Loading npm security reports…

agent-tower@0.7.0: AI-agent control-surface risk | LPM Firewall

registry / agent-tower / 0.7.0

agent-tower@0.7.0

AI Agent Task Management Dashboard

AI Security Review

scanned 23d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically alters the compiled code of a third-party Claude ACP agent. The mutation occurs before the user invokes the package.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation, through the postinstall lifecycle hook

Impact

The installed ACP agent no longer has its publisher's original gateway behavior and can be controlled by a package-defined environment switch.

Mechanism

Automatic overwrite of a third-party AI-agent adapter

Policy narrative

On installation, package.json runs scripts/postinstall.js. That script automatically calls patchClaudeAgentAcp, which locates the third-party Claude ACP adapter and rewrites its compiled source. The replacement changes context-window gateway handling when a package-defined environment variable is set. This is an unconsented install-time mutation of a foreign AI-agent control component, rather than setup confined to this package.

AI rationale

The package has a concrete automatic lifecycle path that overwrites a third-party AI-agent adapter. Version and source checks constrain the patch but do not restore user consent for the mutation.

Evidence

package.jsonscripts/postinstall.jsscripts/patch-claude-agent-acp.mjsnode_modules/@agentclientprotocol/claude-agent-acp/dist/acp-agent.js

Decision evidence

AI identified this as a dangerous AI-agent capability at 96.0% confidence with low false-positive risk.

Evidence for policy risk

The manifest automatically runs a postinstall script.
The postinstall script invokes a Claude ACP patch without a user command.
The patch resolves a third-party ACP agent file and overwrites it during installation.
The overwrite changes agent gateway behavior based on an environment variable.

Evidence against

The patch is restricted to version 0.59.0 and refuses changed source.
The inspected install scripts contain no outbound network request or credential collection.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 744 file(s), 16.5 MB of source, external domains: 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, accounts.google.com, agent-tower.local, aiplatform.googleapis.com, api.anthropic.com, api.deepseek.com, api.individual.githubcopilot.com, api.openai.com, api.x.ai, auth.kimi.com, auth.openai.com, auth.x.ai, aws.amazon.com, bugzilla.mozilla.org, cdn.jsdelivr.net, cdnjs.cloudflare.com, chatgpt.com, chevrotain.io, claude.ai, cli.github.com, cloud.gitlab.com, cloud.google.com, cloudresourcemanager.googleapis.com, code.google.com, console.anthropic.com, cursor.com, dashscope.aliyuncs.com, developer.mozilla.org, developers.google.com, developers.openai.com, docs.anthropic.com, docs.aws.amazon.com, docs.expo.dev, drafts.csswg.org, dummy.com, en.wikipedia.org, esm.sh, example.com, fonts.bunny.net, fonts.googleapis.com, fonts.gstatic.com, generativelanguage.googleapis.com, git-scm.com, github.com, gitlab.com, googlechrome.github.io, hacks.mozilla.org

Oversized source lightweight scan

dist/web/assets/monaco-uSRaugmx.js3.60 MB file, sampled 256 KB

PossibleObfuscationHighEntropyStringsMinified

dist/web/assets/ts.worker-BH9nVgjN.js6.69 MB file, sampled 256 KB

FilesystemNetworkUrlStringsdeveloper.mozilla.orgwww.apache.org

vendor/pi/dist/bundle/chunks/chunk-JVUZSMYM.js3.82 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsPossibleObfuscationHighEntropyStringsMinifiedUrlStringsgithub.compi.dev

Source & flagged code

22 flagged

package.jsonView file

Lines 11-51json

11 "url": "https://github.com/agent-tower/core/issues"

12 },

13 "type": "module",

14 "license": "MIT",

15 "bin": {

16 "agent-tower": "./dist/cli.js",

17 "agent-tower-mcp": "./dist/mcp/index.js"

