aicodeman@1.3.5: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

aicodeman@1.3.5: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/ai-checker-base.jsView file

24*/ L25: import { execSync, spawn as childSpawn } from 'node:child_process'; L26: import { existsSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

dist/ai-checker-base.jsView on unpkg · L24

dist/remote-hosts.jsView file

6import { promisify } from 'node:util'; L7: const execAsync = promisify(exec); L8: const REMOTE_HOSTS_FILE = 'remote-hosts.json';

High

Shell

Package source references shell execution.

dist/remote-hosts.jsView on unpkg · L6

dist/web/self-update.jsView file

23*/ L24: import { spawn, execFileSync } from 'node:child_process'; L25: import { existsSync, readFileSync, writeFileSync, renameSync, copyFileSync, chmodSync } from 'node:fs'; ... L33: const require = createRequire(import.meta.url); L34: const { version: APP_VERSION } = require('../../package.json'); L35: /** systemd unit name (matches install.sh + scripts/codeman-web.service). */ ... L200: return null; L201: return JSON.parse(readFileSync(STATUS_FILE, 'utf-8')); L202: } ... L222: // ───────────────────────────────────────────────────────────────────────────── L223: /** Run a command, returning trimmed stdout, or null on any error. */ L224: function tryExec(cmd, args, cwd, timeout = EXEC_TIMEOUT_MS) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/web/self-update.jsView on unpkg · L23

scripts/postinstall.jsView file

23Install-time AI-agent control hijack evidence: L23: join(home, '.local/bin/claude'), L24: join(home, '.claude/local/claude'), L25: '/usr/local/bin/claude', ... L259: L260: const { mkdirSync, copyFileSync } = await import('fs'); L261: mkdirSync(vendorDir, { recursive: true }); L262: copyFileSync(join(xtermDir, 'css', 'xterm.css'), join(vendorDir, 'xterm.css')); L263: ... L272: // Fallback: copy unminified L273: copyFileSync(join(xtermDir, 'lib', 'xterm.js'), join(vendorDir, 'xterm.min.js')); L274: copyFileSync(join(fitDir, 'lib', 'addon-fit.js'), join(vendorDir, 'xterm-addon-fit.min.js')); L275: copyFileSync(join(serializeDir, 'lib', 'addon-serialize.js'), join(vendorDir, 'xterm-addon-serialize.min.js')); Payload evidence from dist/web/public/subagent-windows.69b60c35.js: L353: L354: con

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.jsView on unpkg · L23

7Cross-file remote execution chain: scripts/postinstall.js spawns dist/web/public/vendor/xterm-addon-webgl.min.js; helper contains network access plus dynamic code execution. L7: L8: import { execSync, spawn } from 'child_process'; L9: import { chmodSync, existsSync } from 'fs'; ... L20: // Claude CLI search paths (must match src/session.ts) L21: const home = homedir(); L22: const CLAUDE_SEARCH_PATHS = [ ... L33: L34: const useColor = process.stdout.isTTY && !process.env.NO_COLOR; L35: ... L83: const ok = await new Promise((resolve) => { L84: const conn = net.createConnection({ port, host: '127.0.0.1' }); L85: conn.once('connect', () => { conn.destroy(); resolve(true); });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L7

dist/web/public/gesture/wasm/vision_wasm_nosimd_internal.wasmView file

•path = dist/web/public/gesture/wasm/vision_wasm_nosimd_internal.wasm kind = wasm_module sizeBytes = 9448638 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/web/public/gesture/wasm/vision_wasm_nosimd_internal.wasmView on unpkg

dist/web/public/upload.html.brView file

•path = dist/web/public/upload.html.br kind = compressed_blob sizeBytes = 1836 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/web/public/upload.html.brView on unpkg

dist/web/public/panels-ui.ca03853f.js.gzView file

•path = dist/web/public/panels-ui.ca03853f.js.gz kind = high_entropy_blob sizeBytes = 24141 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web/public/panels-ui.ca03853f.js.gzView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 1-33json

1{

2 "name": "aicodeman",

3 "version": "1.3.5",

4 "description": "Mission control for AI coding agents - run 20 autonomous agents with real-time monitoring and session persistence",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "bin": {

9 "aicodeman": "./dist/index.js",

10 "codeman": "./dist/index.js"

11 },

12 "scripts": {

13 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L13

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L13

14 "build": "node scripts/build.mjs",

15 "build:gesture": "node scripts/build-gesture-bundle.mjs",

16 "start": "NODE_COMPILE_CACHE=${HOME}/.codeman/compile-cache node dist/index.js",

17 "dev": "tsx src/index.ts web",

18 "web": "node dist/index.js web",

19 "clean": "rm -rf dist",

20 "test": "vitest run --config config/vitest.config.ts",

21 "test:watch": "vitest --config config/vitest.config.ts",

22 "test:coverage": "vitest run --config config/vitest.config.ts --coverage",

23 "test:ci": "vitest run --config config/vitest.ci.config.ts",

24 "check:frontend-syntax": "node scripts/check-frontend-syntax.mjs",

25 "typecheck": "tsc --noEmit",

26 "lint": "eslint --config config/eslint.config.js 'src/**/*.ts'",

27 "lint:fix": "eslint --config config/eslint.config.js 'src/**/*.ts' --fix",

28 "format": "prettier --write 'src/**/*.ts' 'src/web/public/**/*.{js,css,html,json}'",

29 "format:check": "prettier --check 'src/**/*.ts' 'src/web/public/**/*.{js,css,html,json}'",

