@uichemy/agent-bridge@1.0.2: Suspicious npm security report

Loading npm security reports…

@uichemy/agent-bridge@1.0.2: Suspicious npm security report | LPM Firewall

Source & flagged code

5 flagged

Lines 1-1javascript

1(()=>{var __webpack_modules__={354:(e,t,s)=>{"use strict";const n=s(412);const o=s(335);const r=s(376);const i=s(893);const a=s(389);const c=s(332);const l=s(681);const d=s(129);l.createWebSocketStream=n;l.extension=o;l.PerMessageDeflate=r;l.Receiver=i;l.Sender=a;l.Server=d;l.subprotocol=c;l.WebSocket=l;l.WebSocketServer=d;e.exports=l},803:(e,t,s)=>{"use strict";const{EMPTY_BUFFER:n}=s(791);const o=Buffer[Symbol.species];function concat(e,t){if(e.length===0)return n;if(e.length===1)return e[0];const s=Buffer.allocUnsafe(t);let r=0;for(let t=0;t<e.length;t++){const n=e[t];s.set(n,r);r+=n.length ...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L1

Long lines were clipped for display.

Source & flagged code

5 flagged · loading source

dist/index.jsView file

1(()=>{var __webpack_modules__={354:(e,t,s)=>{"use strict";const n=s(412);const o=s(335);const r=s(376);const i=s(893);const a=s(389);const c=s(332);const l=s(681);const d=s(129);l....

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

1(()=>{var __webpack_modules__={354:(e,t,s)=>{"use strict";const n=s(412);const o=s(335);const r=s(376);const i=s(893);const a=s(389);const c=s(332);const l=s(681);const d=s(129);l....

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1(()=>{var __webpack_modules__={354:(e,t,s)=>{"use strict";const n=s(412);const o=s(335);const r=s(376);const i=s(893);const a=s(389);const c=s(332);const l=s(681);const d=s(129);l....

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1patternName = generic_password severity = medium line = 1 matchedText = (()=>{va...)();

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1

1(()=>{var __webpack_modules__={354:(e,t,s)=>{"use strict";const n=s(412);const o=s(335);const r=s(376);const i=s(893);const a=s(389);const c=s(332);const l=s(681);const d=s(129);l....

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L1

@uichemy/agent-bridge@1.0.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code