Loading npm security reports…

@xyne/xyne-cli@0.4.12: Suspicious npm security report (Warn) | LPM Firewall

registry / @xyne/xyne-cli / 0.4.12

@xyne/xyne-cli@0.4.12

Xyne CLI - A powerful AI assistant in your terminal with file operations, bash mode, drag-and-drop support, and multi-provider AI integration

AI Security Review

scanned 12d ago · by lpm-firewall-ai

No attack was identified. The published bin is a launcher that starts this package's platform binary when the user runs the CLI. The install script only adjusts a pinned native dependency inside the package.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

The user runs the xyne command, or npm install executes the package postinstall script.

Impact

Inspected entry points show ordinary CLI startup and local dependency setup, with no confirmed credential theft, remote payload, or foreign agent-control write.

Mechanism

The launcher spawns the resolved platform binary with the user's arguments. Postinstall may bun-add a pinned OpenTUI native package when the Bun and Node architectures differ.

AI rationale

The launcher and postinstall stay inside this CLI's own binary, local patches, and a pinned native optional dependency. Agent, pet, and localhost-daemon behavior is reached when the user runs those features, so no concrete install-time attack remains.

Decision evidence

public snapshot

AI called this Clean at 78.0% confidence as Benign with low false-positive risk.

Why the final policy warns

The AI recommended clean. Static policy retained a warning. The static scanner classified the package as malicious with confidence of at least 85%. A critical static finding has confidence of at least 90%. A high or critical static finding has no usable source path. These conditions do not mean that the AI confirmed malicious behavior.

Source & flagged code

18 flagged

package.jsonView file

Lines 82-168json

82 "default": "./dist-lib/src/agent/runtime/types.js"

83 },

84 "./local-server": {

85 "types": "./dist-lib/src/utils/local-server.d.ts",

86 "import": "./dist-lib/src/utils/local-server.js",

87 "default": "./dist-lib/src/utils/local-server.js"

88 }

89 },

90 "bin": {

91 "xyne": "dist/index.js"

92 },

93 "files": [

94 "dist/**/*",

95 "dist-lib/**/*",

96 "scripts/postinstall.js",

97 "scripts/patch-pi-auth-guidance.js",

98 "scripts/patch-pi-retry-classifier.js",

99 "scripts/patch-pi-command-dispatch.js",

100 "scripts/patch-opentui-render-loop.js"

101 ],

102 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L102

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L102

103 "build:installer": "node scripts/build-installer.js",

104 "build:lib": "bunx tsc -p tsconfig.lib.json",

105 "changelog": "node scripts/generate-changelog.js",

106 "dev": "bun run src/index.ts",

107 "build": "bun run build:npm",

108 "build:npm": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:lib && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:npm-dist && bun run build:launcher",

109 "build:binaries": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:launcher",

110 "build:clean": "rm -rf dist dist-lib binaries temp-build packages/protocol/dist",

111 "build:protocol": "npm --prefix packages/protocol run build",

112 "build:compile": "bunx tsc --outDir temp-build --declaration false --sourceMap false",

113 "build:webpack-bundle": "node scripts/webpack-bundle.js",

114 "build:obfuscate": "node scripts/obfuscate-code.js",

115 "build:npm-dist": "mkdir -p dist && cp -r temp-build/* dist/ && mkdir -p dist/src/agent/themes && cp -r src/agent/themes/* dist/src/agent/themes/ && node scripts/copy-patched-packages.js && rm -rf temp-build",

116 "build:all": "bun run build:npm",

117 "build:binary:prepare": "node scripts/ensure-build-optional-deps.js && node scripts/patch-worker-inline.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patch-opentui-render-loop.js",

118 "build:binary:release": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows && node scripts/copy-binaries-to-packages.js",

119 "build:binary:all": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows",

120 "build:binary:linux-x64": "bun build --compile --target=bun-linux-x64-baseline --outfile binaries/xyne-linux-x64 ./temp-build/src/index.js",

121 "build:binary:linux-arm": "bun build --compile --target=bun-linux-aarch64 --outfile binaries/xyne-linux-arm64 ./temp-build/src/index.js",

122 "build:binary:macos-intel": "bun build --compile --target=bun-darwin-x64-baseline --outfile binaries/xyne-macos-intel ./temp-build/src/index.js",

128 "test": "echo 'Tests skipped for CLI build'",

129 "test:harness": "bun test scripts/eval-runner-support.test.ts scripts/eval-session-trace.test.ts src/agent/bridge.interaction.test.ts src/agent/prompts/generated.test.ts src/agent/runtime/prompt-composition.test.ts src/agent/runtime/tool-heartbeat.test.ts src/agent/runtime/testing/llm-request-capture.test.ts src/agent/runtime/llm-request-composition.test.ts src/agent/runtime/interaction-trace.test.ts src/agent/tools/review-prompt/index.test.ts src/agent/tools/session-name.test.ts src/agent/tools/tool-error-recovery.test.ts src/core/cli/get-turn-error.test.ts src/core/cli/llm-request-wire.i ...

130 "test:lifecycle:protocol": "npm --prefix packages/protocol test -- interaction-state.test.ts",

131 "test:lifecycle:agent": "bun test src/agent/permissions/permissions.isolation.test.ts",

132 "test:tool-contracts": "bun test src/agent/tools/sessions.test.ts src/agent/tools/skill/first-turn.test.ts src/agent/tools/phase4-contracts.test.ts src/agent/tools/terminal/lifecycle.test.ts src/agent/tools/lsp-shutdown.test.ts src/agent/tools/mcp/progressive-discovery.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/vespa-memory/contracts.test.ts src/agent/tools/spaces/contracts.test.ts",

133 "test:privacy": "bun test src/agent/privacy.test.ts src/agent/tools/notify.test.ts src/agent/tools/truncation/truncation.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/spaces/effects.test.ts src/agent/tools/session-summary.test.ts src/agent/tools/vespa-memory/capture.test.ts",

134 "prompts:generate": "node scripts/gen-agent-prompts.cjs",

135 "prompts:check": "node scripts/gen-agent-prompts.cjs --check",

136 "subagents:generate": "node scripts/gen-subagent-builtins.cjs",

137 "subagents:check": "node scripts/gen-subagent-builtins.cjs --check",

138 "swift:generate": "node scripts/gen-pet-overlay-swift.cjs",

139 "swift:check": "node scripts/gen-pet-overlay-swift.cjs --check",

140 "generated:check": "bun run prompts:check && bun run subagents:check && bun run docs:check && bun run swift:check",

141 "eval:harness": "bun scripts/eval-llm-communication.ts",

142 "lint": "bunx eslint src --ext .ts,.tsx",

143 "format": "bunx prettier --write \"src/**/*.{ts,tsx,json,md}\"",

144 "update-doc": "bun src/agent/tools/info/update-docs/index.ts",

145 "docs:check": "bun src/agent/tools/info/update-docs/check-docs-current.ts",

146 "docs:check:staged": "bun src/agent/tools/info/update-docs/check-docs-current.ts --staged",

147 "prepare": "node scripts/install-git-hooks.js",

148 "postinstall": "node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patch-opentui-render-loop.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L148

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L148

149 "setup-hooks": "node scripts/install-git-hooks.js",

150 "setup": "bun scripts/setup.js",

151 "cli:setup": "bun run build && npm install -g .",

152 "cli:remove": "npm uninstall -g @xyne/xyne-cli",

153 "cli:update": "bun run build && npm uninstall -g @xyne/xyne-cli && npm install -g .",

154 "prepublishOnly": "bun run build:npm",

155 "release": "bun run build:npm && npm publish --access public",

156 "release:all": "bun run build:npm && node scripts/publish-all.js"

157 },

158 "dependencies": {

159 "@clack/prompts": "1.7.0",

160 "@earendil-works/pi-agent-core": "0.84.1",

161 "@earendil-works/pi-ai": "0.84.1",

162 "@earendil-works/pi-coding-agent": "0.84.1",

163 "@earendil-works/pi-tui": "0.84.1",

164 "@modelcontextprotocol/sdk": "1.30.0",

165 "@opentui/core": "0.1.93",

166 "@sinclair/typebox": "0.34.52",

167 "@xterm/headless": "6.0.0",

168 "ajv": "8.20.0",

Long lines were clipped for display.

dist-lib/src/pets/hosts/macos/index.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

3import { randomUUID } from "node:crypto";

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

Lines 1-41javascript

1var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {

2 if (typeof path === "string"

node_modules/jimp/dist/browser/index.jsView file

1var commonjsGlobal="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function getDefaul... L2: /*! ... L10: /*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */ L11: var r=e("buffer"),n=r.Buffer;function a(e,t){for(var i in e)t[i]=e[i]}function o(e,t,i){return n(e,t,i)}n.from&&n.alloc&&n.allocUnsafe&&n.allocUnsafeSlow?t.exports=r:(a(r,i),i.Buff... L12: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */ L13: read:function(e,t,i,r,n){var a,o,s=8*n-r-1,l=(1<<s)-1,u=l>>1,h=-7,c=i?n-1:0,f=i?-1:1,d=e[t+c];for(c+=f,a=d&(1<<-h)-1,d>>=-h,h+=s;h>0;a=256*a+e[t+c],c+=f,h-=8);for(o=a&(1<<-h)-1,a>>... L14: /**

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/jimp/dist/browser/index.jsView on unpkg · L1

scripts/postinstall.jsView file

Lines 20-50javascript

20}

22const platform = process.platform;

23const nodeArch = process.arch;

24const bunArch = getBunArch();

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView file

•path = node_modules/@opentui/core-darwin-arm64/libopentui.dylib kind = native_binary sizeBytes = 860192 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView on unpkg

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/exif-parser/MakefileView file

•path = node_modules/exif-parser/Makefile kind = build_helper sizeBytes = 541 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/exif-parser/MakefileView on unpkg

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 12857660 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 12857660 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 82

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist/index.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist-lib/src/utils/local-server.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist-lib/src/utils/local-server.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/utils/local-server.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xyne/xyne-cli@0.4.9 matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.9 similarity = 0.858 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg

Source & flagged code

18 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-x64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patc...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

dist-lib/src/pets/hosts/macos/index.jsView file

1import { spawn, spawnSync } from "node:child_process"; L2: import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

21const nestedPiAiCompat = join(dirname(dirname(codingAgentEntry)), "node_modules", "@earendil-works", "pi-ai", "dist", "compat.js"); L22: const piAiCompat = (await import(__rewriteRelativeImportExtension(existsSync(nestedPiAiCompat) L23: ? pathToFileURL(nestedPiAiCompat).href

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView on unpkg · L21

node_modules/jimp/dist/browser/index.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/jimp/dist/browser/index.jsView on unpkg · L1

scripts/postinstall.jsView file

40try { L41: execSync(`bun add --ignore-scripts --no-save ${bunVariant}@0.1.93`, { L42: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L40

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = scripts/postinstall.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView file

•path = node_modules/@opentui/core-darwin-arm64/libopentui.dylib kind = native_binary sizeBytes = 860192 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView on unpkg

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/exif-parser/MakefileView file

•path = node_modules/exif-parser/Makefile kind = build_helper sizeBytes = 541 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/exif-parser/MakefileView on unpkg

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 12857660 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 12857660 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 82

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist-lib/src/utils/local-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/utils/local-server.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg