alvin-bot@5.88.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

alvin-bot@5.88.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

16 flagged · loading source

claude-bridge/src/claude.jsView file

2L3: const { spawn } = require('child_process'); L4: const crypto = require('crypto');

High

Child Process

Package source references child process execution.

claude-bridge/src/claude.jsView on unpkg · L2

2L3: const { spawn } = require('child_process'); L4: const crypto = require('crypto');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

claude-bridge/src/claude.jsView on unpkg · L2

2L3: const { spawn } = require('child_process'); L4: const crypto = require('crypto'); L5: L6: const CLAUDE_BIN = process.env.CLAUDE_BIN || 'claude'; L7: ... L106: const SCRUB_WHITELIST = new Set([ L107: 'API_KEY', 'API_KEYS', 'API_URL', 'BASE_URL', 'BASE64', L108: 'HTTP_GET', 'HTTP_POST', 'HTTP_PUT', 'HTTP_DELETE', 'HTTP_PATCH', ... L294: L295: // Idle timeout: reset on every stdout activity. L296: // Claude is alive as long as it produces output (tool calls, results, etc.)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

claude-bridge/src/claude.jsView on unpkg · L2

dist/providers/tool-executor.jsView file

1const _0x2ae36a=_0x1996,_0x401d0c=_0x1996;(function(_0x2beb70,_0x592752){const _0x1ebb0c=_0x1996,_0x225690=_0x1996,_0x5d669a=_0x2beb70();while(!![]){try{const _0x9284d1=-parseInt(_...

High

Shell

Package source references shell execution.

dist/providers/tool-executor.jsView on unpkg · L1

bin/cli.jsView file

22Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L22: import { homedir } from "os"; L23: import { execSync } from "child_process"; L24: import { initI18n, t, getLocale } from "../dist/i18n.js"; ... L28: // Data directory — same logic as src/paths.ts L29: const DATA_DIR = process.env.ALVIN_DATA_DIR || join(homedir(), ".alvin-bot"); L30: ... L42: const ensureRL = () => { L43: if (!rl) rl = createInterface({ input: process.stdin, output: process.stdout }); L44: return rl; ... L83: try { L84: return JSON.parse(readFileSync(resolve(import.meta.dirname || ".", "../package.json"), "utf-8")).version; L85: } catch { return ""; }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cli.jsView on unpkg · L22

1312console.log(`\n The Claude Agent SDK needs the native Claude Code binary.`); L1313: console.log(` Install with:\n curl -fsSL https://claude.ai/install.sh | sh`); L1314: console.log(` (npm install @anthropic-ai/claude-code is the alternative path.)\n`); ... L1320: try { L1321: execSync("curl -fsSL https://claude.ai/install.sh | sh", { stdio: "inherit", timeout: 120_000 }); L1322: const localBin = join(homedir(), ".local", "bin"); L1323: if (!process.env.PATH.includes(localBin)) { L1324: process.env.PATH = `${localBin}:${process.env.PATH || ""}`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L1312

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. bin/cli.js: import { existsSync, writeFileSync, readFileSync, mkdirSync, copyFileSync, readdirSync, statSync, accessSync, realpathSync, unlinkSync, constants as fsConstants } from "fs"; signup: "https://claude.ai", signup: "https://console.anthropic.com/settings/keys", signup: "https://claude.ai", signup: "https://console.groq.com", signup: "https://aistudio.google.com", signup: "https://build.nvidia.com", signup: "https://platform.openai.com",

dist/services/browser-manager.jsView file

1function _0x5c4e(){const _0x119e0d=['l2nSB3nL','DhjPBq','[redacted]','BMv0D29YA2LKBgu','C2HVDf8','yxbWBhK','[redacted]...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/services/browser-manager.jsView on unpkg · L1

dist/middleware/auth.jsView file

1(function(_0x5af036,_0x486665){const _0x120b1d=_0x1a7f,_0x2f3357=_0x1a7f,_0x326064=_0x5af036();while(!![]){try{const _0x2f30ae=-parseInt(_0x120b1d(0xd7))/(-0x11e1*-0x1+0xd2d+0x1*-0...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/middleware/auth.jsView on unpkg · L1

install.shView file

•path = install.sh kind = build_helper sizeBytes = 10656 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Source & flagged code

