Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@wrongstack/core@0.282.2: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 10 low-signal pattern(s) reviewed.

View on npm All versions

registry / @wrongstack/core / 0.282.2

@wrongstack/core@0.282.2

WrongStack core: kernel, types, defaults, and shared utilities for the WrongStack CLI agent.

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 3.46 MB of source, external domains: 127.0.0.1, api.github.com, api.minimax.io, mcp.context7.com, mcp.sentinel.ai, models.dev, skills.sh

Oversized source lightweight scan

dist/index.js2.09 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsCryptoShell

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

HighEntropyStrings

Source & flagged code

3 flagged · loading source

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2192999 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

skills/security-scanner/SKILL.mdView file

48patternName = private_key_rsa severity = critical line = 48 matchedText = const pe.....";

Critical

Secret Pattern

RSA private key in skills/security-scanner/SKILL.md

skills/security-scanner/SKILL.mdView on unpkg · L48

101patternName = private_key_rsa severity = critical line = 101 matchedText = const pe.....";

Critical

Secret Pattern

RSA private key in skills/security-scanner/SKILL.md

skills/security-scanner/SKILL.mdView on unpkg · L101

Findings

2 Critical1 High3 Medium4 Low

CriticalSecret Patternskills/security-scanner/SKILL.md

CriticalSecret Patternskills/security-scanner/SKILL.md

HighOversized Source Filedist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

65%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

AuthorECOSTACK TECHNOLOGY OÜ

Maintainersersinkoc

Version0.289.0

PublishedJul 7, 2026

LicenseMIT

Dependencies0

Integrityverified

Package size5.55 MB

Files601

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/index.d.tsexports map

RuntimeNo engine / OS / CPU constraints

Artifact22.5 MB · 601 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:prompts, clean, typecheck

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

3 flagged

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2192999 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

skills/security-scanner/SKILL.mdView file

Lines 28-68markdown

28### Do

29

30```typescript

31// ✅ SAFE — parameterized query

32db.query("SELECT * FROM users WHERE id = $1", [userId]);

33

34// ✅ SAFE — escape user input

35element.textContent = userInput;

36

37// ✅ SAFE — execFile with args array

38execFile('find', ['.', '-name', userInput], { signal: AbortSignal.timeout(5000) });

39```

40

41### Don't

42

43```typescript

44// ❌ CRITICAL — hardcoded AWS credentials

45const awsKey = "[REDACTED:aws_access_key]";

46

47// ❌ CRITICAL — private key committed

48const pem = "-----BEGIN RSA PRIVATE KEY-----\nMIIE...";

Critical

Secret Pattern

RSA private key in skills/security-scanner/SKILL.md

skills/security-scanner/SKILL.mdView on unpkg · L48

49

50// ❌ HIGH — XSS via innerHTML

51element.innerHTML = userInput;

52

53// ❌ HIGH — shell injection

54exec(`find . -name ${userInput}`);

55

56// ❌ HIGH — SQL injection

57const query = "SELECT * FROM users WHERE id = " + userId;

58```

59

60## Workflow

61

62```

631. Scope: Accept paths or use sensible defaults

642. Secrets: Regex scan for credential patterns

653. Injection: Pattern match dangerous constructs

664. Config: Check TLS, crypto, auth configurations

675. Audit: Run package audit

686. Report: Prioritized markdown with remediation

Lines 81-121markdown

81

82```

83| Pattern | Example | Level |

84|---------|---------|-------|

85| GitHub token | `ghp_[a-zA-Z0-9]{36}` | CRITICAL |

86| AWS Access Key | `[A-Z0-9]{20}` | CRITICAL |

87| AWS Secret | base64 40-char | CRITICAL |

88| Private Key PEM | `-----BEGIN.*PRIVATE KEY-----` | CRITICAL |

89| JWT | `eyJ[a-zA-Z0-9_-]+` | HIGH |

90| Generic API Key | 32+ random chars | MEDIUM |

91| Bearer token | `Authorization: Bearer xxx` | HIGH |

92```

93

94## Real examples

95

96```typescript

97// ❌ CRITICAL — hardcoded AWS credentials

98const awsKey = "[REDACTED:aws_access_key]";

99

100// ❌ CRITICAL — private key committed

101const pem = "-----BEGIN RSA PRIVATE KEY-----\nMIIE...";

Critical

Secret Pattern

RSA private key in skills/security-scanner/SKILL.md

skills/security-scanner/SKILL.mdView on unpkg · L101

102

103// ❌ HIGH — JWT in code

104const token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...";

105

106// ❌ HIGH — XSS via innerHTML

107element.innerHTML = userInput;

108

109// ❌ HIGH — shell injection

110exec(`find . -name ${userInput}`);

111

112// ❌ HIGH — SQL injection

113const query = "SELECT * FROM users WHERE id = " + userId;

114

115// ✅ SAFE — parameterized query

116db.query("SELECT * FROM users WHERE id = $1", [userId]);

117

118// ✅ SAFE — escape user input

119element.textContent = userInput;

120```

121