agenthub-ai@1.2.1: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

agenthub-ai@1.2.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

dist-publish/main.jsView file

51and subsequent starts auto-reconnect; on token invalidation (app unbind/delete) the local L52: token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiting for app input...",pairingQr... L53: `);o>0&&c.shift();for(let l=c.length-1;l>=0;l--){let u=c[l];if(!u)continue;let g=u.match(/"cwd"\s*:\s*"((?:[^"\\]|\\.)*)"/);if(!g)continue;let m;try{m=JSON.parse(`"${g[1]}"`)}catch...

High

Child Process

Package source references child process execution.

dist-publish/main.jsView on unpkg · L51

51and subsequent starts auto-reconnect; on token invalidation (app unbind/delete) the local L52: token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiting for app input...",pairingQr... L53: `);o>0&&c.shift();for(let l=c.length-1;l>=0;l--){let u=c[l];if(!u)continue;let g=u.match(/"cwd"\s*:\s*"((?:[^"\\]|\\.)*)"/);if(!g)continue;let m;try{m=JSON.parse(`"${g[1]}"`)}catch...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist-publish/main.jsView on unpkg · L51

51and subsequent starts auto-reconnect; on token invalidation (app unbind/delete) the local L52: token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiting for app input...",pairingQr... L53: `);o>0&&c.shift();for(let l=c.length-1;l>=0;l--){let u=c[l];if(!u)continue;let g=u.match(/"cwd"\s*:\s*"((?:[^"\\]|\\.)*)"/);if(!g)continue;let m;try{m=JSON.parse(`"${g[1]}"`)}catch...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist-publish/main.jsView on unpkg · L51

51Trigger-reachable command-output exfiltration chain: manifest.main -> dist-publish/main.js L51: and subsequent starts auto-reconnect; on token invalidation (app unbind/delete) the local L52: token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiting for app input...",pairingQr... L53: `);o>0&&c.shift();for(let l=c.length-1;l>=0;l--){let u=c[l];if(!u)continue;let g=u.match(/"cwd"\s*:\s*"((?:[^"\\]|\\.)*)"/);if(!g)continue;let m;try{m=JSON.parse(`"${g[1]}"`)}catch...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist-publish/main.jsView on unpkg · L51

1Trigger-reachable persistence chain: manifest.main -> dist-publish/main.js L1: #!/usr/bin/env node L2: var Di=Object.create;var Et=Object.defineProperty;var Mi=Object.getOwnPropertyDescriptor;var _i=Object.getOwnPropertyNames;var ji=Object.getPrototypeOf,Li=Object.prototype.hasOwnPr... L3: ... L51: and subsequent starts auto-reconnect; on token invalidation (app unbind/delete) the local L52: token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiting for app input...",pairingQr... L53: `);o>0&&c.shift();for(let l=c.length-1;l>=0;l--){let u=c[l];if(!u)continue;let g=u.match(/"cwd"\s*:\s*"((?:[^"\\]|\\.)*)"/);if(!g)continue;let m;try{m=JSON.parse(`"${g[1]}"`)}catch... L54: `);i>0&&c.shift();let l=""

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist-publish/main.jsView on unpkg · L1

1#!/usr/bin/env node L2: var Di=Object.create;var Et=Object.defineProperty;var Mi=Object.getOwnPropertyDescriptor;var _i=Object.getOwnPropertyNames;var ji=Object.getPrototypeOf,Li=Object.prototype.hasOwnPr... L3: ... L51: and subsequent starts auto-reconnect; on token invalidation (app unbind/delete) the local L52: token is cleared and the agent exits.`,pairingCode:"[AgentHubAgent] pairing code: {{code}}",pairingExpires:"[AgentHubAgent] expires at {{time}}, waiting for app input...",pairingQr... L53: `);o>0&&c.shift();for(let l=c.length-1;l>=0;l--){let u=c[l];if(!u)continue;let g=u.match(/"cwd"\s*:\s*"((?:[^"\\]|\\.)*)"/);if(!g)continue;let m;try{m=JSON.parse(`"${g[1]}"`)}catch... L54: `);i>0&&c.shift();let l="",u=0;for(let g=c.length-1;g>=0;g--){let m=c[g];if(m&&!(!m.includes('"type":

