Loading npm security reports…

@xsquads/zap: Suspicious npm security report (Warn) | LPM Firewall

registry / @xsquads/zap / 2.1.0

@xsquads/zap@2.1.0

Run Claude Code against open-source models, metered by credits.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 13 file(s), 38.4 KB of source, external domains: 127.0.0.1, headroom-docs.vercel.app, registry.npmjs.org, zap.xsquads.ai

Source & flagged code

2 flagged

dist/headroom.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import * as net from "node:net";

3/**

4 * Optional headroom integration: when the `headroom` binary (from the Python

5 * package `headroom-ai[proxy]`) is on PATH, `zap claude` / `zap codex` route

6 * the tool through a local headroom proxy that compresses prompts and tool

7 * outputs before they reach the zap worker: tool → headroom (127.0.0.1) →

8 * worker. headroom forwards the client's auth headers upstream, so the session

9 * token flows unchanged. headroom is never bundled or auto-installed; when it

10 * is absent (or ZAP_HEADROOM disables it) the tool connects directly.

11 */

12/** True if `bin` was found on PATH and executed (even with a nonzero status). */

13export function hasBinary(bin) {

14 const r = spawnSync(bin, ["--version"], {

15 stdio: "ignore",

16 timeout: 10_000,

17 shell: process.platform === "win32",

18 });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/headroom.jsView on unpkg · L1

19 return r.error === undefined;

20}

21/** False only when ZAP_HEADROOM is set to 0/false/off/no (any case). */

dist/update.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xsquads/zap@2.0.0 matchedIdentity = npm:QHhzcXVhZHMvemFw:2.0.0 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/update.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/headroom.jsView file

1import { spawn, spawnSync } from "node:child_process"; L2: import * as net from "node:net"; L3: /** ... L16: timeout: 10_000, L17: shell: process.platform === "win32", L18: }); ... L44: } L45: /** One-line stderr tip shown when headroom is not installed. */ L46: export function headroomInstallHint() {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/headroom.jsView on unpkg · L1

dist/update.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/update.jsView on unpkg

Findings

2 High3 Medium6 Low

HighSandbox Evasion Gated Capabilitydist/headroom.js

HighPrevious Version Dangerous Deltadist/update.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License