18 },

19 "main": "./dist/index.js",

20 "files": [

21 "dist/",

22 "prisma/",

23 "scripts/",

24 "vendor/",

25 "node_modules/@agent-tower/",

26 "node_modules/@prisma/",

27 "node_modules/@shitiandmw/",

28 "node_modules/cloudflared/"

29 ],

30 "scripts": {

31 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 },

33 "dependencies": {

34 "@agent-tower/shared": "0.1.0",

35 "@agentclientprotocol/claude-agent-acp": "0.59.0",

36 "@agentclientprotocol/codex-acp": "1.10.0",

37 "@agentclientprotocol/sdk": "1.4.0",

38 "@fastify/cookie": "^9.4.0",

39 "@fastify/cors": "^9.0.1",

40 "@fastify/multipart": "^8.3.1",

41 "@fastify/static": "^7.0.4",

42 "@modelcontextprotocol/sdk": "^1.26.0",

43 "@prisma/client": "5.22.0",

44 "@shitiandmw/node-pty": "1.1.0-shitiandmw.2",

45 "cloudflared": "^0.7.1",

46 "fast-json-patch": "^3.1.1",

47 "fastify": "^4.26.0",

48 "pi-acp": "0.0.33",

49 "pi-mcp-adapter": "2.32.1",

50 "prisma": "5.22.0",

51 "simple-git": "^3.22.0",

dist/runtime/acp/agents/native-agent.jsView file

Lines 1-21javascript

1import { execFile } from 'node:child_process';

2import { constants } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/runtime/acp/agents/native-agent.jsView on unpkg · L1

3import { access, stat } from 'node:fs/promises';

dist/runtime/acp/process-manager.jsView file

Lines 459-499javascript

459 await Promise.all(groups.map((group) => adapter.signalProcessGroup(group, 'SIGTERM')));

460 if (root)

461 await adapter.signalProcess(root,

vendor/pi/examples/extensions/doom-overlay/doom-engine.tsView file

Lines 44-84typescript

44 return this._height;

45 }

47 async init(): Promise<void> {

48 // Locate WASM build

49 const __dirname = dirname(fileURLToPath

dist/web/assets/index-DJqjl4es.jsView file

12L13: Please change the parent <Route path="${Y}"> to <Route path="${Y==="/"?"*":`${Y}/*`}">.`)}let T=Sr(),N;N=T;let L=N.pathname||"/",B=L;if(x!=="/"){let Y=x.replace(/^\//,"").split("/"... L14: `)?a.data:`${a.data}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/index-DJqjl4es.jsView on unpkg · L12

dist/utils/process-launch.test.jsView file

Lines 1-21javascript

1import { execFileSync, spawn, spawnSync } from 'node:child_process';

2import { chmodSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/utils/process-launch.test.jsView on unpkg · L1

3import { randomUUID } from 'node:crypto';

vendor/pi/dist/bundle/chunks/bedrock-converse-stream.jsView file

35${serde.toHex(hashedRequest)}`}getCanonicalPath({path}){if(this.uriEscapePath){let normalizedPathSegments=[];for(let pathSegment of path.split("/"))pathSegment?.length!==0&&pathSeg... L36: `);return this.signString(stringToSign,{signingDate,signingRegion:region,signingService,eventStreamCredentials})}async signMessage(signableMessage,{signingDate=new Date,signingRegi... L37: For more information, please visit: `+STATIC_STABILITY_DOC_URL);let originalExpiration=credentials.originalExpiration??credentials.expiration;return{...credentials,...originalExpir... ... L50: `)?"":void 0,maxNestedTags:1/0});function parseXML3(xmlString){return parser.parse(xmlString,!0)}}});var require_dist_cjs13=__commonJS({"node_modules/@aws-sdk/xml-builder/dist-cjs/... L51: Reference: https://docs.aws.amazon.

