agentgui@1.0.1127: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

agentgui@1.0.1127: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

database.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = agentgui@1.0.1126 matchedIdentity = npm:YWdlbnRndWk:1.0.1126 similarity = 0.827 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

database.jsView on unpkg

108L109: export default { queries }; ... L110:

High

Child Process

Package source references child process execution.

database.jsView on unpkg · L108

108L109: export default { queries }; ... L110:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

database.jsView on unpkg · L108

38L39: const require = createRequire(import.meta.url); L40:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

database.jsView on unpkg · L38

108L109: export default { queries }; ... L110:

Low

Eval

Package source references a known benign dynamic code generation pattern.

database.jsView on unpkg · L108

lib/terminal.jsView file

23function defaultShell() { L24: if (os.platform() === 'win32') return process.env.COMSPEC || 'cmd.exe'; L25: return process.env.SHELL || '/bin/bash';

High

Shell

Package source references shell execution.

lib/terminal.jsView on unpkg · L23

test-integration.jsView file

22import crypto from 'crypto'; L23: import http from 'http'; L24: import { WebSocket } from 'ws'; ... L242: // Paths starting with ~ should expand to homedir before confinement. L243: const home = os.homedir(); L244: const file = path.join(home, '.bashrc'); L245: if (fs.existsSync(file)) { ... L276: try { L277: const _decoded = Buffer.from(_auth.slice(6), 'base64').toString('utf8'); L278: const _ci = _decoded.indexOf(':'); ... L286: } L287: if (!_ok) { res.writeHead(401); res.end('Unauthorized'); return; }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

test-integration.jsView on unpkg · L22

electron/main.jsView file

10const BASE_URL = (process.env.BASE_URL || '/gm').replace(/\/+$/, ''); L11: const APP_URL = `http://localhost:${PORT}${BASE_URL}/`; L12: ... L19: // Electron/Chromium app runtime just to host the background HTTP server. L20: serverProcess = spawn(process.execPath, ['server.js'], { L21: cwd: ROOT, ... L24: }); L25: serverProcess.stdout.on('data', d => process.stdout.write(`[server] ${d}`)); L26: serverProcess.stderr.on('data', d => process.stderr.write(`[server] ${d}`));

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

electron/main.jsView on unpkg · L10

10Trigger-reachable command-output exfiltration chain: manifest.main -> electron/main.js L10: const BASE_URL = (process.env.BASE_URL || '/gm').replace(/\/+$/, ''); L11: const APP_URL = `http://localhost:${PORT}${BASE_URL}/`; L12: ... L19: // Electron/Chromium app runtime just to host the background HTTP server. L20: serverProcess = spawn(process.execPath, ['server.js'], { L21: cwd: ROOT, ... L24: }); L25: serverProcess.stdout.on('data', d => process.stdout.write(`[server] ${d}`)); L26: serverProcess.stderr.on('data', d => process.stderr.write(`[server] ${d}`));

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

electron/main.jsView on unpkg · L10

Source & flagged code

11 flagged

package.jsonView file

Lines 2-42json

2 "name": "agentgui",

3 "version": "1.0.1127",

4 "description": "Multi-agent ACP client with real-time communication",

5 "type": "module",

6 "main": "electron/main.js",

7 "bin": {

8 "agentgui": "./bin/gmgui.cjs"

9 },

10 "repository": {

11 "type": "git",

12 "url": "git+https://github.com/AnEntrypoint/agentgui.git"

13 },

14 "bugs": {

15 "url": "https://github.com/AnEntrypoint/agentgui/issues"

16 },

17 "homepage": "https://github.com/AnEntrypoint/agentgui#readme",

18 "scripts": {

19 "start": "bun server.js || node server.js",

20 "dev": "node server.js --watch",

21 "test": "bun test.js && bun test-integration.js",

22 "postinstall": "node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 "electron": "electron electron/main.js",

24 "electron:dev": "PORT=3000 electron electron/main.js"

25 },

26 "dependencies": {

27 "@anthropic-ai/claude-code": "^2.1.37",

28 "@google/gemini-cli": "latest",

29 "@kilocode/cli": "latest",

30 "better-sqlite3": "^12.9.0",

31 "busboy": "^1.6.0",

32 "ccsniff": "github:AnEntrypoint/ccsniff#main",

33 "express": "^5.2.1",

34 "fsbrowse": "latest",

35 "lru-cache": "^11.2.7",

36 "opencode-ai": "^1.2.15",

37 "webjsx": "^0.0.73",

38 "ws": "^8.14.2",

39 "xstate": "^5.32.0"

40 },

41 "devDependencies": {

42 "electron": "^35.0.0"

database.jsView file

Lines 18-58javascript

18 getResumableConversations: () => [],

19 getActiveSessions: () => [],

20 getSessionsProcessingLongerThan: () => [],

21 getConversationsList: () => [],

22 getConversation: ()

lib/terminal.jsView file

Lines 3-43javascript

3// PASSWORD Basic-auth check. This module does no auth on its own - never

4// expose without the gate.

5

6import os from 'os';

7import { spawn } from 'child_process';

8import crypto from 'crypto';

test-integration.jsView file

Lines 2-42javascript

2 * Integration tests for agentgui: WS streaming, file operations, auth, sessions, offline/reconnect.

3 *

4 * Philosophy (matching test.js): mock-free, direct production code on real HTTP/WS servers,

5 *

electron/main.jsView file

10const BASE_URL = (process.env.BASE_URL || '/gm').replace(/\/+$/, ''); L11: const APP_URL = `http://localhost:${PORT}${BASE_URL}/`; L12: ... L19: // Electron/Chromium app runtime just to host the background HTTP server. L20: serverProcess = spawn(process.execPath, ['server.js'], { L21: cwd: ROOT, ... L24: }); L25: serverProcess.stdout.on('data', d => process.stdout.write(`[server] ${d}`)); L26: serverProcess.stderr.on('data', d => process.stderr.write(`[server] ${d}`));

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

electron/main.jsView on unpkg · L10

10Trigger-reachable command-output exfiltration chain: manifest.main -> electron/main.js L10: const BASE_URL = (process.env.BASE_URL || '/gm').replace(/\/+$/, ''); L11: const APP_URL = `http://localhost:${PORT}${BASE_URL}/`; L12: ... L19: // Electron/Chromium app runtime just to host the background HTTP server. L20: serverProcess = spawn(process.execPath, ['server.js'], { L21: cwd: ROOT, ... L24: }); L25: serverProcess.stdout.on('data', d => process.stdout.write(`[server] ${d}`)); L26: serverProcess.stderr.on('data', d => process.stderr.write(`[server] ${d}`));

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

electron/main.jsView on unpkg · L10