16 flagged

claude-bridge/src/claude.jsView file

Lines 1-22javascript

1'use strict';

2

3const { spawn } = require('child_process');

4const crypto = require('crypto');

High

Child Process

Package source references child process execution.

claude-bridge/src/claude.jsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

claude-bridge/src/claude.jsView on unpkg · L2

5

6const CLAUDE_BIN = process.env.CLAUDE_BIN || 'claude';

7

Low

Weak Crypto

Package source references weak cryptographic algorithms.

claude-bridge/src/claude.jsView on unpkg · L2

8// --- Stable alias per CLI session ---

9// Each session keeps one alias so resumed requests don't accumulate different

10// names in the Claude context (which would leak un-replaced aliases in output).

11const PREFIXES = ['Chat', 'Dev', 'Run', 'Ask', 'Net', 'App', 'Zen', 'Arc', 'Dot', 'Amp', 'Hex', 'Orb', 'Elm', 'Oak', 'Sky'];

12const SUFFIXES = ['Kit', 'Box', 'Pod', 'Hub', 'Lab', 'Ops', 'Bay', 'Tap', 'Rim', 'Fog', 'Dew', 'Fin', 'Gem', 'Jet', 'Cog'];

13const pick = (arr) => arr[Math.floor(Math.random() * arr.length)];

14const sessionAliasMap = new Map(); // sessionId → { alias, aliasLower, lastUsed }

15const sessionTokenMaps = new Map(); // sessionId → Map<original, replacement>

16

17function getSessionAlias(sessionId) {

18 if (!sessionId) {

19 const alias = pick(PREFIXES) + pick(SUFFIXES);

20 return { alias, aliasLower: alias.toLowerCase() };

21 }

22 let entry = sessionAliasMap.get(sessionId);

dist/providers/tool-executor.jsView file

Lines 1-1javascript

1const _0x2ae36a=_0x1996,_0x401d0c=_0x1996;(function(_0x2beb70,_0x592752){const _0x1ebb0c=_0x1996,_0x225690=_0x1996,_0x5d669a=_0x2beb70();while(

bin/cli.jsView file

Lines 2-42javascript

2

3/**

4 * Alvin Bot CLI — Setup, manage, and chat with your AI agent.

5 *

6 * Usage:

7 * alvin-bot setup — Interactive setup wizard

8 * alvin-bot tui — Terminal chat UI

9 * alvin-bot doctor — Check configuration

10 * alvin-bot audit — Security health check

11 * alvin-bot update — Pull latest & rebuild

12 * alvin-bot start — Start the bot

dist/services/browser-manager.jsView file

1function _0x5c4e(){const _0x119e0d=['l2nSB3nL','DhjPBq','[redacted]','BMv0D29YA2LKBgu','C2HVDf8','yxbWBhK','[redacted]...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/services/browser-manager.jsView on unpkg · L1

dist/middleware/auth.jsView file

1(function(_0x5af036,_0x486665){const _0x120b1d=_0x1a7f,_0x2f3357=_0x1a7f,_0x326064=_0x5af036();while(!![]){try{const _0x2f30ae=-parseInt(_0x120b1d(0xd7))/(-0x11e1*-0x1+0xd2d+0x1*-0...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/middleware/auth.jsView on unpkg · L1

install.shView file

•path = install.sh kind = build_helper sizeBytes = 10656 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Lines 1292-1332javascript

1292 } catch {}

1293 for (const p of [join(homedir(), ".local", "bin", "claude"), "/usr/local/bin/claude"]) {

1294 if (existsSync(p)) return p;

1295 }

1296 return null;

1297}

1298

1299/**

1300 * Interactive Claude SDK setup: ensures the native claude CLI is installed,

1301 * runs `claude auth login` if not authenticated. Returns { ok: bool }.

