L17

lib/oauth-accounts.tsView file

37const OPENAI_USERINFO_URLS = [ L38: "https://auth.openai.com/oauth/userinfo", L39: "https://auth.openai.com/userinfo", ... L200: try { L201: return JSON.parse(await readFile(path, "utf8")) as unknown; L202: } catch (error) { ... L283: L284: async function writeMetadata(provider: string, metadata: OAuthAccountStoreMetadata): Promise<void> { L285: await writeJsonFile(provider, metadataPath(provider), metadata); ... L423: async function fetchCommandCodeAccountLogin(accessToken: string): Promise<string | null> { L424: const base = process.env.COMMANDCODE_API_BASE?.trim().replace(/\/+$/, "") || "https://api.commandcode.ai"; L425: try {

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

lib/oauth-accounts.tsView on unpkg · L37

lib/automation-worker-runtime.cjsView file

56} L57: return import_path2.default.join(process.cwd(), "lib", "automation-extension-runtime.js"); L58: } ... L73: try { L74: bundle = JSON.parse(bundleBytes.toString("utf8")); L75: } catch (error) { ... L117: import_path2.default.posix.join(rel, "index.ts"), L118: import_path2.default.posix.join(rel, "package.json") L119: ].filter((x) => Boolean(x)); ... L335: getCommands: () => [], L336: exec: async () => ({ code: 0, stdout: "", stderr: "" }) L337: };

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/automation-worker-runtime.cjsView on unpkg · L56

lib/automation-runner.tsView file

18Cross-file remote execution chain: lib/automation-runner.ts spawns lib/automation-worker-runtime.cjs; helper contains network access plus dynamic code execution. L18: } from "fs"; L19: import { fork, type ChildProcess } from "child_process"; L20: import { join, dirname, basename } from "path"; ... L165: for (const [index, art] of staged.entries()) { L166: const bundleBytes = Buffer.from(art.bundleBytesBase64, "base64"); L167: const loaded = [redacted](bundleBytes, art.bundleSha256); ... L471: /** L472: * Walk upward from start dirs looking for package.json that owns this app. L473: */ ... L476: try { L477: if (typeof __dirname !== "undefined") starts.push(__dirname); L478: } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg

lib/quick-command-runner.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/quick-command-runner.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/quick-command-runner.tsView on unpkg

scripts/e2e-automation-run-now.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = scripts/e2e-automation-run-now.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-automation-run-now.mjsView on unpkg

scripts/e2e-server-access-auth.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = scripts/e2e-server-access-auth.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/e2e-server-access-auth.mjsView on unpkg

scripts/run-desktop-pet.mjsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = scripts/run-desktop-pet.mjs matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run-desktop-pet.mjsView on unpkg

lib/terminal-manager.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/terminal-manager.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/terminal-manager.tsView on unpkg

lib/automation-extension-discovery.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/automation-extension-discovery.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-extension-discovery.tsView on unpkg

lib/npx.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/npx.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/npx.tsView on unpkg

lib/pi-runtime-resolver.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/pi-runtime-resolver.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/pi-runtime-resolver.tsView on unpkg

lib/pi-web-config.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/pi-web-config.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/pi-web-config.tsView on unpkg

lib/server-access-policy.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/server-access-policy.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/server-access-policy.tsView on unpkg

lib/web-tools-config.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/web-tools-config.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/web-tools-config.tsView on unpkg

lib/automation-worker-host.tsView file

•matchType = normalized_sha256 matchedPackage = @twofive/snail-pi-web@0.9.20 matchedPath = lib/automation-worker-host.ts matchedIdentity = npm:QHR3b2ZpdmUvc25haWwtcGktd2Vi:0.9.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/automation-worker-host.tsView on unpkg