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-publish/main.jsView on unpkg · L1

Source & flagged code

6 flagged

dist-publish/main.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2var Di=Object.create;var Et=Object.defineProperty;var Mi=Object.getOwnPropertyDescriptor;var _i=Object.getOwnPropertyNames;var ji=Object.getPrototypeOf,Li=Object.prototype.hasOwnProperty;var E=(n,e,t)=>()=>{if(t)throw t[0];try{return n&&(e=n(n=0)),e}catch(r){throw t=[r],r}};var B=(n,e)=>()=>{try{return e||n((e={exports:{}}).exports,e),e.exports}catch(t){throw e=0,t}},yn=(n,e)=>{for(var t in e)Et(n,t,{get:e[t],enumerable:!0})},Fi=(n,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of _i(e))!Li.call(n,i)&&i!==t&&Et(n,i,{get:()=>e[i],enumerable:!(r=Mi(e,i))||r.enumerable});return ...

3

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist-publish/main.jsView on unpkg · L1

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-publish/main.jsView on unpkg · L1

4\u7528\u6CD5: agenthub [\u547D\u4EE4]

5

6\u547D\u4EE4:

7 (\u65E0) \u9ED8\u8BA4\u542F\u52A8\uFF1A\u6709 token \u91CD\u8FDE\uFF0C\u65E0 token \u7533\u8BF7\u914D\u5BF9\u7801\u7B49 App \u8F93\u5165\uFF1Bdaemon \u5DF2\u5728\u8DD1\u5219\u63D0\u793A\u540E\u9000\u51FA

8 unbind \u89E3\u7ED1\u5F53\u524D\u8D26\u53F7\uFF08\u6E05\u672C\u5730 token + Server archive \u8BE5 agent\uFF09\uFF0Cdaemon \u5728\u8DD1\u4F1A\u5148\u505C

9 repair \u91CD\u65B0\u914D\u5BF9\uFF08\u5FFD\u7565\u65E7 token \u7533\u8BF7\u65B0\u7801\uFF1B\u6210\u529F\u540E\u65E7 agent \u5F52\u6863\uFF1Bdaemon \u5728\u8DD1\u4F1A\u5148\u505C\u518D\u91CD\u542F\uFF09

10 install \u5B89\u88C5\u4E3A\u81EA\u542F\u670D\u52A1\uFF08Windows \u6CE8\u518C\u8868 Run / Linux systemd / macOS launchd\uFF09

11 uninstall \u5378\u8F7D\u81EA\u542F\u670D\u52A1\uFF08daemon \u5728\u8DD1\u4F1A\u4E00\u5E76\u505C\u6B62\uFF09

12 status \u67E5\u770B\u7ED1\u5B9A\u4FE1\u606F\u4E0E\u670D\u52A1\u72B6\u6001\uFF08\u4E0D\u8FDE server\uFF09

13 update \u68C0\u67E5\u5E76\u66F4\u65B0\u5230\u6700\u65B0\u7248\uFF08\u505C daemon + npm install + \u91CD\u542F\uFF1B\u52FF\u7528 npm update \u4F1A\u56E0 claude.exe \u5360\u7528\u5931\u8D25\uFF09

14 lang \u5207\u6362\u754C\u9762\u8BED\u8A00\uFF08\u4E2D\u6587/English\uFF09\uFF0C\u91CD\u542F\u540E\u751F\u6548

15 -v \u67E5\u770B\u7248\u672C\u53F7\uFF08agent + SDK\uFF09

16 help \u663E\u793A\u6B64\u5E2E\u52A9

17

18\u73AF\u5883\u53D8\u91CF:

19 WORKDIR \u5DE5\u4F5C\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09

20 MACHINE \u673A\u5668\u540D\uFF08\u9ED8\u8BA4 hostname\uFF09

21 AGENT_NAME Agent \u663E\u793A\u540D\uFF08\u9ED8\u8BA4 default\uFF09

Long lines were clipped for display.

Lines 31-71javascript

31 (none) Default: reconnect with stored token, or request pairing code; if daemon already running, prints notice and exits

32 unbind Unbind current account (clear local token + archive server agent); stops daemon first if running

33 repair Re-pair (ignore old token, request new code; old agent archived); stops and restarts daemon if installed

34 install Install as auto