1302 *

1303 * Designed to be called both from the setup wizard and from

1304 * `alvin-bot provider switch claude-sdk`.

1305 */

1306async function configureClaudeSdkInline() {

1307 let cliPath = findClaudeBinary();

1308 if (cliPath) {

1309 console.log(` ✅ Claude CLI found at ${cliPath}`);

1310 } else {

1311 console.log(` ⚠️ Claude CLI not found (native binary required).`);

1312 console.log(`\n The Claude Agent SDK needs the native Claude Code binary.`);

1313 console.log(` Install with:\n curl -fsSL https://claude.ai/install.sh | sh`);

1314 console.log(` (npm install @anthropic-ai/claude-code is the alternative path.)\n`);

1315

1316 const yc = getLocale() === "de" ? ["j", "ja", "y", "yes"] : ["y", "yes"];

1317 const doInstall = (await ask(` Install now via the official installer? (y/n): `)).trim().toLowerCase();

1318 if (yc.includes(doInstall)) {

1319 console.log(`\n Installing Claude CLI...`);

1320 try {

1321 execSync("curl -fsSL https://claude.ai/install.sh | sh", { stdio: "inherit", timeout: 120_000 });

1322 const localBin = join(homedir(), ".local", "bin");

1323 if (!process.env.PATH.includes(localBin)) {

1324 process.env.PATH = `${localBin}:${process.env.PATH || ""}`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L1312

1325 }

1326 cliPath = findClaudeBinary();

1327 if (cliPath) console.log(` ✅ Claude CLI installed at ${cliPath}\n`);

1328 } catch {

1329 console.log(` ❌ Installation failed. Run manually: curl -fsSL https://claude.ai/install.sh | sh`);

1330 }

1331 }

1332 }

Lines 4323-4363javascript

4323 break;

4324 }

4325 const url = process.argv[4];

4326 if (!url) {

4327 console.error(`Usage: alvin-bot browser ${sub} <url> [args]`);

4328 process.exit(1);

4329 }

4330 const ctx = browser.contexts()[0] || (await browser.newContext());

4331 const page = await ctx.newPage();

4332 try {

4333 await page.goto(url, { waitUntil: "domcontentloaded", timeout: 30000 });

4334 if (sub === "goto") {

4335 console.log(JSON.stringify({ url: page.url(), title: await page.title() }, null, 2));

4336 } else if (sub === "shot" || sub === "screenshot") {

4337 const name = process.argv[5] || `shot_${Date.now()}.png`;

4338 const { CDP_SCREENSHOTS_DIR } = await import("../dist/paths.js");

4339 const out = name.startsWith("/") ? name : `${CDP_SCREENSHOTS_DIR}/${name}`;

4340 await page.screenshot({ path: out, fullPage: true });

4341 console.log(JSON.stringify({ url: page.url(), title: await page.title(), screenshot: out }, null, 2));

4342 } else if (sub === "eval") {

4343 const js = process.argv[5] || "document.title";

4344 const result = await page.evaluate(new Function(`return (${js})`));

4345 console.log(JSON.stringify({ url: page.url(), result }, null, 2));

Low

Eval

Package source references a known benign dynamic code generation pattern.

bin/cli.jsView on unpkg · L4343

4346 }

4347 } finally {

4348 await page.close();

4349 }

4350 } finally {

4351 await browser.close();

4352 }

4353 break;

4354 }

4355 default:

4356 console.log(`alvin-bot browser — bot-managed Chromium (CDP on port 9222)

4357

4358 start [headful|headless] Start Chromium with CDP (default: headless)

4359 stop Stop the bot-managed Chromium

4360 status Show PID + binary + endpoint

4361 doctor Diagnose common issues

4362 goto <url> Navigate and print page info as JSON

4363 shot <url> [filename] Screenshot to ~/.alvin-bot/browser/screenshots/