Loading npm security reports…

@xyne/xyne-cli@0.4.9: Suspicious npm security report (Warn) | LPM Firewall

registry / @xyne/xyne-cli / 0.4.9

@xyne/xyne-cli@0.4.9

Xyne CLI - A powerful AI assistant in your terminal with file operations, bash mode, drag-and-drop support, and multi-provider AI integration

AI Security Review

scanned 15d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall, and createEmbeddedPiRuntime when the CLI agent starts.

Impact

A prior pi-goal-pro extension under the Xyne agent directory is removed without a separate confirmation prompt. The change stays inside this product's agent config.

Mechanism

postinstall may exec bun add --ignore-scripts for @opentui. Runtime startup filters pi-goal-pro out of settings and rmSync-removes its extension and managed install directories.

AI rationale

The install hook only adds a pinned optional native dependency, and the agent startup path only uninstalls the package's own superseded pi-goal-pro extension. That is an unprompted agent-config mutation, but it is first-party and not a foreign control-surface hijack.

Evidence

package.jsonscripts/postinstall.jsdist-lib/src/agent/runtime/embedded-pi-runtime.jsdist-lib/src/agent/tools/goal/pi-goal-pro-cleanup.jssettings.jsonextensions/pi-goal-pronode_modules/pi-goal-pro

Decision evidence

Source & flagged code

18 flagged

package.jsonView file

Lines 82-168json

82 "default": "./dist-lib/src/agent/runtime/types.js"

83 },

84 "./local-server": {

85 "types": "./dist-lib/src/utils/local-server.d.ts",

86 "import": "./dist-lib/src/utils/local-server.js",

87 "default": "./dist-lib/src/utils/local-server.js"

88 }

89 },

90 "bin": {

91 "xyne": "dist/index.js"

92 },

93 "files": [

94 "dist/**/*",

95 "dist-lib/**/*",

96 "scripts/postinstall.js",

97 "scripts/patch-pi-auth-guidance.js",

98 "scripts/patch-pi-retry-classifier.js",

99 "scripts/patch-pi-command-dispatch.js",

100 "scripts/patch-opentui-render-loop.js"

101 ],

102 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L102

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L102

103 "build:installer": "node scripts/build-installer.js",

104 "build:lib": "bunx tsc -p tsconfig.lib.json",

105 "changelog": "node scripts/generate-changelog.js",

106 "dev": "bun run src/index.ts",

107 "build": "bun run build:npm",

108 "build:npm": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:lib && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:npm-dist && bun run build:launcher",

109 "build:binaries": "bun run changelog && bun run build:clean && bun run build:protocol && bun run build:compile && bun run build:webpack-bundle && bun run build:binary:release && bun run build:launcher",

110 "build:clean": "rm -rf dist dist-lib binaries temp-build packages/protocol/dist",

111 "build:protocol": "npm --prefix packages/protocol run build",

112 "build:compile": "bunx tsc --outDir temp-build --declaration false --sourceMap false",

113 "build:webpack-bundle": "node scripts/webpack-bundle.js",

114 "build:obfuscate": "node scripts/obfuscate-code.js",

115 "build:npm-dist": "mkdir -p dist && cp -r temp-build/* dist/ && mkdir -p dist/src/agent/themes && cp -r src/agent/themes/* dist/src/agent/themes/ && node scripts/copy-patched-packages.js && rm -rf temp-build",

116 "build:all": "bun run build:npm",

117 "build:binary:prepare": "node scripts/ensure-build-optional-deps.js && node scripts/patch-worker-inline.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patch-opentui-render-loop.js",

118 "build:binary:release": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows && node scripts/copy-binaries-to-packages.js",

119 "build:binary:all": "bun run build:binary:prepare && mkdir -p binaries && bun run build:binary:linux-x64 && bun run build:binary:linux-arm && bun run build:binary:macos-intel && bun run build:binary:macos-arm && bun run build:binary:windows",

120 "build:binary:linux-x64": "bun build --compile --target=bun-linux-x64-baseline --outfile binaries/xyne-linux-x64 ./temp-build/src/index.js",

121 "build:binary:linux-arm": "bun build --compile --target=bun-linux-aarch64 --outfile binaries/xyne-linux-arm64 ./temp-build/src/index.js",

122 "build:binary:macos-intel": "bun build --compile --target=bun-darwin-x64-baseline --outfile binaries/xyne-macos-intel ./temp-build/src/index.js",