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

vendor/pi/dist/bundle/chunks/bedrock-converse-stream.jsView on unpkg · L35

High

node_modules/@prisma/client/runtime/binary.jsView file

1"use strict";var FD=Object.create;var Hi=Object.defineProperty;var ND=Object.getOwnPropertyDescriptor;var xD=Object.getOwnPropertyNames;var LD=Object.getPrototypeOf,UD=Object.proto... L2: `:10,t=typeof e=="string"?"\r":13;return e[e.length-1]===A&&(e=e.slice(0,e.length-1)),e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e}});var PQ=Q((jV,zi)=>{"use strict";var Xi=requi... L3: ${r.message}`:d,p=[I,A,e].filter(Boolean).join(` L4: `);return C?(r.originalMessage=r.message,r.message=p):r=new Error(p),r.shortMessage=I,r.command=s,r.escapedCommand=o,r.exitCode=i,r.signal=n,r.signalDescription=u,r.stdout=e,r.stde... L5: `);let r;for(;(r=kS.exec(t))!=null;){let n=r[1],i=r[2]||"";i=i.trim();let s=i[0];i=i.replace(/^(['"`])([\s\S]*)\1$/mg,"$2"),s==='"'&&(i=i.replace(/\\n/g,` L6: `),i=i.replace(/\\r/

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/@prisma/client/runtime/binary.jsView on unpkg · L1

1Cross-file remote execution chain: node_modules/@prisma/client/runtime/binary.js spawns node_modules/@prisma/client/generator-build/index.js; helper contains network access plus dynamic code execution. L1: "use strict";var FD=Object.create;var Hi=Object.defineProperty;var ND=Object.getOwnPropertyDescriptor;var xD=Object.getOwnPropertyNames;var LD=Object.getPrototypeOf,UD=Object.proto... L2: `:10,t=typeof e=="string"?"\r":13;return e[e.length-1]===A&&(e=e.slice(0,e.length-1)),e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e}});var PQ=Q((jV,zi)=>{"use strict";var Xi=requi... L3: ${r.message}`:d,p=[I,A,e].filter(Boolean).join(` L4: `);return C?(r.originalMessage=r.message,r.message=p):r=new Error(p),r.shortMessage=I,r.command=s,r.escapedCommand=o,r.exitCode=i,r.signal=n,r.signalDescription=u,r.

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

node_modules/@shitiandmw/node-pty/scripts/gen-compile-commands.jsView file

7console.log(`\x1b[32m> Generating compile_commands.json...\x1b[0m`); L8: execSync('npx --offline node-gyp configure -- -f compile_commands_json');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

node_modules/@shitiandmw/node-pty/scripts/gen-compile-commands.jsView on unpkg · L7

node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dllView file

•path = node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dll kind = native_binary sizeBytes = 106528 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dllView on unpkg

vendor/pi/examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = [redacted]-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/pi/examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

vendor/pi/bin/pi.cmdView file

•path = vendor/pi/bin/pi.cmd kind = build_helper sizeBytes = 34 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/pi/bin/pi.cmdView on unpkg

dist/web/assets/ts.worker-BH9nVgjN.jsView file

•path = dist/web/assets/ts.worker-BH9nVgjN.js kind = oversized_source_file sizeBytes = 7010226 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/web/assets/ts.worker-BH9nVgjN.jsView on unpkg

dist/executors/default-profiles.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 92

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/executors/default-profiles.jsonView on unpkg

node_modules/@shitiandmw/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.74.8 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.74.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@shitiandmw/node-pty/lib/unixTerminal.jsView on unpkg

node_modules/@shitiandmw/node-pty/lib/windowsPtyAgent.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.74.8 matchedPath = dist/vendor/node-pty/lib/windowsPtyAgent.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.74.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@shitiandmw/node-pty/lib/windowsPtyAgent.jsView on unpkg

Source & flagged code

22 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/runtime/acp/agents/native-agent.jsView file

1import { execFile } from 'node:child_process'; L2: import { constants } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/runtime/acp/agents/native-agent.jsView on unpkg · L1

dist/runtime/acp/process-manager.jsView file

479try { L480: const output = runExecFileSync('powershell.exe', [ L481: '-NoProfile',

High

Shell

Package source references shell execution.

