Loading npm security reports…

@yeaft/webchat-agent@1.0.419: Clean npm security report (Allow) | LPM Firewall

registry / @yeaft/webchat-agent / 1.0.419

@yeaft/webchat-agent@1.0.419

Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 23 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 386 file(s), 8.79 MB of source, external domains: 127.0.0.1, 169.254.169.254, accounts.google.com, aka.ms, api.anthropic.com, api.deepseek.com, api.github.com, api.githubcopilot.com, api.openai.com, api.tavily.com, api.weixin.qq.com, azuread.github.io, docs.microsoft.com, docs.oasis-open.org, duckduckgo.com, en.wikipedia.org, engelschall.com, generativelanguage.googleapis.com, github.com, html.duckduckgo.com, jquery.org, lodash.com, login.chinacloudapi.cn, login.microsoftonline.com, login.microsoftonline.de, login.microsoftonline.us, login.partner.microsoftonline.cn, login.windows-ppe.net, models.dev, nodejs.org, oauth2.googleapis.com, open.weixin.qq.com, openapi.alipay.com, openauth.alipay.com, openjsf.org, openoffice.org, opensource.org, pkg.yeaft.com, purl.oclc.org, purl.org, schemas.microsoft.com, schemas.openxmlformats.org, sheetjs.com, storage.googleapis.com, stuk.github.io, tavily.com, tldrlegal.com, tools.ietf.org, underscorejs.org, view.officeapps.live.com

Source & flagged code

14 flagged · loading source

windows-upgrade-runner.jsView file

1import { appendFileSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'; L2: import { spawn } from 'node:child_process'; L3: import { dirname } from 'node:path';

High

Child Process

Package source references child process execution.

windows-upgrade-runner.jsView on unpkg · L1

connection/upgrade.jsView file

38const isWin = platform() === 'win32'; L39: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH. L40: // This was the working pattern before ce58bbc. Absolute paths break when

High

Shell

Package source references shell execution.

connection/upgrade.jsView on unpkg · L38

1import { execFile, execFileSync, spawn } from 'child_process'; L2: import { writeFileSync, mkdirSync, existsSync } from 'fs'; ... L30: export function resolveInstanceId() { L31: return ctx.CONFIG?.instanceId || process.env.YEAFT_AGENT_INSTANCE || DEFAULT_INSTANCE_ID; L32: } ... L38: const isWin = platform() === 'win32'; L39: // Windows: use bare 'npm'/'pm2' + shell:true — cmd.exe finds them via PATH. L40: // This was the working pattern before ce58bbc. Absolute paths break when ... L61: // Shared cleanup logic for restart/upgrade L62: function cleanupAndExit(exitCode) { L63: setTimeout(async () => { ... L399: const serviceName = getServiceName(instanceId);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

connection/upgrade.jsView on unpkg · L1

local-runtime/web/jszip.min.jsView file

12L13: !function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?...

Low

Eval

Package source references a known benign dynamic code generation pattern.

local-runtime/web/jszip.min.jsView on unpkg · L12

local-runtime/web/docx-preview.min.jsView file

1!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("jszip")):"function"==typeof define&&define.amd?define(["exports","jszip"],t):t((e="undefined"... L2: //# sourceMappingURL=docx-preview.min.js.map

Medium

Dynamic Require

Package source references dynamic require/import behavior.

local-runtime/web/docx-preview.min.jsView on unpkg · L1

yeaft/tools/js-repl.jsView file

1/** L2: * js-repl.js — JavaScript REPL for evaluating expressions.

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

yeaft/tools/js-repl.jsView on unpkg · L1

local-runtime/server/browser-runtime-routes.jsView file

23function scopeUsername({ ownerUserId, agentId, browserSessionId, peerId, connectionGeneration, endpointRole, expiresAt }) { L24: const scope = Buffer.from(JSON.stringify({ L25: ownerUserId,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

local-runtime/server/browser-runtime-routes.jsView on unpkg · L23

local-run.jsView file

1import { spawn } from 'child_process'; L2: import { existsSync } from 'fs'; L3: import { homedir } from 'os'; L4: import { createServer } from 'net'; L5: import { dirname, join } from 'path'; ... L12: L13: export function parseLocalArgs(args, env = process.env) { L14: const options = {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

local-run.jsView on unpkg · L1

service/macos.jsView file

3Trigger-reachable persistence chain: scripts.start -> index.js -> service.js -> service/index.js -> service/macos.js L3: */ L4: import { execSync } from 'child_process'; L5: import { existsSync, writeFileSync, unlinkSync, mkdirSync } from 'fs'; ... L11: export function getLaunchdPlistPath(instanceId = DEFAULT_INSTANCE_ID) { L12: return join(homedir(), 'Library', 'LaunchAgents', `${getLaunchdLabel(instanceId)}.plist`); L13: } ... L70: if (existsSync(plistPath)) { L71: try { execSync(`launchctl unload ${plistPath} 2>/dev/null`); } catch {} L72: } ... L116: * Query launchd for the current service status. L117: * Returns { running: boolean, pid: string|null, exitCode: string|null }. L118: */

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

service/macos.jsView on unpkg · L3

browser-runtime/windows-version-job.ps1View file

•path = browser-runtime/windows-version-job.ps1 kind = build_helper sizeBytes = 8589 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

browser-runtime/windows-version-job.ps1View on unpkg

local-runtime/web/xlsx.min.js.gzView file

•path = local-runtime/web/xlsx.min.js.gz kind = high_entropy_blob sizeBytes = 335014 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

local-runtime/web/xlsx.min.js.gzView on unpkg

•path = local-runtime/web/xlsx.min.js.gz kind = compressed_blob sizeBytes = 335014 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

local-runtime/web/xlsx.min.js.gzView on unpkg

local-runtime/web/mermaid.min.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

local-runtime/web/mermaid.min.jsView on unpkg

index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @yeaft/webchat-agent@1.0.417 matchedIdentity = npm:QHllYWZ0L3dlYmNoYXQtYWdlbnQ:1.0.417 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg