@zubriq/code@0.22.3-7: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@zubriq/code@0.22.3-7: Malicious npm security report (Block) | LPM Firewall

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

The package exposes the zq command-line entry point.
CLI authentication validation loads the environment configuration.
When an existing OpenAI API key is present without a base URL, the code silently sets the ZubrIQ API endpoint.
The provider request code sends its normalized API key as a Bearer credential to the selected base URL.

Evidence against

No npm install or postinstall hook was found in package metadata.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

NoLicense

scanned 822 file(s), 54.0 MB of source, external domains: 127.0.0.1, 169.254.169.254, accounts.google.com, aiplatform.googleapis.com, api-docs.deepseek.com, api-inference.modelscope.cn, api.anthropic.com, api.deepseek.com, api.dingtalk.com, api.github.com, api.minimax.io, api.minimaxi.com, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.sgroup.qq.com, api.telegram.org, api.x.ai, api.z.ai, api.zubriq.by, bailian.console.aliyun.com, bots.qq.com, bucket.example.com, cdn.example.com, cdn.jsdelivr.net, chat.qwen.ai, chevrotain.io, claudemarketplaces.com, cloud.google.com, cloudresourcemanager.googleapis.com, cn-hongkong.dashscope.aliyuncs.com, code.alibaba-inc.com, code.visualstudio.com, codeload.github.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, console.zubriq.by, crystal-lang.org, dashscope-intl.aliyuncs.com, dashscope-us.aliyuncs.com, dashscope.aliyuncs.com, dev.w3.org, docs.anthropic.com, docs.example.com, docs.expo.dev, docs.fireworks.ai, docs.github.com, docs.microsoft.com, docs.neo4j.org, docs.requesty.ai

Oversized source lightweight scan

dist/chunks/chunk-AQDC2IS5.js5.63 MB file, sampled 256 KB

FilesystemHighEntropyStringsUrlStringsjson-schema.org

dist/chunks/dist-GFN5DCBX.js5.51 MB file, sampled 256 KB

FilesystemNetworkCryptoHighEntropyStringsUrlStringsopen.feishu.cnopen.larksuite.com

Source & flagged code

14 flagged · loading source

dist/chunks/chunk-KGE6B3E5.jsView file

2553debugLogger3.warn( L2554: `drainAll: spawnInFlight wait timed out after ${timeoutMs}ms; ${stuckIds.length} spawn(s) still in-flight: ${stuckIds.join( L2555: ", "

High

Child Process

Package source references child process execution.

dist/chunks/chunk-KGE6B3E5.jsView on unpkg · L2553

4792function resolveWebTerminalShell(platform2, env2) { L4793: return platform2 === "win32" ? { file: env2["COMSPEC"] ?? "cmd.exe", args: [] } : { file: env2["SHELL"] ?? "/bin/sh", args: [] }; L4794: }

High

Shell

Package source references shell execution.

dist/chunks/chunk-KGE6B3E5.jsView on unpkg · L4792

3197const protocol = inputs.protocol ?? config.protocol; L3198: return typeof config.envKey === "function" ? config.envKey(protocol, inputs.baseUrl) : config.envKey; L3199: } ... L4728: init_esbuild_shims(); L4729: import { spawnSync } from "node:child_process"; L4730: var MAX_BUFFER_CHUNKS = 4e3; ... L10029: try { L10030: const configContent = fs9.readFileSync(lspConfigPath, "utf-8"); L10031: const data = JSON.parse(configContent);

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunks/chunk-KGE6B3E5.jsView on unpkg · L3197

dist/web-shell/assets/index-CGT341lL.jsView file

52`+g.message)}var n=new it;n.add(a),n.isGeoSVGGraphicRoot=!0;var i=e.width,o=e.height,s=e.viewBoxRect,l=this._boundingRect;if(!l){var u=void 0,f=void 0,v=void 0,h=void 0;if(i!=null?... L53: `+i.message)}return f8(e,n),A(n,function(i){var o=i.name;h8(e,i),p8(e,i);var s=this._specialAreas&&this._specialAreas[o];s&&i.transformTo(s.left,s.top,s.width,s.height)},this),n},r... L54: `))}),t.join(`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web-shell/assets/index-CGT341lL.jsView on unpkg · L52

dist/chunks/chunk-NIFYWDYN.jsView file

70const moduleName = "keytar"; L71: const module = await import(moduleName); L72: this.keytarModule = module.default || module;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/chunk-NIFYWDYN.jsView on unpkg · L70

