@zenalexa/unicli: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@zenalexa/unicli: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

dist/adapters/youtube/innertube.jsView file

8patternName = google_api_key severity = high line = 8 matchedText = const IN...W8";

High

High Secret

Package contains a high-severity secret pattern.

dist/adapters/youtube/innertube.jsView on unpkg · L8

8patternName = google_api_key severity = high line = 8 matchedText = const IN...W8";

High

Secret Pattern

Google API key in dist/adapters/youtube/innertube.js

dist/adapters/youtube/innertube.jsView on unpkg · L8

dist/transport/process-owner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @zenalexa/unicli@0.227.1 matchedIdentity = npm:QHplbmFsZXhhL3VuaWNsaQ:0.227.1 similarity = 0.717 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/transport/process-owner.jsView on unpkg

3* @does Spawn commands inside a verifiable POSIX process group or Windows kill-on-close Job Object and terminate that saved ownership identity independently of leader livene... L4: * @needs node child_process/fs/module/os/path/url, release-bundled or optional unicli-process-owner Windows binary L5: * @feeds contained commands, native sidecars, browser broker launch, managed Chromium, and explicit CDP application launch

High

Child Process

Package source references child process execution.

dist/transport/process-owner.jsView on unpkg · L3

dist/browser/runtime-transport.jsView file

585try { L586: const parsed = JSON.parse(execFileSync("powershell.exe", ["-NoProfile", "-Command", script], { L587: encoding: "utf8",

High

Shell

Package source references shell execution.

dist/browser/runtime-transport.jsView on unpkg · L585

dist/constants.jsView file

7import { createRequire } from "node:module"; L8: const require = createRequire(import.meta.url); L9: const pkg = require("../package.json");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/constants.jsView on unpkg · L7

dist/engine/template.jsView file

15out += L16: ch.charCodeAt(0) <= 31 || FILENAME_UNSAFE_CHARS.includes(ch) ? "_" : ch; L17: } ... L234: * Safe expression evaluator using Node.js VM sandbox. L235: * Provides stronger isolation than `new Function()` with a 250ms timeout L236: * to prevent DoS. Simple dotted access (the most common case) uses a ... L368: // Perplexity, MiniMax, QWeather, Novita, GCloud, etc.). Bind to L369: // process.env so the template engine resolves rather than coercing to L370: // empty string (which sent unauthenticated requests silently).

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/engine/template.jsView on unpkg · L15

dist/discovery/macos-dynamic.jsView file

1import { execFile, execFileSync } from "node:child_process"; L2: import { createHash } from "node:crypto"; ... L62: function currentShortcutsLocale() { L63: return normalizeLocale(process.env.LC_ALL || L64: process.env.LC_MESSAGES || L65: process.env.LANG || L66: Intl.DateTimeFormat().resolvedOptions().locale); L67: } ... L77: } L78: export function parseShortcutsListOutput(stdout) { L79: const shortcuts = []; ... L98: try {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/discovery/macos-dynamic.jsView on unpkg · L1

dist/browser/launcher.jsView file

14*/ L15: import { execSync, spawn } from "node:child_process"; L16: import { existsSync } from "node:fs"; L17: import { createServer } from "node:net"; L18: import { getElectronApp } from "../electron-apps.js"; ... L27: export function isRemoteBrowser() { L28: return !!process.env.UNICLI_CDP_ENDPOINT; L29: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/browser/launcher.jsView on unpkg · L14

dist/adapters/xiaoyuzhou/media.jsView file

6async function readCredentials() { L7: if (process.env.XIAOYUZHOU_ACCESS_TOKEN) { L8: return { ... L14: const { readFile } = await import("node:fs/promises"); L15: const text = await readFile(join(homedir(), ".unicli", "xiaoyuzhou.json"), "utf8"); L16: return JSON.parse(text); L17: } ... L33: } L34: const response = await fetch(`https://api.xiaoyuzhoufm.com${path}`, { L35: method: "POST", L36: headers, L37: body: JSON.stringify(body),

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/adapters/xiaoyuzhou/media.jsView on unpkg · L6

dist/engine/ssrf.jsView file

5* @feeds validated-fetch and transport HTTP request guards L6: * @breaks Invalid, special-purpose, mapped, local, link-local, private, benchmark, documentation, multicast, and reserved IP literals throw before network I/O. L7: * @invariants Only http/https pass; IANA non-global IPv4/IPv6 literal ranges stay blocked unless explicitly enabled; ordinary DNS names are not claimed to be resolution-pinned. ... L14: */ L15: import { BlockList, isIP } from "node:net"; L16: const NON_GLOBAL_IPV4 = [ ... L102: } L103: if (process.env.UNICLI_ALLOW_LOCAL === "1") L104: return;

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/engine/ssrf.jsView on unpkg · L5

dist/commands/mcp.jsView file

93const child = entry.kind === "ts" L94: ? spawn("npx", ["tsx", ...args], { L95: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands/mcp.jsView on unpkg · L93

packages/sidecars/unicli-process-owner-win32-arm64/unicli-process-owner.exeView file

•path = packages/sidecars/unicli-process-owner-win32-arm64/unicli-process-owner.exe kind = native_binary sizeBytes = 262144 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

packages/sidecars/unicli-process-owner-win32-arm64/unicli-process-owner.exeView on unpkg

src/adapters/youtube/innertube.tsView file

10patternName = google_api_key severity = high line = 10 matchedText = const IN...W8";

High

Secret Pattern

Google API key in src/adapters/youtube/innertube.ts

src/adapters/youtube/innertube.tsView on unpkg · L10