dist/runtime/acp/process-manager.jsView on unpkg · L479

vendor/pi/examples/extensions/doom-overlay/doom-engine.tsView file

64const nativeRequire = createRequire(doomJsPath); L65: const moduleFunc = new Function("module", "exports", "__dirname", "__filename", "require", doomJsCode); L66: moduleFunc(moduleExports, moduleExports.exports, buildDir, doomJsPath, nativeRequire);

Low

Eval

Package source references a known benign dynamic code generation pattern.

vendor/pi/examples/extensions/doom-overlay/doom-engine.tsView on unpkg · L64

dist/web/assets/index-DJqjl4es.jsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/index-DJqjl4es.jsView on unpkg · L12

dist/utils/process-launch.test.jsView file

1import { execFileSync, spawn, spawnSync } from 'node:child_process'; L2: import { chmodSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'; ... L32: const ownershipToken = randomUUID(); L33: const env = buildPtyWrapperEnv({ ...process.env }, {}, ownershipToken); L34: const wrapper = spawn(invocation.command, invocation.args, { ... L39: let buf = ''; L40: wrapper.stdout.on('data', (chunk) => { L41: buf += String(chunk); ... L53: PATH: '/usr/bin', L54: AGENT_TOWER_URL: 'http://127.0.0.1:42232', L55: }, { ... L133: [

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/utils/process-launch.test.jsView on unpkg · L1

vendor/pi/dist/bundle/chunks/bedrock-converse-stream.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

vendor/pi/dist/bundle/chunks/bedrock-converse-stream.jsView on unpkg · L35

High

node_modules/@prisma/client/runtime/binary.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/@prisma/client/runtime/binary.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

node_modules/@shitiandmw/node-pty/scripts/gen-compile-commands.jsView file

7console.log(`\x1b[32m> Generating compile_commands.json...\x1b[0m`); L8: execSync('npx --offline node-gyp configure -- -f compile_commands_json');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

node_modules/@shitiandmw/node-pty/scripts/gen-compile-commands.jsView on unpkg · L7

node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dllView file

•path = node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dll kind = native_binary sizeBytes = 106528 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dllView on unpkg

vendor/pi/examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = [redacted]-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/pi/examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

vendor/pi/bin/pi.cmdView file

•path = vendor/pi/bin/pi.cmd kind = build_helper sizeBytes = 34 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/pi/bin/pi.cmdView on unpkg

dist/web/assets/ts.worker-BH9nVgjN.jsView file

•path = dist/web/assets/ts.worker-BH9nVgjN.js kind = oversized_source_file sizeBytes = 7010226 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/web/assets/ts.worker-BH9nVgjN.jsView on unpkg

dist/executors/default-profiles.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 92

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/executors/default-profiles.jsonView on unpkg

node_modules/@shitiandmw/node-pty/lib/unixTerminal.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@shitiandmw/node-pty/lib/unixTerminal.jsView on unpkg

node_modules/@shitiandmw/node-pty/lib/windowsPtyAgent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@shitiandmw/node-pty/lib/windowsPtyAgent.jsView on unpkg

Source & flagged code

22 flagged

package.jsonView file

Lines 11-51json

11 "url": "https://github.com/agent-tower/core/issues"

12 },

13 "type": "module",

14 "license": "MIT",

15 "bin": {

16 "agent-tower": "./dist/cli.js",

17 "agent-tower-mcp": "./dist/mcp/index.js"

18 },

19 "main": "./dist/index.js",

20 "files": [

21 "dist/",

22 "prisma/",

23 "scripts/",

24 "vendor/",

25 "node_modules/@agent-tower/",

26 "node_modules/@prisma/",

27 "node_modules/@shitiandmw/",

28 "node_modules/cloudflared/"