dist/chunks/chunk-UMM2PQSY.jsView file

12withAttachmentDegradationMarker, L13: writeStderrLine L14: } from "./chunk-5TSQTVBP.js"; ... L153: INVOCATION_CONTEXT_META_KEY, L154: PRIVATE_ACP_CAPABILITY_ENV, L155: PRIVATE_PARENT_CAPABILITY_META_KEY ... L350: type: "history_truncated", L351: data: { L352: reason: "replay_window_exceeded", ... L1198: if (typeof sourceId !== "string" || sourceId.length === 0 || sourceId.length > MAX_SESSION_SOURCE_ID_LENGTH || [...sourceId].some((character) => { L1199: const code = character.charCodeAt(0); L1200: return code <= 31 || code === 127;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/chunk-UMM2PQSY.jsView on unpkg · L12

dist/chunks/chunk-HORFUMCF.jsView file

27import { L28: loadUndici L29: } from "./chunk-TXASDT2M.js"; ... L320: ignoreBrokenPipe, L321: writeStderrLine, L322: writeStderrLineSafe, ... L344: init_esbuild_shims(); L345: var exec = __require("child_process").exec; L346: var execSync = __require("child_process").execSync; ... L351: var constants5 = fs2.constants || fs2; L352: var isUsingWindows = process.platform == "win32"; L353: var fileNotExists = /* @__PURE__ */ __name(function(commandName, callback) {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/chunk-HORFUMCF.jsView on unpkg · L27

dist/chunks/chunk-AMDSOFFV.jsView file

103L104: // node_modules/gaxios/package.json L105: var require_package = __commonJS({ ... L397: case "json": L398: return JSON.parse(JSON.stringify(data)); L399: case "arraybuffer": ... L430: return; L431: } else if (obj instanceof FormData || obj instanceof URLSearchParams || // support `node-fetch` FormData/URLSearchParams L432: "forEach" in obj && "set" in obj) { ... L792: const noProxyList = [...noProxy]; L793: const noProxyEnvList = (process.env.NO_PROXY ?? process.env.no_proxy)?.split(",") || []; L794: for (const rule of noProxyEnvList) {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunks/chunk-AMDSOFFV.jsView on unpkg · L103

dist/chunks/chunk-AQDC2IS5.jsView file

•context = (interactionMode);\n const basePrompt = systemMdEnabled ? fs4.readFileSync(systemMdPath, "utf8") : buildDefaultBasePrompt(interaction, model, effectiveOutputStyle);\n const writeSystemMdResolution = resolvePathFromEnv(\n process2.env["QWEN_WRITE_SYSTEM_MD"]\n );\n if (writeSystemMdResolution.value && !writeSystemMdResolution.isDisabled) {\n const writePath = writeSystemMdResolution.isSwitch ? systemMdPath : writeSystemMdResolution.value;\n fs4.mkdirSync(path4.dirname(writePath), { recursive: true });\n fs4.writeFileSync(\n writePath,\n systemMdEnabled ? basePrompt : buildDefaultBasePrompt(interaction, model, void 0)\n );\n }\n return assembleSystemPrompt({\n base: systemMdEnabled ? basePrompt : applyOutputStyle(basePrompt, effectiveOutputStyle),\

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/chunks/chunk-AQDC2IS5.jsView on unpkg

dist/chunks/chunk-5Q372OFJ.jsView file

35Cross-file remote execution chain: dist/chunks/chunk-5Q372OFJ.js spawns dist/chunks/devtools-JCG4K2NZ.js; helper contains network access plus dynamic code execution. L35: ]; L36: if (process.platform !== "win32") { L37: module.exports.push( ... L184: } L185: process14.exitCode = code || /* istanbul ignore next */ L186: 0; ... L560: function formatProdErrorMessage(code) { L561: var url = "https://react.dev/errors/" + code; L562: if (1 < arguments.length) { ... L1450: controller: new AbortControllerLocal(), L1451: data: /* @__PURE__ */ new Map(), L1452: refCount: 0

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-5Q372OFJ.jsView on unpkg · L35

dist/vendor/ripgrep/x64-darwin/rgView file

•path = dist/vendor/ripgrep/x64-darwin/rg kind = native_binary sizeBytes = 4742676 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/ripgrep/x64-darwin/rgView on unpkg

dist/vendor/tree-sitter/tree-sitter.wasmView file

•path = dist/vendor/tree-sitter/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/vendor/tree-sitter/tree-sitter.wasmView on unpkg

dist/chunks/dist-GFN5DCBX.jsView file

•path = dist/chunks/dist-GFN5DCBX.js kind = oversized_source_file sizeBytes = 5782589 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/chunks/dist-GFN5DCBX.jsView on unpkg

dist/chunks/chunk-3JXM2CVW.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 15

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunks/chunk-3JXM2CVW.jsView on unpkg