alvin-bot@5.71.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

alvin-bot@5.71.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

claude-bridge/src/claude.jsView file

2L3: const { spawn } = require('child_process'); L4: const crypto = require('crypto');

High

Child Process

Package source references child process execution.

claude-bridge/src/claude.jsView on unpkg · L2

2L3: const { spawn } = require('child_process'); L4: const crypto = require('crypto');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

claude-bridge/src/claude.jsView on unpkg · L2

2L3: const { spawn } = require('child_process'); L4: const crypto = require('crypto'); L5: L6: const CLAUDE_BIN = process.env.CLAUDE_BIN || 'claude'; L7: ... L105: const SCRUB_WHITELIST = new Set([ L106: 'API_KEY', 'API_KEYS', 'API_URL', 'BASE_URL', 'BASE64', L107: 'HTTP_GET', 'HTTP_POST', 'HTTP_PUT', 'HTTP_DELETE', 'HTTP_PATCH', ... L293: L294: // Idle timeout: reset on every stdout activity. L295: // Claude is alive as long as it produces output (tool calls, results, etc.)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

claude-bridge/src/claude.jsView on unpkg · L2

dist/providers/tool-executor.jsView file

1const _0x58b2fb=_0x5abc,_0x10f1ae=_0x5abc;(function(_0x258311,_0xa95a3){const _0x3d7510=_0x5abc,_0x4ba227=_0x5abc,_0x35260d=_0x258311();while(!![]){try{const _0x582824=-parseInt(_0...

High

Shell

Package source references shell execution.

dist/providers/tool-executor.jsView on unpkg · L1

bin/cli.jsView file

22Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L22: import { homedir } from "os"; L23: import { execSync } from "child_process"; L24: import { initI18n, t, getLocale } from "../dist/i18n.js"; ... L28: // Data directory — same logic as src/paths.ts L29: const DATA_DIR = process.env.ALVIN_DATA_DIR || join(homedir(), ".alvin-bot"); L30: ... L42: const ensureRL = () => { L43: if (!rl) rl = createInterface({ input: process.stdin, output: process.stdout }); L44: return rl; ... L83: try { L84: return JSON.parse(readFileSync(resolve(import.meta.dirname || ".", "../package.json"), "utf-8")).version; L85: } catch { return ""; }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cli.jsView on unpkg · L22

1312console.log(`\n The Claude Agent SDK needs the native Claude Code binary.`); L1313: console.log(` Install with:\n curl -fsSL https://claude.ai/install.sh | sh`); L1314: console.log(` (npm install @anthropic-ai/claude-code is the alternative path.)\n`); ... L1320: try { L1321: execSync("curl -fsSL https://claude.ai/install.sh | sh", { stdio: "inherit", timeout: 120_000 }); L1322: const localBin = join(homedir(), ".local", "bin"); L1323: if (!process.env.PATH.includes(localBin)) { L1324: process.env.PATH = `${localBin}:${process.env.PATH || ""}`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L1312

22import { homedir } from "os"; L23: import { execSync } from "child_process"; L24: import { initI18n, t, getLocale } from "../dist/i18n.js"; ... L28: // Data directory — same logic as src/paths.ts L29: const DATA_DIR = process.env.ALVIN_DATA_DIR || join(homedir(), ".alvin-bot"); L30: ... L42: const ensureRL = () => { L43: if (!rl) rl = createInterface({ input: process.stdin, output: process.stdout }); L44: return rl; ... L83: try { L84: return JSON.parse(readFileSync(resolve(import.meta.dirname || ".", "../package.json"), "utf-8")).version; L85: } catch { return ""; }

dist/middleware/auth.jsView file

1function _0x69a6(){const _0x15938e=['yxv0Ae1Vzgu','y29Kzq','[redacted]/','mJiZmJniwLjgz3K','DgvZDa','C2vHCMnO','C3vWzxjNCM91Ca','ywnJzxnZoM...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/middleware/auth.jsView on unpkg · L1

install.shView file

•path = install.sh kind = build_helper sizeBytes = 10656 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Source & flagged code

13 flagged

claude-bridge/src/claude.jsView file

Lines 1-22javascript

1'use strict';

2

3const { spawn } = require('child_process');

4const crypto = require('crypto');

High

Child Process

Package source references child process execution.

claude-bridge/src/claude.jsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

claude-bridge/src/claude.jsView on unpkg · L2

5

6const CLAUDE_BIN = process.env.CLAUDE_BIN || 'claude';

7

Low

Weak Crypto

Package source references weak cryptographic algorithms.

claude-bridge/src/claude.jsView on unpkg · L2

8// --- Stable alias per CLI session ---

9// Each session keeps one alias so resumed requests don't accumulate different

10// names in the Claude context (which would leak un-replaced aliases in output).

11const PREFIXES = ['Chat', 'Dev', 'Run', 'Ask', 'Net', 'App', 'Zen', 'Arc', 'Dot', 'Amp', 'Hex', 'Orb', 'Elm', 'Oak', 'Sky'];

12const SUFFIXES = ['Kit', 'Box', 'Pod', 'Hub', 'Lab', 'Ops', 'Bay', 'Tap', 'Rim', 'Fog', 'Dew', 'Fin', 'Gem', 'Jet', 'Cog'];

13const pick = (arr) => arr[Math.floor(Math.random() * arr.length)];

14const sessionAliasMap = new Map(); // sessionId → { alias, aliasLower, lastUsed }

15const sessionTokenMaps = new Map(); // sessionId → Map<original, replacement>

16

17function getSessionAlias(sessionId) {

18 if (!sessionId) {

19 const alias = pick(PREFIXES) + pick(SUFFIXES);

20 return { alias, aliasLower: alias.toLowerCase() };

21 }

22 let entry = sessionAliasMap.get(sessionId);

dist/providers/tool-executor.jsView file

Lines 1-1javascript

1const _0x58b2fb=_0x5abc,_0x10f1ae=_0x5abc;(function(_0x258311,_0xa95a3){const _0x3d7510=_0x5abc,_0x4ba227=_0x5abc,_0x35260d=_0x258311();while(

bin/cli.jsView file

Lines 2-42javascript

2

3/**

4 * Alvin Bot CLI — Setup, manage, and chat with your AI agent.

5 *

6 * Usage:

7 * alvin-bot setup — Interactive setup wizard

8 * alvin-bot tui — Terminal chat UI

9 * alvin-bot doctor — Check configuration

10 * alvin-bot audit — Security health check

11 * alvin-bot update — Pull latest & rebuild

12 * alvin-bot start — Start the bot

dist/middleware/auth.jsView file

1function _0x69a6(){const _0x15938e=['yxv0Ae1Vzgu','y29Kzq','[redacted]/','mJiZmJniwLjgz3K','DgvZDa','C2vHCMnO','C3vWzxjNCM91Ca','ywnJzxnZoM...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/middleware/auth.jsView on unpkg · L1

install.shView file

•path = install.sh kind = build_helper sizeBytes = 10656 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Lines 1292-1332javascript

1292 } catch {}

1293 for (const p of [join(homedir(), ".local", "bin", "claude"), "/usr/local/bin/claude"]) {

1294 if (existsSync(p)) return p;

1295 }

1296 return null;

1297}

1298

1299/**

1300 * Interactive Claude SDK setup: ensures the native claude CLI is installed,

1301 * runs `claude auth login` if not authenticated. Returns { ok: bool }.

1302 *

1303 * Designed to be called both from the setup wizard and from

1304 * `alvin-bot provider switch claude-sdk`.

1305 */

1306async function configureClaudeSdkInline() {

1307 let cliPath = findClaudeBinary();

1308 if (cliPath) {

1309 console.log(` ✅ Claude CLI found at ${cliPath}`);

1310 } else {

1311 console.log(` ⚠️ Claude CLI not found (native binary required).`);

1312 console.log(`\n The Claude Agent SDK needs the native Claude Code binary.`);

1313 console.log(` Install with:\n curl -fsSL https://claude.ai/install.sh | sh`);

1314 console.log(` (npm install @anthropic-ai/claude-code is the alternative path.)\n`);

1315

1316 const yc = getLocale() === "de" ? ["j", "ja", "y", "yes"] : ["y", "yes"];

1317 const doInstall = (await ask(` Install now via the official installer? (y/n): `)).trim().toLowerCase();

1318 if (yc.includes(doInstall)) {

1319 console.log(`\n Installing Claude CLI...`);

1320 try {

1321 execSync("curl -fsSL https://claude.ai/install.sh | sh", { stdio: "inherit", timeout: 120_000 });

1322 const localBin = join(homedir(), ".local", "bin");

1323 if (!process.env.PATH.includes(localBin)) {

1324 process.env.PATH = `${localBin}:${process.env.PATH || ""}`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L1312

1325 }

1326 cliPath = findClaudeBinary();

1327 if (cliPath) console.log(` ✅ Claude CLI installed at ${cliPath}\n`);

1328 } catch {

1329 console.log(` ❌ Installation failed. Run manually: curl -fsSL https://claude.ai/install.sh | sh`);

1330 }

1331 }

1332 }

Lines 4312-4352javascript

4312 break;

4313 }

4314 const url = process.argv[4];

4315 if (!url) {

4316 console.error(`Usage: alvin-bot browser ${sub} <url> [args]`);

4317 process.exit(1);

4318 }

4319 const ctx = browser.contexts()[0] || (await browser.newContext());

4320 const page = await ctx.newPage();

4321 try {

4322 await page.goto(url, { waitUntil: "domcontentloaded", timeout: 30000 });

4323 if (sub === "goto") {

4324 console.log(JSON.stringify({ url: page.url(), title: await page.title() }, null, 2));

4325 } else if (sub === "shot" || sub === "screenshot") {

4326 const name = process.argv[5] || `shot_${Date.now()}.png`;

4327 const { CDP_SCREENSHOTS_DIR } = await import("../dist/paths.js");

4328 const out = name.startsWith("/") ? name : `${CDP_SCREENSHOTS_DIR}/${name}`;

4329 await page.screenshot({ path: out, fullPage: true });

4330 console.log(JSON.stringify({ url: page.url(), title: await page.title(), screenshot: out }, null, 2));

4331 } else if (sub === "eval") {

4332 const js = process.argv[5] || "document.title";

4333 const result = await page.evaluate(new Function(`return (${js})`));

4334 console.log(JSON.stringify({ url: page.url(), result }, null, 2));

Low

Eval

Package source references a known benign dynamic code generation pattern.

bin/cli.jsView on unpkg · L4332

4335 }

4336 } finally {

4337 await page.close();

4338 }

4339 } finally {

4340 await browser.close();

4341 }

4342 break;

4343 }

4344 default:

4345 console.log(`alvin-bot browser — bot-managed Chromium (CDP on port 9222)

4346

4347 start [headful|headless] Start Chromium with CDP (default: headless)

4348 stop Stop the bot-managed Chromium

4349 status Show PID + binary + endpoint

4350 doctor Diagnose common issues

4351 goto <url> Navigate and print page info as JSON

4352 shot <url> [filename] Screenshot to ~/.alvin-bot/browser/screenshots/