29 ],

30 "scripts": {

31 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 },

33 "dependencies": {

34 "@agent-tower/shared": "0.1.0",

35 "@agentclientprotocol/claude-agent-acp": "0.59.0",

36 "@agentclientprotocol/codex-acp": "1.10.0",

37 "@agentclientprotocol/sdk": "1.4.0",

38 "@fastify/cookie": "^9.4.0",

39 "@fastify/cors": "^9.0.1",

40 "@fastify/multipart": "^8.3.1",

41 "@fastify/static": "^7.0.4",

42 "@modelcontextprotocol/sdk": "^1.26.0",

43 "@prisma/client": "5.22.0",

44 "@shitiandmw/node-pty": "1.1.0-shitiandmw.2",

45 "cloudflared": "^0.7.1",

46 "fast-json-patch": "^3.1.1",

47 "fastify": "^4.26.0",

48 "pi-acp": "0.0.33",

49 "pi-mcp-adapter": "2.32.1",

50 "prisma": "5.22.0",

51 "simple-git": "^3.22.0",

dist/runtime/acp/agents/native-agent.jsView file

Lines 1-21javascript

1import { execFile } from 'node:child_process';

2import { constants } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/runtime/acp/agents/native-agent.jsView on unpkg · L1

3import { access, stat } from 'node:fs/promises';

dist/runtime/acp/process-manager.jsView file

Lines 459-499javascript

459 await Promise.all(groups.map((group) => adapter.signalProcessGroup(group, 'SIGTERM')));

460 if (root)

461 await adapter.signalProcess(root,

vendor/pi/examples/extensions/doom-overlay/doom-engine.tsView file

Lines 44-84typescript

44 return this._height;

45 }

47 async init(): Promise<void> {

48 // Locate WASM build

49 const __dirname = dirname(fileURLToPath

dist/web/assets/index-DJqjl4es.jsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/index-DJqjl4es.jsView on unpkg · L12

dist/utils/process-launch.test.jsView file

Lines 1-21javascript

1import { execFileSync, spawn, spawnSync } from 'node:child_process';

2import { chmodSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/utils/process-launch.test.jsView on unpkg · L1

3import { randomUUID } from 'node:crypto';

vendor/pi/dist/bundle/chunks/bedrock-converse-stream.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

vendor/pi/dist/bundle/chunks/bedrock-converse-stream.jsView on unpkg · L35

High

node_modules/@prisma/client/runtime/binary.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/@prisma/client/runtime/binary.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

node_modules/@shitiandmw/node-pty/scripts/gen-compile-commands.jsView file

7console.log(`\x1b[32m> Generating compile_commands.json...\x1b[0m`); L8: execSync('npx --offline node-gyp configure -- -f compile_commands_json');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

node_modules/@shitiandmw/node-pty/scripts/gen-compile-commands.jsView on unpkg · L7

node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dllView file

•path = node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dll kind = native_binary sizeBytes = 106528 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node_modules/@shitiandmw/node-pty/third_party/conpty/1.23.251008001/win10-arm64/conpty.dllView on unpkg

vendor/pi/examples/extensions/doom-overlay/doom/build/doom.wasmView file

•path = [redacted]-overlay/doom/build/doom.wasm kind = wasm_module sizeBytes = 380169 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/pi/examples/extensions/doom-overlay/doom/build/doom.wasmView on unpkg

vendor/pi/bin/pi.cmdView file

•path = vendor/pi/bin/pi.cmd kind = build_helper sizeBytes = 34 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/pi/bin/pi.cmdView on unpkg

dist/web/assets/ts.worker-BH9nVgjN.jsView file

•path = dist/web/assets/ts.worker-BH9nVgjN.js kind = oversized_source_file sizeBytes = 7010226 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/web/assets/ts.worker-BH9nVgjN.jsView on unpkg

dist/executors/default-profiles.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 92

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/executors/default-profiles.jsonView on unpkg

node_modules/@shitiandmw/node-pty/lib/unixTerminal.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@shitiandmw/node-pty/lib/unixTerminal.jsView on unpkg

node_modules/@shitiandmw/node-pty/lib/windowsPtyAgent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/@shitiandmw/node-pty/lib/windowsPtyAgent.jsView on unpkg

agent-tower@0.7.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code