@zubriq/code@0.19.9-1: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

@zubriq/code@0.19.9-1: Clean npm security report (Allow) | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

Evidence against

package.json and dist/package.json define bin entrypoints but no preinstall/install/postinstall lifecycle hooks.
scripts/cli-entry.js only resolves dist/cli.js, handles --version, or respawns node with --expose-gc.
dist/chunks/chunk-W4CTWW7M.js extension install is an explicit user command with consent handling, source parsing, and scope selection.
dist/chunks/chunk-CD6USWHZ.js WeChat token storage is for user-invoked channel login under Qwen state, chmod 0600.
dist/chunks/chunk-22IFUCVR.js browser spawning validates URL protocol and uses platform openers for user-facing browser launch.
Bundled ripgrep binaries and tree-sitter WASM are vendor tooling assets aligned with a coding assistant CLI.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

Manifest

NoLicense

scanned 630 file(s), 37.7 MB of source, external domains: 127.0.0.1, 169.254.169.254, accounts.google.com, aiplatform.googleapis.com, api.anthropic.com, api.dingtalk.com, api.github.com, api.openai.com, api.sgroup.qq.com, api.telegram.org, api.zubriq.by, bots.qq.com, bucket.example.com, cdn.example.com, cdn.jsdelivr.net, chat.qwen.ai, chevrotain.io, claudemarketplaces.com, cloud.google.com, cloudresourcemanager.googleapis.com, code.zubriq.by, codeload.github.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, console.zubriq.by, crystal-lang.org, dashscope.aliyuncs.com, dev.w3.org, developer.mozilla.org, docs.anthropic.com, docs.expo.dev, docs.microsoft.com, docs.neo4j.org, dotenvx.com, dummy.com, empty.invalid, en.cppreference.com, en.wikipedia.org, example.com, fb.me, fburl.com, fetch.spec.whatwg.org, fishshell.com, geminicli.com, generativelanguage.googleapis.com, get.zubriq.by, gist.githubusercontent.com, git.new, github.com, help.openai.com

Oversized source lightweight scan

dist/chunks/chunk-27AYMAL6.js2.77 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsCryptoHighEntropyStringsUrlStringswww.apache.org

dist/chunks/chunk-5MRUKUOG.js5.37 MB file, sampled 256 KB

FilesystemNetworkChildProcessEvalCryptoHighEntropyStringsUrlStringsgithub.com

dist/chunks/dist-BEXOZXLQ.js4.56 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoHighEntropyStringsUrlStringsopen.feishu.cnopen.larksuite.com

Source & flagged code

18 flagged · loading source

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView file

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

8patternName = aws_access_key severity = critical line = 8 matchedText = var tree...A");

Critical

Secret Pattern

AWS access key ID in dist/chunks/tree-sitter-bash-RPMGROCZ.js

dist/chunks/tree-sitter-bash-RPMGROCZ.jsView on unpkg · L8

dist/chunks/chunk-22IFUCVR.jsView file

43init_esbuild_shims(); L44: import { execFile, spawn } from "node:child_process"; L45: import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

dist/chunks/chunk-22IFUCVR.jsView on unpkg · L43

111case "win32": L112: command = "powershell.exe"; L113: args = [

High

Shell

Package source references shell execution.

dist/chunks/chunk-22IFUCVR.jsView on unpkg · L111

dist/chunks/chunk-YKZIAK7C.jsView file

279site.name = fn.name; L280: var deprecatedfn = new Function( L281: "fn",

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunks/chunk-YKZIAK7C.jsView on unpkg · L279

dist/chunks/chunk-6EUMFVPJ.jsView file

285const modName = "@teddyzhu/clipboard"; L286: cachedClipboardModule = await import(modName); L287: return cachedClipboardModule;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/chunk-6EUMFVPJ.jsView on unpkg · L285

dist/chunks/workflow-ZTK3WT3D.jsView file

288} L289: const envSec = Number(process.env["QWEN_CODE_MAX_WORKFLOW_SECONDS"]); L290: if (Number.isFinite(envSec) && envSec > 0) return envSec * 1e3; ... L437: // cannot reach host process. L438: globalThis.args = __b.argsJson === null ? undefined : JSON.parse(__b.argsJson); L439:

