@zubriq/code@0.19.10-1: Clean npm security report (Allow)

Loading npm security reports…

@zubriq/code@0.19.10-1: Clean npm security report (Allow) | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

Runtime CLI includes user-invoked extension and channel management in dist/chunks/chunk-27ATIBHX.js.
Runtime defaults route configured OpenAI-compatible use to https://api.zubriq.by/v1 in dist/chunks/chunk-PPIHHEXD.js.
Bundled package includes native ripgrep and Tree-sitter assets under dist/vendor/.

Evidence against

package.json and dist/package.json contain no preinstall, install, postinstall, or prepare hook.
scripts/cli-entry.js only dispatches the invoked CLI or respawns Node with --expose-gc.
Extension installation is reached through an explicit extensions command and requests consent in dist/chunks/chunk-27ATIBHX.js.
No inspected source showed credential harvesting, covert exfiltration, remote payload execution, or writes to foreign AI-agent control surfaces.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

Manifest

NoLicense

scanned 645 file(s), 38.7 MB of source, external domains: 127.0.0.1, 169.254.169.254, accounts.google.com, aiplatform.googleapis.com, api.anthropic.com, api.dingtalk.com, api.github.com, api.openai.com, api.sgroup.qq.com, api.telegram.org, api.zubriq.by, bots.qq.com, bucket.example.com, cdn.example.com, cdn.jsdelivr.net, chat.qwen.ai, chevrotain.io, claudemarketplaces.com, cloud.google.com, cloudresourcemanager.googleapis.com, code.zubriq.by, codeload.github.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, console.zubriq.by, crystal-lang.org, dashscope.aliyuncs.com, dev.w3.org, developer.mozilla.org, docs.anthropic.com, docs.expo.dev, docs.microsoft.com, docs.neo4j.org, dotenvx.com, dummy.com, empty.invalid, en.cppreference.com, en.wikipedia.org, example.com, fb.me, fburl.com, fetch.spec.whatwg.org, fishshell.com, geminicli.com, generativelanguage.googleapis.com, get.zubriq.by, gist.githubusercontent.com, git.new, github.com, help.openai.com

Oversized source lightweight scan

dist/chunks/chunk-JD3H3R2T.js2.77 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsCryptoHighEntropyStrings

dist/chunks/chunk-WEW4DGUJ.js5.44 MB file, sampled 256 KB

FilesystemNetworkChildProcessEvalCryptoHighEntropyStringsUrlStringsgithub.com

dist/chunks/dist-QYCAEZIT.js4.56 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoHighEntropyStringsUrlStringsopen.feishu.cnopen.larksuite.com

dist/web-shell/assets/index-KFJRDhX7.js

Source & flagged code

19 flagged

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView file

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Secret Pattern

AWS access key ID in dist/chunks/tree-sitter-bash-RPMGROCZ.js

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

dist/chunks/chunk-JESCGQM3.jsView file

Lines 23-63javascript

23 }

24 if (process.env["CI"] || process.env["DEBIAN_FRONTEND"] === "noninteractive") {

25 return false;

26 }

27 const isSSH = !!process.env["SSH_CONNECTION"];

28 if (process.platform === "linux") {

29 const displayVariables = ["DISPLAY", "WAYLAND_DISPLAY", "MIR_SOCKET"];

30 const hasDisplay = displayVariables.some((v) => !!process.env[v]);

31 if (!hasDisplay) {

32 return false;

33 }

34 }

35 if (isSSH && process.platform !== "linux") {

36 return false;

37 }

38 return true;

39}

40__name(shouldAttemptBrowserLaunch, "shouldAttemptBrowserLaunch");

42// packages/core/src/utils/secure-browser-launcher.ts

43init_esbuild_shims();

44import { execFile, spawn } from "node:child_process";

45import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

dist/chunks/chunk-JESCGQM3.jsView on unpkg · L43

46import { platform } from "node:os";

47import { resolve } from "node:path";

48import { URL, fileURLToPath } from "node:url";

49var execFileAsync = promisify(execFile);

50function validateUrl(url, { allowFile = false, allowedFilePaths } = {}) {

51 let parsedUrl;