30 "check:public-assets": "node scripts/check-public-assets.mjs",

31 "capture:subagents": "node scripts/capture-subagent-screenshots.mjs",

32 "changeset": "changeset",

33 "version-packages": "changeset version && npm install --package-lock-only && node scripts/check-lockfile-sync.mjs",

dist/ai-checker-base.jsView file

Lines 4-44javascript

4 * Provides shared functionality for AI-powered checkers that spawn fresh Claude CLI

5 * sessions to analyze terminal output. This base class handles:

6 * - Mux session spawning and cleanup

7

dist/remote-hosts.jsView file

Lines 1-26javascript

1import { existsSync, mkdirSync } from 'node:fs';

2import fs from 'node:fs/promises';

3import { join } from 'node:path';

4import { homedir } from 'node:os';

dist/web/self-update.jsView file

Lines 3-43javascript

3 *

4 * Powers App Settings → Updates. Codeman is installed as a git clone and run

5 * under systemd (Linux) or launchd (macOS); updating means `git checkout <release

6

scripts/postinstall.jsView file

Lines 1-43javascript

1#!/usr/bin/env node

2

3/**

4 * Codeman postinstall verification script

5 * Runs after `npm install` to check environment readiness

6 */

7

8import { execSync, spawn } from 'child_process';

9import { chmodSync, existsSync } from

dist/web/public/gesture/wasm/vision_wasm_nosimd_internal.wasmView file

•path = dist/web/public/gesture/wasm/vision_wasm_nosimd_internal.wasm kind = wasm_module sizeBytes = 9448638 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/web/public/gesture/wasm/vision_wasm_nosimd_internal.wasmView on unpkg

dist/web/public/upload.html.brView file

•path = dist/web/public/upload.html.br kind = compressed_blob sizeBytes = 1836 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/web/public/upload.html.brView on unpkg

dist/web/public/panels-ui.ca03853f.js.gzView file

•path = dist/web/public/panels-ui.ca03853f.js.gz kind = high_entropy_blob sizeBytes = 24141 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/web/public/panels-ui.ca03853f.js.gzView on unpkg

Lines 245-285javascript

245const srcDir = join(import.meta.dirname, '..', 'src');

246const isGlobalInstall = !existsSync(srcDir);

247

248if (isGlobalInstall) {

249 console.log(colors.dim(' Skipping vendor copy (global install — dist/ already has built assets)'));

250} else {

251 try {

252 const require = createRequire(import.meta.url);

253 const xtermDir = join(require.resolve('@xterm/xterm'), '..', '..');

254 const fitDir = join(require.resolve('@xterm/addon-fit'), '..', '..');

255 const serializeDir = join(require.resolve('@xterm/addon-serialize'), '..', '..');

256 const webglDir = join(require.resolve('@xterm/addon-webgl'), '..', '..');

257 const unicode11Dir = join(require.resolve('@xterm/addon-unicode11'), '..', '..');

258 const vendorDir = join(srcDir, 'web', 'public', 'vendor');

259

260 const { mkdirSync, copyFileSync } = await import('fs');

261 mkdirSync(vendorDir, { recursive: true });

262 copyFileSync(join(xtermDir, 'css', 'xterm.css'), join(vendorDir, 'xterm.css'));

263

264 // Minify xterm JS for dev vendor dir (npm packages don't ship .min.js)

265 try {

266 execSync(`npx esbuild "${join(xtermDir, 'lib', 'xterm.js')}" --minify --outfile="${join(vendorDir, 'xterm.min.js')}"`, { stdio: 'pipe' });

267 execSync(`npx esbuild "${join(fitDir, 'lib', 'addon-fit.js')}" --minify --outfile="${join(vendorDir, 'xterm-addon-fit.min.js')}"`, { stdio: 'pipe' });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L265

268 execSync(`npx esbuild "${join(serializeDir, 'lib', 'addon-serialize.js')}" --minify --outfile="${join(vendorDir, 'xterm-addon-serialize.min.js')}"`, { stdio: 'pipe' });

269 execSync(`npx esbuild "${join(unicode11Dir, 'lib', 'addon-unicode11.js')}" --minify --outfile="${join(vendorDir, 'xterm-addon-unicode11.min.js')}"`, { stdio: 'pipe' });

270 console.log(colors.green('✓ xterm vendor files copied to src/web/public/vendor/'));

271 } catch {

272 // Fallback: copy unminified

273 copyFileSync(join(xtermDir, 'lib', 'xterm.js'), join(vendorDir, 'xterm.min.js'));

274 copyFileSync(join(fitDir, 'lib', 'addon-fit.js'), join(vendorDir, 'xterm-addon-fit.min.js'));

275 copyFileSync(join(serializeDir, 'lib', 'addon-serialize.js'), join(vendorDir, 'xterm-addon-serialize.min.js'));

276 copyFileSync(join(unicode11Dir, 'lib', 'addon-unicode11.js'), join(vendorDir, 'xterm-addon-unicode11.min.js'));

277 console.log(colors.green('✓ xterm vendor files copied') + colors.dim(' (unminified — esbuild not available)'));

278 }

279

280 // WebGL addon: copy unminified (matches build script behavior)

281 copyFileSync(join(webglDir, 'lib', 'addon-webgl.js'), join(vendorDir, 'xterm-addon-webgl.min.js'));

282

283 // xterm-zerolag-input: bundle local package as IIFE for <script> tag loading

284 try {

285 const zerolagSrc = join(import.meta.dirname, '..', 'packages', 'xterm-zerolag-input', 'src', 'zerolag-input-addon.ts');