@xyne/xyne-cli@0.4.5: Suspicious npm security report (Warn)

Loading npm security reports…

@xyne/xyne-cli@0.4.5: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

22 flagged

package.jsonView file

Lines 72-158json

72 "default": "./dist-lib/src/agent/runtime/types.js"

73 },

74 "./local-server": {

75 "types": "./dist-lib/src/utils/local-server.d.ts",

76 "import": "./dist-lib/src/utils/local-server.js",

77 "default": "./dist-lib/src/utils/local-server.js"

78 }

79 },

80 "bin": {

81 "xyne": "dist/index.js"

82 },

83 "files": [

84 "dist/**/*",

85 "dist-lib/**/*",

86 "scripts/postinstall.js",

87 "scripts/patch-pi-auth-guidance.js",

88 "scripts/patch-pi-retry-classifier.js",

89 "scripts/patch-pi-command-dispatch.js",

90 "scripts/patch-opentui-render-loop.js"

91 ],

92 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L92

93 "build:installer": "node scripts/build-installer.js",

94 "build:lib": "bunx tsc -p tsconfig.lib.json",

95 "changelog": "node scripts/generate-changelog.js",

96 "dev": "bun run src/index.ts",

97 "build": "bun run build:npm",

98 "build:npm": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:lib && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:npm-dist && bun run build:launcher",

99 "build:binaries": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:launcher",

100 "build:clean": "rm -rf dist dist-lib binaries temp-build packages/protocol/dist",

101 "build:protocol": "npm --prefix packages/protocol run build",

102 "build:compile": "bunx tsc --outDir temp-build --declaration false --sourceMap false",

103 "build:webpack-bundle": "node scripts/webpack-bundle.js",

104 "build:obfuscate": "node scripts/obfuscate-code.js",

105 "build:npm-dist": "mkdir -p dist && cp -r temp-build/* dist/ && mkdir -p dist/src/agent/themes && cp -r src/agent/themes/* dist/src/agent/themes/ && node scripts/copy-patched-packages.js && rm -rf temp-build",

106 "build:all": "bun run build:npm",

107 "build:binary:prepare": "node scripts/ensure-build-optional-deps.js && node scripts/patch-worker-inline.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patch-opentui-render-loop.js",

108 "build:binary:release": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows && node scripts/copy-binaries-to-packages.js",

109 "build:binary:all": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows",

110 "build:binary:linux-x64": "bun build --compile --target=bun-linux-x64-baseline --outfile binaries/xyne-linux-x64 ./temp-build/src/index.js",

111 "build:binary:linux-arm": "bun build --compile --target=bun-linux-aarch64 --outfile binaries/xyne-linux-arm64 ./temp-build/src/index.js",

112 "build:binary:macos-intel": "bun build --compile --target=bun-darwin-x64-baseline --outfile binaries/xyne-macos-intel ./temp-build/src/index.js",

118 "test": "echo 'Tests skipped for CLI build'",

119 "test:harness": "bun test scripts/eval-runner-support.test.ts scripts/eval-session-trace.test.ts src/agent/bridge.interaction.test.ts src/agent/prompts/generated.test.ts src/agent/runtime/prompt-composition.test.ts src/agent/runtime/tool-heartbeat.test.ts src/agent/runtime/testing/llm-request-capture.test.ts src/agent/runtime/llm-request-composition.test.ts src/agent/runtime/interaction-trace.test.ts src/agent/tools/review-prompt/index.test.ts src/agent/tools/session-name.test.ts src/agent/tools/tool-error-recovery.test.ts src/core/cli/get-turn-error.test.ts src/core/cli/llm-request-wire.i ...