52 try {

53 parsedUrl = new URL(url);

54 } catch (_error) {

55 throw new Error(`Invalid URL: ${url}`);

56 }

57 const allowedProtocols = allowFile ? ["http:", "https:", "file:"] : ["http:", "https:"];

58 if (!allowedProtocols.includes(parsedUrl.protocol)) {

59 throw new Error(

60 `Unsafe protocol: ${parsedUrl.protocol}. Only ${allowedProtocols.join(

61 ", "

62 )} are allowed.`

63 );

Lines 91-131javascript

91 } catch (_error) {

92 console.warn(

93 `Failed to open BROWSER command ${browserCommand.command}: ${formatLaunchError(

94 _error

95 )}. Falling back to the platform browser opener.`

96 );

97 }

98 }

dist/chunks/chunk-KHUQZZJ6.jsView file

279site.name = fn.name; L280: var deprecatedfn = new Function( L281: "fn",

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunks/chunk-KHUQZZJ6.jsView on unpkg · L279

dist/chunks/chunk-R6IT5GGP.jsView file

Lines 246-286javascript

246 "Token usage export path must be within the project working directory.",

247 "Failed to load token usage stats: {{error}}",

248 "Failed to export token usage stats: {{error}}",

249 "Note: generation timing (TTFT/TPS) belongs to generation metrics.",

250 "Cannot resolve export path within the working directory.",

251 "Export target does not exist: {{path}}",

dist/chunks/workflow-KVUIQGB7.jsView file

Lines 268-308javascript

268 }

269 return out;

270}

271__name(validateMeta, "validateMeta");

272function isRegexContext(source, i) {

273 let j =

dist/chunks/artifact-tool-U7IRTLIV.jsView file

Lines 46-86javascript

46 return cleaned || DEFAULT_TITLE;

47}

48__name(sanitizeArtifactTitle, "sanitizeArtifactTitle");

49function escapeForTitle(s) {

50 return s.replace

dist/chunks/chunk-2BPQGMI3.jsView file

Lines 1-26javascript

1// Force strict mode and setup for ESM

2"use strict";

3import {

4 updateEventEmitter

5} from "./chunk-YAF2MQZ6.js";

6import {

7 require_undici

8} from

dist/chunks/startInteractiveUI-IRA43XQL.jsView file

21269} L21270: const child = spawn(command, [folderPath], { L21271: detached: true, ... L21274: child.unref(); L21275: await new Promise((resolve4, reject) => { L21276: child.once("error", reject); ... L21284: } L21285: return DISPLAY_ENV_VARS.some((key) => Boolean(process.env[key])); L21286: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunks/startInteractiveUI-IRA43XQL.jsView on unpkg · L21269

dist/chunks/chunk-4LD5APFL.jsView file

3import { L4: import_websocket L5: } from "./chunk-TYAMGABM.js"; ... L23: } L24: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L25: this._timeouts = timeouts; ... L422: L423: // node_modules/gaxios/package.json L424: var require_package = __commonJS({ ... L749: return; L750: } else if (obj instanceof FormData || obj instanceof URLSearchParams || // support `node-fetch` FormData/URLSearchParams L751: "forEach" in obj && "set" in obj) {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/chunk-4LD5APFL.jsView on unpkg · L3

dist/chunks/chunk-WEW4DGUJ.jsView file

•context = ayload: {\n snapshots: remappedSnapshots.map(serializeSnapshot)\n }\n };\n forked.push(snapshotRecord);\n }\n fs10.mkdirSync(chatsDir, { recursive: true });\n const body2 = forked.map((r2) => JSON.stringify(r2)).join("\n") + "\n";\n let fd;\n try {\n fd = fs10.openSync(targetPath, "wx", 384);\n } catch (err2) {\n if (err2.code === "EEXIST") {\n throw new Error(`Target session file already exists: ${newSessionId}`);\n }\n throw err2;\n }\n try {\n fs10.writeFileSync(fd, body2, { encoding: "utf8" });\n } finally {\n fs10.closeSync(fd);\n }\n await copyFileHistoryBackups(sourceSessionId, newSessionId);\n return { filePath: targetPath, copiedCount: forked.length };\n }\n /**\n * Get

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/chunks/chunk-WEW4DGUJ.jsView on unpkg

dist/chunks/chunk-27ATIBHX.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @zubriq/code@0.19.9-7 matchedIdentity = npm:QHp1YnJpcS9jb2Rl:0.19.9-7 similarity = 0.625 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/chunk-27ATIBHX.jsView on unpkg

199init_esbuild_shims(); L200: var exec = __require("child_process").exec; L201: var execSync = __require("child_process").execSync; ... L359: }; L360: function findModelConfig(modelProviders, providerProtocol, authType, modelId, baseUrl) { L361: if (!modelProviders || !modelId) { ... L2299: const entries = JSON.parse( L2300: readFileSync(sessionsPath2, "utf-8") L2301: );

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/chunk-27ATIBHX.jsView on unpkg · L199

dist/chunks/channel-worker-supervisor-WSOAAYUO.jsView file

35Cross-file remote execution chain: dist/chunks/channel-worker-supervisor-WSOAAYUO.js spawns dist/chunks/chunk-H6XPXXMH.js; helper contains network access plus dynamic code execution. L35: init_esbuild_shims(); L36: import { fork } from "node:child_process"; L37: import { randomUUID } from "node:crypto"; ... L44: var ANSI_CSI_SEQUENCE_RE = new RegExp( L45: `${String.fromCharCode(27)}\\[[0-?]*[ -/]*[@-~]`, L46: "g" ... L133: function hasObservedExit(snapshot) { L134: return snapshot.exitCode !== void 0 || snapshot.signal !== void 0; L135: } ... L137: function createWorkerEnv(opts) { L138: const env = { ...process.env }; L139: env["QWEN_CODE_NO_RELAUNCH"] = "true";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/channel-worker-supervisor-WSOAAYUO.jsView on unpkg · L35

dist/vendor/ripgrep/x64-darwin/rgView file

•path = dist/vendor/ripgrep/x64-darwin/rg kind = native_binary sizeBytes = 4742676 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/ripgrep/x64-darwin/rgView on unpkg

dist/vendor/tree-sitter/tree-sitter.wasmView file

•path = dist/vendor/tree-sitter/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/vendor/tree-sitter/tree-sitter.wasmView on unpkg

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

dist/chunks/chunk-JD3H3R2T.jsView file

•path = dist/chunks/chunk-JD3H3R2T.js kind = oversized_source_file sizeBytes = 2908238 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/chunks/chunk-JD3H3R2T.jsView on unpkg

Source & flagged code

19 flagged · loading source

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView file

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Secret Pattern

AWS access key ID in dist/chunks/tree-sitter-bash-RPMGROCZ.js

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

dist/chunks/chunk-JESCGQM3.jsView file

43init_esbuild_shims(); L44: import { execFile, spawn } from "node:child_process"; L45: import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

dist/chunks/chunk-JESCGQM3.jsView on unpkg · L43

111case "win32": L112: command = "powershell.exe"; L113: args = [

High

Shell

Package source references shell execution.

dist/chunks/chunk-JESCGQM3.jsView on unpkg · L111

dist/chunks/chunk-KHUQZZJ6.jsView file

279site.name = fn.name; L280: var deprecatedfn = new Function( L281: "fn",

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunks/chunk-KHUQZZJ6.jsView on unpkg · L279

dist/chunks/chunk-R6IT5GGP.jsView file

266L267: // import("./locales/**/*.js") in packages/cli/src/i18n/index.ts L268: var globImport_locales_js = __glob({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/chunk-R6IT5GGP.jsView on unpkg · L266

dist/chunks/workflow-KVUIQGB7.jsView file

288} L289: const envSec = Number(process.env["QWEN_CODE_MAX_WORKFLOW_SECONDS"]); L290: if (Number.isFinite(envSec) && envSec > 0) return envSec * 1e3; ... L437: // cannot reach host process. L438: globalThis.args = __b.argsJson === null ? undefined : JSON.parse(__b.argsJson); L439:

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/chunks/workflow-KVUIQGB7.jsView on unpkg · L288

dist/chunks/artifact-tool-U7IRTLIV.jsView file

66if (extResource) { L67: return `Artifact must be self-contained \u2014 found an external reference (${truncate(extResource[0])}). Inline scripts/styles and embed assets as data: URIs.`; L68: } ... L72: } L73: const extScript = /\b(?:fetch|WebSocket|XMLHttpRequest)\s*\(\s*["']\s*(?:https?|wss?):\/\//i.exec( L74: scan ... L168: init_esbuild_shims(); L169: import { execFile } from "node:child_process"; L170: import { promisify } from "node:util"; ... L321: }, "defaultHttpPut"); L322: function ossCredentialsFromEnv(env = process.env) { L323: const accessKeyId = env["OSS_ACCESS_KEY_ID"] || env["ALIBABA_CLOUD_ACCESS_KEY_ID"];

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/artifact-tool-U7IRTLIV.jsView on unpkg · L66

dist/chunks/chunk-2BPQGMI3.jsView file

6import { L7: require_undici L8: } from "./chunk-L573Z2QZ.js"; ... L33: import { Readable, Transform } from "node:stream"; L34: import { spawn, execFile } from "node:child_process"; L35: import { pipeline } from "node:stream/promises"; ... L40: var RELEASE_PUBLIC_KEY_DER_B64 = "[redacted]="; L41: function verifySignature(sha256sumsContent, signatureBase64) { L42: const key = createPublicKey({ ... L128: const text = await response.text(); L129: const requireSig = process.env["QWEN_REQUIRE_SIGNATURE"] === "1"; L130: let sigResponse;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/chunk-2BPQGMI3.jsView on unpkg · L6

dist/chunks/startInteractiveUI-IRA43XQL.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunks/startInteractiveUI-IRA43XQL.jsView on unpkg · L21269

dist/chunks/chunk-4LD5APFL.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/chunk-4LD5APFL.jsView on unpkg · L3

dist/chunks/chunk-WEW4DGUJ.jsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/chunks/chunk-WEW4DGUJ.jsView on unpkg

dist/chunks/chunk-27ATIBHX.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/chunk-27ATIBHX.jsView on unpkg

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/chunk-27ATIBHX.jsView on unpkg · L199

dist/chunks/channel-worker-supervisor-WSOAAYUO.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/channel-worker-supervisor-WSOAAYUO.jsView on unpkg · L35

dist/vendor/ripgrep/x64-darwin/rgView file

•path = dist/vendor/ripgrep/x64-darwin/rg kind = native_binary sizeBytes = 4742676 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/ripgrep/x64-darwin/rgView on unpkg

dist/vendor/tree-sitter/tree-sitter.wasmView file

•path = dist/vendor/tree-sitter/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/vendor/tree-sitter/tree-sitter.wasmView on unpkg

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

dist/chunks/chunk-JD3H3R2T.jsView file

•path = dist/chunks/chunk-JD3H3R2T.js kind = oversized_source_file sizeBytes = 2908238 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/chunks/chunk-JD3H3R2T.jsView on unpkg

Source & flagged code

19 flagged

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView file

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Secret Pattern

AWS access key ID in dist/chunks/tree-sitter-bash-RPMGROCZ.js

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

dist/chunks/chunk-JESCGQM3.jsView file

Lines 23-63javascript

23 }

24 if (process.env["CI"] || process.env["DEBIAN_FRONTEND"] === "noninteractive") {

25 return false;

26 }

27 const isSSH = !!process.env["SSH_CONNECTION"];

28 if (process.platform === "linux") {

29 const displayVariables = ["DISPLAY", "WAYLAND_DISPLAY", "MIR_SOCKET"];

30 const hasDisplay = displayVariables.some((v) => !!process.env[v]);

31 if (!hasDisplay) {

32 return false;

33 }

34 }

35 if (isSSH && process.platform !== "linux") {

36 return false;

37 }

38 return true;

39}

40__name(shouldAttemptBrowserLaunch, "shouldAttemptBrowserLaunch");

42// packages/core/src/utils/secure-browser-launcher.ts

43init_esbuild_shims();