128 "test": "echo 'Tests skipped for CLI build'",

129 "test:harness": "bun test scripts/eval-runner-support.test.ts scripts/eval-session-trace.test.ts src/agent/bridge.interaction.test.ts src/agent/prompts/generated.test.ts src/agent/runtime/prompt-composition.test.ts src/agent/runtime/tool-heartbeat.test.ts src/agent/runtime/testing/llm-request-capture.test.ts src/agent/runtime/llm-request-composition.test.ts src/agent/runtime/interaction-trace.test.ts src/agent/tools/review-prompt/index.test.ts src/agent/tools/session-name.test.ts src/agent/tools/tool-error-recovery.test.ts src/core/cli/get-turn-error.test.ts src/core/cli/llm-request-wire.i ...

130 "test:lifecycle:protocol": "npm --prefix packages/protocol test -- interaction-state.test.ts",

131 "test:lifecycle:agent": "bun test src/agent/permissions/permissions.isolation.test.ts",

132 "test:tool-contracts": "bun test src/agent/tools/sessions.test.ts src/agent/tools/skill/first-turn.test.ts src/agent/tools/phase4-contracts.test.ts src/agent/tools/terminal/lifecycle.test.ts src/agent/tools/lsp-shutdown.test.ts src/agent/tools/mcp/progressive-discovery.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/vespa-memory/contracts.test.ts src/agent/tools/spaces/contracts.test.ts",

133 "test:privacy": "bun test src/agent/privacy.test.ts src/agent/tools/notify.test.ts src/agent/tools/truncation/truncation.test.ts src/agent/tools/mcp/effects.test.ts src/agent/tools/spaces/effects.test.ts src/agent/tools/session-summary.test.ts src/agent/tools/vespa-memory/capture.test.ts",

134 "prompts:generate": "node scripts/gen-agent-prompts.cjs",

135 "prompts:check": "node scripts/gen-agent-prompts.cjs --check",

136 "subagents:generate": "node scripts/gen-subagent-builtins.cjs",

137 "subagents:check": "node scripts/gen-subagent-builtins.cjs --check",

138 "swift:generate": "node scripts/gen-pet-overlay-swift.cjs",

139 "swift:check": "node scripts/gen-pet-overlay-swift.cjs --check",

140 "generated:check": "bun run prompts:check && bun run subagents:check && bun run docs:check && bun run swift:check",

141 "eval:harness": "bun scripts/eval-llm-communication.ts",

142 "lint": "bunx eslint src --ext .ts,.tsx",

143 "format": "bunx prettier --write \"src/**/*.{ts,tsx,json,md}\"",

144 "update-doc": "bun src/agent/tools/info/update-docs/index.ts",

145 "docs:check": "bun src/agent/tools/info/update-docs/check-docs-current.ts",

146 "docs:check:staged": "bun src/agent/tools/info/update-docs/check-docs-current.ts --staged",

147 "prepare": "node scripts/install-git-hooks.js",

148 "postinstall": "node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patch-opentui-render-loop.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L148

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L148

149 "setup-hooks": "node scripts/install-git-hooks.js",

150 "setup": "bun scripts/setup.js",

151 "cli:setup": "bun run build && npm install -g .",

152 "cli:remove": "npm uninstall -g @xyne/xyne-cli",

153 "cli:update": "bun run build && npm uninstall -g @xyne/xyne-cli && npm install -g .",

154 "prepublishOnly": "bun run build:npm",

155 "release": "bun run build:npm && npm publish --access public",

156 "release:all": "bun run build:npm && node scripts/publish-all.js"

157 },

158 "dependencies": {

159 "@clack/prompts": "1.7.0",

160 "@earendil-works/pi-agent-core": "0.84.1",

161 "@earendil-works/pi-ai": "0.84.1",

162 "@earendil-works/pi-coding-agent": "0.84.1",

163 "@earendil-works/pi-tui": "0.84.1",

164 "@modelcontextprotocol/sdk": "1.30.0",

165 "@opentui/core": "0.1.93",

166 "@sinclair/typebox": "0.34.52",

167 "@xterm/headless": "6.0.0",

168 "ajv": "8.20.0",

Long lines were clipped for display.

dist-lib/src/pets/hosts/macos/index.jsView file

Lines 1-21javascript

1import { spawn, spawnSync } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