120 "test:lifecycle:protocol": "npm --prefix packages/protocol test -- interaction-state.test.ts",

121 "test:lifecycle:agent": "bun test src/agent/permissions/permissions.isolation.test.ts",

122 "test:tool-contracts": "bun test src/agent/tools/sessions.test.ts src/agent/tools/skill/first-turn.test.ts src/agent/tools/phase4-contracts.test.ts src/agent/tools/terminal/lifecycle.test.ts src/agent/tools/lsp-shutdown.test.ts src/agent/tools/mcp/progressive-discovery.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/vespa-memory/contracts.test.ts src/agent/tools/spaces/contracts.test.ts",

123 "test:privacy": "bun test src/agent/privacy.test.ts src/agent/tools/notify.test.ts src/agent/tools/truncation/truncation.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/spaces/effects.test.ts src/agent/tools/session-summary.test.ts src/agent/tools/vespa-memory/capture.test.ts",

124 "prompts:generate": "node scripts/gen-agent-prompts.cjs",

125 "prompts:check": "node scripts/gen-agent-prompts.cjs --check",

126 "subagents:generate": "node scripts/gen-subagent-builtins.cjs",

127 "subagents:check": "node scripts/gen-subagent-builtins.cjs --check",

128 "swift:generate": "node scripts/gen-pet-overlay-swift.cjs",

129 "swift:check": "node scripts/gen-pet-overlay-swift.cjs --check",

130 "generated:check": "bun run prompts:check && bun run subagents:check && bun run docs:check && bun run swift:check",

131 "eval:harness": "bun scripts/eval-llm-communication.ts",

132 "lint": "bunx eslint src --ext .ts,.tsx",

133 "format": "bunx prettier --write \"src/**/*.{ts,tsx,json,md}\"",

134 "update-doc": "bun src/agent/tools/info/update-docs/index.ts",

135 "docs:check": "bun src/agent/tools/info/update-docs/check-docs-current.ts",

136 "docs:check:staged": "bun src/agent/tools/info/update-docs/check-docs-current.ts --staged",

137 "prepare": "node scripts/install-git-hooks.js",

138 "postinstall": "node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patch-opentui-render-loop.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L138

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L138

139 "setup-hooks": "node scripts/install-git-hooks.js",

140 "setup": "bun scripts/setup.js",

141 "cli:setup": "bun run build && npm install -g .",

142 "cli:remove": "npm uninstall -g @xyne/xyne-cli",

143 "cli:update": "bun run build && npm uninstall -g @xyne/xyne-cli && npm install -g .",

144 "prepublishOnly": "bun run build:npm",

145 "release": "bun run build:npm && npm publish --access public",

146 "release:all": "bun run build:npm && node scripts/publish-all.js"

147 },

148 "dependencies": {

149 "@clack/prompts": "1.7.0",

150 "@earendil-works/pi-agent-core": "0.84.1",

151 "@earendil-works/pi-ai": "0.84.1",

152 "@earendil-works/pi-coding-agent": "0.84.1",

153 "@earendil-works/pi-tui": "0.84.1",

154 "@modelcontextprotocol/sdk": "1.30.0",

155 "@opentui/core": "0.1.93",

156 "@sinclair/typebox": "0.34.52",

157 "@xterm/headless": "6.0.0",

158 "ajv": "8.20.0",

Long lines were clipped for display.

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-x64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

dist-lib/src/pets/hosts/macos/index.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

3import { randomUUID } from "node:crypto";

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

Lines 1-41javascript

1var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {

2 if (typeof path === "string"

node_modules/.bun/readable-stream@4.7.0/node_modules/process/test.jsView file

Lines 1-21javascript

1var assert = require('assert');

2var ourProcess = require('./browser');

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

node_modules/.bun/readable-stream@4.7.0/node_modules/process/test.jsView on unpkg · L1

3describe

node_modules/.bun/@opentui+core@0.1.93+a9dd4c36f322f42c/node_modules/jimp/dist/browser/index.jsView file

1var commonjsGlobal="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function getDefaul... L2: /*! ... L10: /*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */ L11: var r=e("buffer"),n=r.Buffer;function a(e,t){for(var i in e)t[i]=e[i]}function o(e,t,i){return n(e,t,i)}n.from&&n.alloc&&n.allocUnsafe&&n.allocUnsafeSlow?t.exports=r:(a(r,i),i.Buff... L12: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */ L13: read:function(e,t,i,r,n){var a,o,s=8*n-r-1,l=(1<<s)-1,u=l>>1,h=-7,c=i?n-1:0,f=i?-1:1,d=e[t+c];for(c+=f,a=d&(1<<-h)-1,d>>=-h,h+=s;h>0;a=256*a+e[t+c],c+=f,h-=8);for(o=a&(1<<-h)-1,a>>... L14: /**