44import { execFile, spawn } from "node:child_process";

45import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

dist/chunks/chunk-JESCGQM3.jsView on unpkg · L43

46import { platform } from "node:os";

47import { resolve } from "node:path";

48import { URL, fileURLToPath } from "node:url";

49var execFileAsync = promisify(execFile);

50function validateUrl(url, { allowFile = false, allowedFilePaths } = {}) {

51 let parsedUrl;

52 try {

53 parsedUrl = new URL(url);

54 } catch (_error) {

55 throw new Error(`Invalid URL: ${url}`);

56 }

57 const allowedProtocols = allowFile ? ["http:", "https:", "file:"] : ["http:", "https:"];

58 if (!allowedProtocols.includes(parsedUrl.protocol)) {

59 throw new Error(

60 `Unsafe protocol: ${parsedUrl.protocol}. Only ${allowedProtocols.join(

61 ", "

62 )} are allowed.`

63 );

Lines 91-131javascript

91 } catch (_error) {

92 console.warn(

93 `Failed to open BROWSER command ${browserCommand.command}: ${formatLaunchError(

94 _error

95 )}. Falling back to the platform browser opener.`

96 );

97 }

98 }

dist/chunks/chunk-KHUQZZJ6.jsView file

279site.name = fn.name; L280: var deprecatedfn = new Function( L281: "fn",

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunks/chunk-KHUQZZJ6.jsView on unpkg · L279

dist/chunks/chunk-R6IT5GGP.jsView file

Lines 246-286javascript

246 "Token usage export path must be within the project working directory.",

247 "Failed to load token usage stats: {{error}}",

248 "Failed to export token usage stats: {{error}}",

249 "Note: generation timing (TTFT/TPS) belongs to generation metrics.",

250 "Cannot resolve export path within the working directory.",

251 "Export target does not exist: {{path}}",

dist/chunks/workflow-KVUIQGB7.jsView file

Lines 268-308javascript

268 }

269 return out;

270}

271__name(validateMeta, "validateMeta");

272function isRegexContext(source, i) {

273 let j =

dist/chunks/artifact-tool-U7IRTLIV.jsView file

Lines 46-86javascript

46 return cleaned || DEFAULT_TITLE;

47}

48__name(sanitizeArtifactTitle, "sanitizeArtifactTitle");

49function escapeForTitle(s) {

50 return s.replace

dist/chunks/chunk-2BPQGMI3.jsView file

Lines 1-26javascript

1// Force strict mode and setup for ESM

2"use strict";

3import {

4 updateEventEmitter

5} from "./chunk-YAF2MQZ6.js";

6import {

7 require_undici

8} from

dist/chunks/startInteractiveUI-IRA43XQL.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunks/startInteractiveUI-IRA43XQL.jsView on unpkg · L21269

dist/chunks/chunk-4LD5APFL.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/chunk-4LD5APFL.jsView on unpkg · L3

dist/chunks/chunk-WEW4DGUJ.jsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/chunks/chunk-WEW4DGUJ.jsView on unpkg

dist/chunks/chunk-27ATIBHX.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/chunk-27ATIBHX.jsView on unpkg

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/chunk-27ATIBHX.jsView on unpkg · L199

dist/chunks/channel-worker-supervisor-WSOAAYUO.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/channel-worker-supervisor-WSOAAYUO.jsView on unpkg · L35

dist/vendor/ripgrep/x64-darwin/rgView file

•path = dist/vendor/ripgrep/x64-darwin/rg kind = native_binary sizeBytes = 4742676 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/ripgrep/x64-darwin/rgView on unpkg

dist/vendor/tree-sitter/tree-sitter.wasmView file

•path = dist/vendor/tree-sitter/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/vendor/tree-sitter/tree-sitter.wasmView on unpkg

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

dist/chunks/chunk-JD3H3R2T.jsView file

•path = dist/chunks/chunk-JD3H3R2T.js kind = oversized_source_file sizeBytes = 2908238 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/chunks/chunk-JD3H3R2T.jsView on unpkg

@zubriq/code@0.19.10-1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code