3import { randomUUID } from "node:crypto";

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

Lines 1-41javascript

1var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {

2 if (typeof path === "string"

node_modules/jimp/dist/browser/index.jsView file

1var commonjsGlobal="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function getDefaul... L2: /*! ... L10: /*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */ L11: var r=e("buffer"),n=r.Buffer;function a(e,t){for(var i in e)t[i]=e[i]}function o(e,t,i){return n(e,t,i)}n.from&&n.alloc&&n.allocUnsafe&&n.allocUnsafeSlow?t.exports=r:(a(r,i),i.Buff... L12: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */ L13: read:function(e,t,i,r,n){var a,o,s=8*n-r-1,l=(1<<s)-1,u=l>>1,h=-7,c=i?n-1:0,f=i?-1:1,d=e[t+c];for(c+=f,a=d&(1<<-h)-1,d>>=-h,h+=s;h>0;a=256*a+e[t+c],c+=f,h-=8);for(o=a&(1<<-h)-1,a>>... L14: /**

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/jimp/dist/browser/index.jsView on unpkg · L1

scripts/postinstall.jsView file

Lines 20-50javascript

20}

22const platform = process.platform;

23const nodeArch = process.arch;

24const bunArch = getBunArch();

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView file

•path = node_modules/@opentui/core-darwin-arm64/libopentui.dylib kind = native_binary sizeBytes = 860192 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView on unpkg

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/exif-parser/MakefileView file

•path = node_modules/exif-parser/Makefile kind = build_helper sizeBytes = 541 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/exif-parser/MakefileView on unpkg

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 12774254 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 12774254 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 82

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist/index.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist-lib/src/utils/local-server.jsView file

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = dist-lib/src/utils/local-server.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/utils/local-server.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xyne/xyne-cli@0.4.8 matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.8 similarity = 0.925 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg

Source & flagged code

18 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-x64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js && node scripts/patch-pi-auth-guidance.js && node scripts/patch-pi-retry-classifier.js && node scripts/patch-pi-command-dispatch.js && node scripts/patc...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

dist-lib/src/pets/hosts/macos/index.jsView file

1import { spawn, spawnSync } from "node:child_process"; L2: import { existsSync, mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist-lib/src/pets/hosts/macos/index.jsView on unpkg · L1

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView file

21const nestedPiAiCompat = join(dirname(dirname(codingAgentEntry)), "node_modules", "@earendil-works", "pi-ai", "dist", "compat.js"); L22: const piAiCompat = (await import(__rewriteRelativeImportExtension(existsSync(nestedPiAiCompat) L23: ? pathToFileURL(nestedPiAiCompat).href

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-lib/src/agent/runtime/testing/llm-request-capture.jsView on unpkg · L21

node_modules/jimp/dist/browser/index.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/jimp/dist/browser/index.jsView on unpkg · L1

scripts/postinstall.jsView file

40try { L41: execSync(`bun add --ignore-scripts --no-save ${bunVariant}@0.1.93`, { L42: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L40

•matchType = normalized_sha256 matchedPackage = @xyne/xyne-cli@0.4.1 matchedPath = scripts/postinstall.js matchedIdentity = npm:QHh5bmUveHluZS1jbGk:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView file

•path = node_modules/@opentui/core-darwin-arm64/libopentui.dylib kind = native_binary sizeBytes = 860192 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@opentui/core-darwin-arm64/libopentui.dylibView on unpkg

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView file

•path = node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasm kind = wasm_module sizeBytes = 691726 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

node_modules/@opentui/core/assets/zig/tree-sitter-zig.wasmView on unpkg

node_modules/exif-parser/MakefileView file

•path = node_modules/exif-parser/Makefile kind = build_helper sizeBytes = 541 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/exif-parser/MakefileView on unpkg

dist/src/index.jsView file

•path = dist/src/index.js kind = oversized_source_file sizeBytes = 12774254 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/src/index.jsView on unpkg

•path = dist/src/index.js kind = oversized_cli_entrypoint sizeBytes = 12774254 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/src/index.jsView on unpkg

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 82

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-lib/src/agent/tools/goal/extension.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist-lib/src/utils/local-server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-lib/src/utils/local-server.jsView on unpkg

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-lib/src/agent/runtime/embedded-pi-runtime.jsView on unpkg