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/.bun/@opentui+core@0.1.93+a9dd4c36f322f42c/node_modules/jimp/dist/browser/index.jsView on unpkg · L1

scripts/postinstall.jsView file

Lines 20-50javascript

20}

22const platform = process.platform;

23const nodeArch = process.arch;

24const bunArch = getBunArch();

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView file

•path = node_modules/@opentui/core-darwin-arm64/libopentui.dylib kind = native_binary sizeBytes = 860192 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView on unpkg

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/MakefileView file

•path = node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/Makefile kind = payload_in_excluded_dir sizeBytes = 541 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/MakefileView on unpkg

•path = node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/Makefile kind = build_helper sizeBytes = 541 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/MakefileView on unpkg

node_modules/@opentui/core/index-4kfx7p6q.jsView file

•path = node_modules/@opentui/core/index-4kfx7p6q.js kind = trigger_reachable_excluded_payload sizeBytes = 805756 triggerReachableSource = node_modules/@opentui/core/index-4kfx7p6q.js excludedPayload = node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/Makefile

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

node_modules/@opentui/core/index-4kfx7p6q.jsView on unpkg

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 12358162 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 12358162 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 95

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist/index.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist-lib/src/agent/tools/mcp/auth.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist-lib/src/agent/tools/mcp/auth.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/agent/tools/mcp/auth.jsView on unpkg

dist-lib/src/utils/local-server.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist-lib/src/utils/local-server.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/utils/local-server.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xyne/xyne-cli@0.4.2 matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.2 similarity = 0.392 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg

Source & flagged code

22 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-x64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patc...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

dist-lib/src/pets/hosts/macos/index.jsView file

1import { spawn, spawnSync } from "node:child_process"; L2: import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

21const nestedPiAiCompat = join(dirname(dirname(codingAgentEntry)), "node_modules", "@earendil-works", "pi-ai", "dist", "compat.js"); L22: const piAiCompat = (await import(__rewriteRelativeImportExtension(existsSync(nestedPiAiCompat) L23: ? pathToFileURL(nestedPiAiCompat).href

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView on unpkg · L21

node_modules/.bun/readable-stream@4.7.0/node_modules/process/test.jsView file

1var assert = require('assert'); L2: var ourProcess = require('./browser');

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

node_modules/.bun/readable-stream@4.7.0/node_modules/process/test.jsView on unpkg · L1

node_modules/.bun/@opentui+core@0.1.93+a9dd4c36f322f42c/node_modules/jimp/dist/browser/index.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/.bun/@opentui+core@0.1.93+a9dd4c36f322f42c/node_modules/jimp/dist/browser/index.jsView on unpkg · L1

scripts/postinstall.jsView file

40try { L41: execSync(`bun add --ignore-scripts --no-save ${bunVariant}@0.1.93`, { L42: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L40

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = scripts/postinstall.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView file

•path = node_modules/@opentui/core-darwin-arm64/libopentui.dylib kind = native_binary sizeBytes = 860192 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView on unpkg

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/MakefileView file

•path = node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/Makefile kind = payload_in_excluded_dir sizeBytes = 541 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/MakefileView on unpkg

•path = node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/Makefile kind = build_helper sizeBytes = 541 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/.bun/@jimp+core@1.6.0/node_modules/exif-parser/MakefileView on unpkg

node_modules/@opentui/core/index-4kfx7p6q.jsView file

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

node_modules/@opentui/core/index-4kfx7p6q.jsView on unpkg

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 12358162 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 12358162 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 95

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist-lib/src/agent/tools/mcp/auth.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/agent/tools/mcp/auth.jsView on unpkg

dist-lib/src/utils/local-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/utils/local-server.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg