@twofive/snail-pi-web@0.9.9: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@twofive/snail-pi-web@0.9.9: Suspicious npm security report | LPM Firewall

Source & flagged code

10 flagged · loading source

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-web.jsView on unpkg · L4

scripts/smoke-runtime-packaging.tsView file

30.join("\n"); L31: assert(!/shell\s*:\s*true/.test(executableSource), "published launcher must not spawn with shell: true"); L32: assert(launcher.includes('"explorer.exe"'), "Windows browser launch must use explorer.exe directly");

High

Shell

Package source references shell execution.

scripts/smoke-runtime-packaging.tsView on unpkg · L30

1Cross-file remote execution chain: scripts/smoke-runtime-packaging.ts spawns lib/automation-worker-runtime.cjs; helper contains network access plus dynamic code execution. L1: import { spawnSync } from "node:child_process"; L2: import { existsSync, readFileSync, statSync } from "node:fs"; ... L93: if (existsSync(meta)) { L94: const m = JSON.parse(readFileSync(meta, "utf8")) as { sha256?: string; size?: number }; L95: assert(typeof m.sha256 === "string" && m.sha256.length === 64, "worker meta sha256 required"); ... L116: // Published package files list must include lib/ (where the artifact lives). L117: const pkg = JSON.parse(readFileSync(join(ROOT, "package.json"), "utf8")) as { files?: string[] }; L118: assert(

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/smoke-runtime-packaging.tsView on unpkg · L1

scripts/smoke-chrome-extension-artifacts.tsView file

2* Artifact-level smoke checks for extensions/chrome-tab-debug. L3: * Loads production extension files under a mocked Chrome/WebSocket/DOM environment. L4: * Does not duplicate production authorization/policy logic into the test. ... L9: L10: import { spawnSync } from "node:child_process"; L11: import { createHash, randomUUID } from "node:crypto"; ... L357: sent: string[] = []; L358: private listeners = new Map<string, Set<Listener>>(); L359: onClientSend: ((data: string) => void) | null = null; L360: ... L505: // Tiny 1x1 jpeg-ish payload under limits L506: return "data:image/jpeg;base64,/[redacted]...

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

scripts/smoke-chrome-extension-artifacts.tsView on unpkg · L2

scripts/smoke-automation-security-regressions.tsView file

3*/ L4: import { createServer } from "http"; L5: import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "fs"; ... L76: const agentDir = mkdtempSync(path.join(tmpdir(), "auto-sec-")); L77: process.env.PI_CODING_AGENT_DIR = agentDir; L78: ... L183: response.statusCode = 204; L184: response.end(); L185: }), ... L505: { L506: const bad = validateJsonlStructure(Buffer.from("not-json\n")); L507: assert(!bad.ok, "invalid jsonl rejected");

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

scripts/smoke-automation-security-regressions.tsView on unpkg · L3

scripts/run-automation-smokes.cjsView file

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 1360 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

Source & flagged code

10 flagged

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-web.jsView on unpkg · L4

scripts/smoke-runtime-packaging.tsView file

30.join("\n"); L31: assert(!/shell\s*:\s*true/.test(executableSource), "published launcher must not spawn with shell: true"); L32: assert(launcher.includes('"explorer.exe"'), "Windows browser launch must use explorer.exe directly");

High

Shell

Package source references shell execution.

scripts/smoke-runtime-packaging.tsView on unpkg · L30

1Cross-file remote execution chain: scripts/smoke-runtime-packaging.ts spawns lib/automation-worker-runtime.cjs; helper contains network access plus dynamic code execution. L1: import { spawnSync } from "node:child_process"; L2: import { existsSync, readFileSync, statSync } from "node:fs"; ... L93: if (existsSync(meta)) { L94: const m = JSON.parse(readFileSync(meta, "utf8")) as { sha256?: string; size?: number }; L95: assert(typeof m.sha256 === "string" && m.sha256.length === 64, "worker meta sha256 required"); ... L116: // Published package files list must include lib/ (where the artifact lives). L117: const pkg = JSON.parse(readFileSync(join(ROOT, "package.json"), "utf8")) as { files?: string[] }; L118: assert(

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/smoke-runtime-packaging.tsView on unpkg · L1

scripts/smoke-chrome-extension-artifacts.tsView file

2* Artifact-level smoke checks for extensions/chrome-tab-debug. L3: * Loads production extension files under a mocked Chrome/WebSocket/DOM environment. L4: * Does not duplicate production authorization/policy logic into the test. ... L9: L10: import { spawnSync } from "node:child_process"; L11: import { createHash, randomUUID } from "node:crypto"; ... L357: sent: string[] = []; L358: private listeners = new Map<string, Set<Listener>>(); L359: onClientSend: ((data: string) => void) | null = null; L360: ... L505: // Tiny 1x1 jpeg-ish payload under limits L506: return "data:image/jpeg;base64,/[redacted]...

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

scripts/smoke-chrome-extension-artifacts.tsView on unpkg · L2

scripts/smoke-automation-security-regressions.tsView file

3*/ L4: import { createServer } from "http"; L5: import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "fs"; ... L76: const agentDir = mkdtempSync(path.join(tmpdir(), "auto-sec-")); L77: process.env.PI_CODING_AGENT_DIR = agentDir; L78: ... L183: response.statusCode = 204; L184: response.end(); L185: }), ... L505: { L506: const bad = validateJsonlStructure(Buffer.from("not-json\n")); L507: assert(!bad.ok, "invalid jsonl rejected");

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

scripts/smoke-automation-security-regressions.tsView on unpkg · L3

scripts/run-automation-smokes.cjsView file

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 1360 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg