@vpxa/aikit@0.1.435: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@vpxa/aikit@0.1.435: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/postinstall-managed-launcher.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

packages/tools/dist/index.jsView file

1import{a as e,n as t,o as n,r,s as i,t as a}from"./import-resolver-BjraRSaz.js";import{access as o,mkdir as s,readFile as c,readdir as l,rename as u,stat as d,writeFile as f}from"n... L2: `)){if(!a)continue;if(a.startsWith(`## `)){i=a.slice(3).split(`...`)[0];continue}let e=a[0],o=a[1],s=a.slice(3).trim();e===`?`&&o===`?`?r.push(s):(e!==` `&&e!==`?`&&t.push({status:...

High

Child Process

Package source references child process execution.

packages/tools/dist/index.jsView on unpkg · L1

1import{a as e,n as t,o as n,r,s as i,t as a}from"./import-resolver-BjraRSaz.js";import{access as o,mkdir as s,readFile as c,readdir as l,rename as u,stat as d,writeFile as f}from"n... L2: `)){if(!a)continue;if(a.startsWith(`## `)){i=a.slice(3).split(`...`)[0];continue}let e=a[0],o=a[1],s=a.slice(3).trim();e===`?`&&o===`?`?r.push(s):(e!==` `&&e!==`?`&&t.push({status:... L3: `).trim()||t.message||`Command failed`}async function st(e={}){if(at>=2)throw Error(`Too many concurrent check runs (${at}/2). Retry when one finishes or use targeted check({ files... L4: `).length-1,a=t.slice(r).match(/export\s+(?:async\s+)?(\w+)/);l.push({name:n[1],path:e.record.sourcePath,line:e.record.startLine+i,kind:a?.[1]??`unknown`})}}let f=new Map;for(let e... L5: `)){let e=t.match(/^\s*-\s+['"]?([^'"#\s]+)[

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

packages/tools/dist/index.jsView on unpkg · L1

1import{a as e,n as t,o as n,r,s as i,t as a}from"./import-resolver-BjraRSaz.js";import{access as o,mkdir as s,readFile as c,readdir as l,rename as u,stat as d,writeFile as f}from"n... L2: `)){if(!a)continue;if(a.startsWith(`## `)){i=a.slice(3).split(`...`)[0];continue}let e=a[0],o=a[1],s=a.slice(3).trim();e===`?`&&o===`?`?r.push(s):(e!==` `&&e!==`?`&&t.push({status:... L3: `).trim()||t.message||`Command failed`}async function st(e={}){if(at>=2)throw Error(`Too many concurrent check runs (${at}/2). Retry when one finishes or use targeted check({ files... L4: `).length-1,a=t.slice(r).match(/export\s+(?:async\s+)?(\w+)/);l.push({name:n[1],path:e.record.sourcePath,line:e.record.startLine+i,kind:a?.[1]??`unknown`})}}let f=new Map;for(let e... L5: `)){let e=t.match(/^\s*-\s+['"]?([^'"#\s]+)[

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

packages/tools/dist/index.jsView on unpkg · L1

1import{a as e,n as t,o as n,r,s as i,t as a}from"./import-resolver-BjraRSaz.js";import{access as o,mkdir as s,readFile as c,readdir as l,rename as u,stat as d,writeFile as f}from"n... L2: `)){if(!a)continue;if(a.startsWith(`## `)){i=a.slice(3).split(`...`)[0];continue}let e=a[0],o=a[1],s=a.slice(3).trim();e===`?`&&o===`?`?r.push(s):(e!==` `&&e!==`?`&&t.push({status:... L3: `).trim()||t.message||`Command failed`}async function st(e={}){if(at>=2)throw Error(`Too many concurrent check runs (${at}/2). Retry when one finishes or use targeted check({ files... L4: `).length-1,a=t.slice(r).match(/export\s+(?:async\s+)?(\w+)/);l.push({name:n[1],path:e.record.sourcePath,line:e.record.startLine+i,kind:a?.[1]??`unknown`})}}let f=new Map;for(let e... L5: `)){let e=t.match(/^\s*-\s+['"]?([^'"#\s]+)[

Low

Weak Crypto

Package source references weak cryptographic algorithms.

packages/tools/dist/index.jsView on unpkg · L1

scaffold/dist/definitions/bodies.mjsView file

489- [ ] **SSRF protection**: URLs validated against allowlist, no open redirects, internal IPs blocked L490: - [ ] **eval/Function prevention**: No dynamic code execution from user input (\`eval()\`, \`new Function()\`, \`vm.runInNewContext()\`) L491: - [ ] **Path traversal**: File paths sanitized, no \`..\` sequences reaching outside allowed directories

Low

Eval

Package source references a known benign dynamic code generation pattern.

scaffold/dist/definitions/bodies.mjsView on unpkg · L489

bin/aikit.mjsView file

53L54: await import(pathToFileURL(serverPath).href); L55: } else {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aikit.mjsView on unpkg · L53

packages/server/dist/proxy.jsView file

1import{n as e}from"./auth-B5Pmafno.js";import{fileURLToPath as t}from"node:url";import{spawn as n}from"node:child_process";import{homedir as r}from"node:os";import{createInterface ... L2: `);for(let e of n.split(` L3: `))e.startsWith(`data: `)?t.push(e.slice(6)):e.startsWith(`data:`)&&t.push(e.slice(5));return t}const o={input:process.stdin,output:process.stdout,error:process.stderr,fetchImpl:gl... L4: `);let v=n.readTokenImpl();if(!v){n.error.write(`[aikit-proxy] No token found at ~/.aikit/token ... L10: L11: `))if(t.trim())for(let e of a(t))S(n.output,e)}else S(n.output,i)}catch(t){S(n.output,h(e,t))}}async function c(e,t=globalThis.fetch){try{return(await t(`${e}/health`,{method:`GET`... L12: `)?t:`${t}\n`)}function h(e,t){let n=null;try{n=JSON.parse(e).id??null}catch{n=null}return

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

packages/server/dist/proxy.jsView on unpkg · L1

packages/browser/dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @vpxa/aikit@0.1.377 matchedIdentity = npm:QHZweGEvYWlraXQ:0.1.377 similarity = 0.425 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

packages/browser/dist/index.jsView on unpkg

1import{exec as e,execFileSync as t,execSync as n,spawn as r}from"node:child_process";import{appendFileSync as i,closeSync as a,copyFileSync as o,existsSync as s,mkdirSync as c,open... L2: `)}return JSON.stringify(t,null,2)}catch{return e}}function xe(e,t=0,n=[]){let r=` `.repeat(t),i=typeof e.role==`string`?e.role.toUpperCase():``,a=typeof e.ref==`string`?e.ref:``,... L3: const text = await r.text();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

packages/browser/dist/index.jsView on unpkg · L1

packages/store/dist/index.jsView file

113Cross-file remote execution chain: packages/store/dist/index.js spawns packages/server/dist/index.js; helper contains network access plus dynamic code execution. L113: SELECT knowledge_id, 'default', '1', ?, 'float32', embedding, ? L114: FROM ${t.name}`,[a,r]);let s=e.queryAll(`SELECT COUNT(*) AS cnt FROM memory_embeddings`)[0]?.cnt??0;i+=s-o}i>0&&ae.info(`[migration v4] backfilled ${i} embeddings into memory_embed... L115: CREATE TABLE IF NOT EXISTS ${Pe} ( ... L670: entry_id ASC L671: LIMIT ?`);return{create(e,n){t.run(e,n??`working`)},get(e){return n.get(e)},touch(e){r.run(e)},updateScore(e,t){i.run(t,e)},updateConfidence(e,t){a.run(t,e)},updateTier(e,t){o.run(...

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

packages/store/dist/index.jsView on unpkg · L113

packages/chunker/wasm/tree-sitter-go.wasmView file

•path = packages/chunker/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

packages/chunker/wasm/tree-sitter-go.wasmView on unpkg

scaffold/dist/definitions/skills/docs.mjsView file

•path = [redacted].mjs kind = oversized_source_file sizeBytes = 2785692 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

scaffold/dist/definitions/skills/docs.mjsView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 111-151json

111 "playwright-core": "^1.x"

112 },

113 "devDependencies": {

114 "@biomejs/biome": "^2.x",

115 "@types/better-sqlite3": "^7.x",

116 "@types/express": "^5.x",

117 "@types/node": "^24.x",

118 "rimraf": "^6.x",

119 "tsdown": "^0.x",

120 "turbo": "^2.x",

121 "typescript": "^6.x",

122 "vite": "^8.x",

123 "vite-plugin-singlefile": "^2.x",

124 "vitest": "^4.x",

125 "ws": "^8.x"

126 },

127 "engines": {

128 "node": ">=18"

129 },

130 "scripts": {

131 "postinstall": "node ./bin/postinstall-managed-launcher.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L131

132 "setup-hooks": "node scripts/setup-hooks.mjs",

133 "build": "node scripts/build.mjs && node packages/claude-desktop/scripts/build-mcpb.mjs",

134 "typecheck": "tsc -b tsconfig.build.json --emitDeclarationOnly",

135 "clean": "turbo run clean && rimraf --glob node_modules \"packages/*/node_modules\"",

136 "lint": "biome check .",

137 "lint:fix": "biome check --write . --unsafe",

138 "format": "biome format --write .",

139 "start": "node packages/server/dist/bin.js",

140 "start:http": "node packages/server/dist/bin.js --transport http",

141 "prompt-analysis": "pnpm --dir ./scripts/tools/prompt-analysis build && node ./scripts/tools/prompt-analysis/run.mjs",

142 "dogfood": "node scripts/dogfood-evaluate.mjs",

143 "memory:evaluate": "node scripts/memory-evaluate.mjs",

144 "memory:dogfood": "node scripts/dogfood-evaluate.mjs --focus memory",

145 "test": "vitest run",

146 "test:contract": "vitest run packages/server/src/__tests__/tool-catalog-contract.test.ts",

147 "check:scaffold-contracts": "node .tmp/check-remember.mjs",

148 "test:dogfood": "vitest run packages/server/src/dogfood/__tests__/evaluation.test.ts",

149 "test:memory": "vitest run packages/server/src/memory/__tests__/evaluation.test.ts packages/server/src/__tests__/memory-explain.tool.test.ts",

150 "verify-publish": "node scripts/verify-publish.mjs",

151 "release": "node scripts/release.mjs",

packages/tools/dist/index.jsView file

Lines 1-21javascript

1import{a as e,n as t,o as n,r,s as i,t as a}from"./import-resolver-BjraRSaz.js";import{access as o,mkdir as s,readFile as c,readdir as l,rename as u,stat as

scaffold/dist/definitions/bodies.mjsView file

Lines 469-509javascript

4694. **Dependency Audit** — Check for known CVEs in dependencies

4705. **Secret Detection** — Scan for hardcoded credentials, API keys, tokens

4716. **Auth/AuthZ Review** — verify access control, session management

bin/aikit.mjsView file

Lines 33-59javascript

33} else {

34 // Fallback to bundled path

35 cliPath = resolve(__dirname, '..', 'packages', 'cli', 'dist', 'index.js');

36 serverPath = resolve

packages/server/dist/proxy.jsView file

Lines 1-12javascript

1import{n as e}from"./auth-B5Pmafno.js";import{fileURLToPath as t}from"node:url";import{spawn as n}from"node:child_process";import{homedir as r}from"node:os";

packages/browser/dist/index.jsView file

Lines 1-11javascript

1import{exec as e,execFileSync as t,execSync as n,spawn as r}from"node:child_process";import{appendFileSync as i,closeSync as a,copyFileSync as o,existsSync as s,mkdirSync as c,openSync as l,readFileSync as

packages/store/dist/index.jsView file

113Cross-file remote execution chain: packages/store/dist/index.js spawns packages/server/dist/index.js; helper contains network access plus dynamic code execution. L113: SELECT knowledge_id, 'default', '1', ?, 'float32', embedding, ? L114: FROM ${t.name}`,[a,r]);let s=e.queryAll(`SELECT COUNT(*) AS cnt FROM memory_embeddings`)[0]?.cnt??0;i+=s-o}i>0&&ae.info(`[migration v4] backfilled ${i} embeddings into memory_embed... L115: CREATE TABLE IF NOT EXISTS ${Pe} ( ... L670: entry_id ASC L671: LIMIT ?`);return{create(e,n){t.run(e,n??`working`)},get(e){return n.get(e)},touch(e){r.run(e)},updateScore(e,t){i.run(t,e)},updateConfidence(e,t){a.run(t,e)},updateTier(e,t){o.run(...

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

packages/store/dist/index.jsView on unpkg · L113

packages/chunker/wasm/tree-sitter-go.wasmView file

•path = packages/chunker/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

packages/chunker/wasm/tree-sitter-go.wasmView on unpkg

scaffold/dist/definitions/skills/docs.mjsView file

•path = [redacted].mjs kind = oversized_source_file sizeBytes = 2785692 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

scaffold/dist/definitions/skills/docs.mjsView on unpkg