aegiscode@5.2.1: Suspicious npm security report (Warn)

Loading npm security reports…

aegiscode@5.2.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

4 flagged

package.jsonView file

Lines 1-33json

2 "name": "aegiscode",

3 "version": "5.2.1",

4 "description": "AEGIS CLI — AI-powered coding assistant",

5 "type": "module",

6 "bin": {

7 "aegis": "bin/cli.js",

8 "aegis-cli": "bin/cli.js",

9 "aegiscli": "bin/cli.js",

10 "aegiscode": "bin/cli.js"

11 },

12 "scripts": {

13 "preinstall": "node scripts/ensure-node-version.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L13

14 "build": "node esbuild.mjs",

15 "build:publish": "npm run build && node scripts/make-bin.mjs",

16 "dev": "NODE_NO_WARNINGS=1 tsx src/main.tsx",

17 "start": "node --no-deprecation dist/main.js",

18 "typecheck": "tsc --noEmit",

19 "test:prompts": "tsx src/prompts/test.ts",

20 "test:tools": "tsx src/tools/test.ts",

21 "test:pipeline": "tsx src/tools/execution/test.ts",

22 "test:context": "tsx src/context/test.ts",

23 "test:mcp": "tsx src/mcp/test.ts",

24 "test:store": "tsx src/store/test.ts"

25 },

26 "keywords": [

27 "cli",

28 "ai",

29 "coding-agent",

30 "llm",

31 "openai",

32 "gpt",

33 "claude",

scripts/release-local.shView file

•path = scripts/release-local.sh kind = build_helper sizeBytes = 3031 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/release-local.shView on unpkg

bin/cli.jsView file

•path = bin/cli.js kind = oversized_source_file sizeBytes = 8221875 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/cli.jsView on unpkg

•path = bin/cli.js kind = oversized_cli_entrypoint sizeBytes = 8221875 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/cli.jsView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/ensure-node-version.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/release-local.shView file

•path = scripts/release-local.sh kind = build_helper sizeBytes = 3031 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/release-local.shView on unpkg

bin/cli.jsView file

•path = bin/cli.js kind = oversized_source_file sizeBytes = 8221875 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/cli.jsView on unpkg

•path = bin/cli.js kind = oversized_cli_entrypoint sizeBytes = 8221875 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/cli.jsView on unpkg

aegiscode@5.2.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code