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/chunks/workflow-ZTK3WT3D.jsView on unpkg · L288

dist/chunks/chunk-FAATDXYS.jsView file

384type: "history_truncated", L385: data: { L386: reason: "replay_window_exceeded", ... L467: L468: // packages/acp-bridge/src/internal/stderrLine.ts L469: init_esbuild_shims(); ... L2155: try { L2156: const arr = JSON.parse(s.slice(0, end)); L2157: if (!Array.isArray(arr) || arr.length === 0) return null; ... L3353: function isServeDebugLoggingEnabled() { L3354: const value = process.env["QWEN_SERVE_DEBUG"]; L3355: if (!value) return false;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/chunk-FAATDXYS.jsView on unpkg · L384

dist/chunks/chunk-H3TELH3H.jsView file

3Cross-file remote execution chain: dist/chunks/chunk-H3TELH3H.js spawns dist/chunks/chunk-54YZOP7P.js; helper contains network access plus dynamic code execution. L3: import { L4: require_undici L5: } from "./chunk-54YZOP7P.js"; ... L35: const normalizedProjectRoot = projectRoot?.replace(/\\/g, "/"); L36: const isGit = isGitRepository(process.cwd()); L37: if (isGit && normalizedProjectRoot && isSamePathOrInside(realPath, normalizedProjectRoot) && !realPath.includes("/node_modules/")) { ... L65: } L66: if (process.platform === "darwin" && realPath.includes("/Cellar/zq/")) { L67: return { ... L118: isGlobal: false, L119: updateMessage: "Locally installed. Please update via your project's package.json." L120: };

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-H3TELH3H.jsView on unpkg · L3

3import { L4: require_undici L5: } from "./chunk-54YZOP7P.js"; ... L35: const normalizedProjectRoot = projectRoot?.replace(/\\/g, "/"); L36: const isGit = isGitRepository(process.cwd()); L37: if (isGit && normalizedProjectRoot && isSamePathOrInside(realPath, normalizedProjectRoot) && !realPath.includes("/node_modules/")) { ... L65: } L66: if (process.platform === "darwin" && realPath.includes("/Cellar/zq/")) { L67: return { ... L118: isGlobal: false, L119: updateMessage: "Locally installed. Please update via your project's package.json." L120: };

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunks/chunk-H3TELH3H.jsView on unpkg · L3

dist/chunks/chunk-55ZMG67I.jsView file

3import { L4: import_websocket L5: } from "./chunk-H6BD2ELD.js"; ... L23: } L24: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L25: this._timeouts = timeouts; ... L422: L423: // node_modules/gaxios/package.json L424: var require_package = __commonJS({ ... L749: return; L750: } else if (obj instanceof FormData || obj instanceof URLSearchParams || // support `node-fetch` FormData/URLSearchParams L751: "forEach" in obj && "set" in obj) {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/chunk-55ZMG67I.jsView on unpkg · L3

dist/chunks/chunk-5MRUKUOG.jsView file

•context = ayload: {\n snapshots: remappedSnapshots.map(serializeSnapshot)\n }\n };\n forked.push(snapshotRecord);\n }\n fs10.mkdirSync(chatsDir, { recursive: true });\n const body2 = forked.map((r2) => JSON.stringify(r2)).join("\n") + "\n";\n let fd;\n try {\n fd = fs10.openSync(targetPath, "wx", 384);\n } catch (err2) {\n if (err2.code === "EEXIST") {\n throw new Error(`Target session file already exists: ${newSessionId}`);\n }\n throw err2;\n }\n try {\n fs10.writeFileSync(fd, body2, { encoding: "utf8" });\n } finally {\n fs10.closeSync(fd);\n }\n await copyFileHistoryBackups(sourceSessionId, newSessionId);\n return { filePath: targetPath, copiedCount: forked.length };\n }\n /**\n * Get

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/chunks/chunk-5MRUKUOG.jsView on unpkg

dist/chunks/chunk-WJAW2O5H.jsView file

1131}, L1132: baseUrl: { L1133: type: "string", ... L1899: default: true, L1900: description: "Use node-pty for an interactive shell experience. Falls back to child_process if PTY is unavailable.", L1901: showInDialog: true ... L2980: try { L2981: const content = fs.readFileSync(filePath, "utf-8"); L2982: return parseOutputLanguageFromContent(content);

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/chunk-WJAW2O5H.jsView on unpkg · L1131

dist/vendor/ripgrep/x64-darwin/rgView file

•path = dist/vendor/ripgrep/x64-darwin/rg kind = native_binary sizeBytes = 4742676 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/ripgrep/x64-darwin/rgView on unpkg

dist/vendor/tree-sitter/tree-sitter.wasmView file

•path = dist/vendor/tree-sitter/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/vendor/tree-sitter/tree-sitter.wasmView on unpkg

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web-shell/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

dist/chunks/chunk-27AYMAL6.jsView file

•path = dist/chunks/chunk-27AYMAL6.js kind = oversized_source_file sizeBytes = 2900506 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/chunks/chunk-27AYMAL6.jsView on unpkg

dist/chunks/chunk-W4CTWW7M.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @zubriq/code@0.19.8-1 matchedIdentity = npm:QHp1YnJpcS9jb2Rl:0.19.8-1 similarity = 0.642 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunks/chunk-W4CTWW7M.jsView on unpkg