anyray-connect@0.11.118: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

anyray-connect@0.11.118: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

dist/commands/managed.jsView file

58Trigger-reachable persistence chain: scripts.start -> dist/index.js -> dist/cli.js -> dist/commands/managed.js L58: ${bold('Modes')} (pick one) L59: --print Emit the managed-settings JSON to stdout for MDM packaging L60: (Jamf profile, Ansible template, etc.). Writes nothing unless ... L112: (UTF-8, no BOM). Prefer it over a shell redirect when L113: packaging from PowerShell, where \`>\` writes UTF-16LE on L114: Windows PowerShell 5.1 and no JSON reader accepts that. ... L118: # Package for an MDM profile (API-key fleet): L119: anyray-connect managed --print --gateway https://gw.acme.com --team eng > managed-settings.json L120: ... L443: const hint = (msg) => { L444: process.stderr.write(`${msg}\n`); L445: };

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/commands/managed.jsView on unpkg · L58

58${bold('Modes')} (pick one) L59: --print Emit the managed-settings JSON to stdout for MDM packaging L60: (Jamf profile, Ansible template, etc.). Writes nothing unless ... L112: (UTF-8, no BOM). Prefer it over a shell redirect when L113: packaging from PowerShell, where \`>\` writes UTF-16LE on L114: Windows PowerShell 5.1 and no JSON reader accepts that. ... L118: # Package for an MDM profile (API-key fleet): L119: anyray-connect managed --print --gateway https://gw.acme.com --team eng > managed-settings.json L120: ... L443: const hint = (msg) => { L444: process.stderr.write(`${msg}\n`); L445: };

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/managed.jsView on unpkg · L58

dist/util/copilotSeatToken.jsView file

26*/ L27: import { execFile } from 'node:child_process'; L28: import { readFile } from 'node:fs/promises'; ... L38: const COPILOT_CLI_KEYCHAIN_SERVICES = ['copilot-cli', 'CopilotCLI']; L39: const COPILOT_ACCESS_PROBE_URL = 'https://api.github.com/copilot_internal/user'; L40: /** Source labels for the standalone CLI's own `/login` stores. GitHub ... L57: const isPlainObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v); L58: const configHome = () => process.env.XDG_CONFIG_HOME?.trim() || join(homedir(), '.config'); L59: const dataHome = () => process.env.XDG_DATA_HOME?.trim() || join(homedir(), '.local', 'share'); ... L64: * token-free). NOT parsed as JSON: the CLI writes a `//` comment banner above L65: * the document ("This file is managed automatically."), so `JS

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/util/copilotSeatToken.jsView on unpkg · L26

dist/util/desktopHistoryRestore.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/util/desktopHistoryRestore.jsView on unpkg

dist/commands/acpAgent.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/commands/acpAgent.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/acpAgent.jsView on unpkg

dist/tools/cursor.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/tools/cursor.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/cursor.jsView on unpkg

dist/util/appQuit.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/util/appQuit.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/util/appQuit.jsView on unpkg

dist/util/claudeImporter.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/util/claudeImporter.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/util/claudeImporter.jsView on unpkg

dist/util/refreshScheduler.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/util/refreshScheduler.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/util/refreshScheduler.jsView on unpkg

Source & flagged code

9 flagged

dist/commands/managed.jsView file

Lines 38-78javascript

38import { resolveTarget } from '../target.js';

39import { CLAUDE_CODE_OWNED_ENV_KEYS, buildClaudeCodeEnv, } from '../tools/claudeCodeEnv.js';

40import { buildHookCommand, buildHookEntry, removeAnyrayHookEntries, } from '../tools/claudeCodeHooks.js';

41import { HOOK_FLAG, PROMPT_HOOK_FLAG, hookBinaryIsDurable, hookBinaryPath, } from '../tools/sharedHooks.js';

42import { parseSsoLink } from '../util/ssoEnroll.js';

43import { buildFleetBootstrap, fleetBootstrapPath, } from '../util/fleetBootstrap.js';

44import { buildPlist, buildSystemdUnit, DEFAULT_LOOPBACK_PORT, PROXY_FLAG, } from '../util/proxyService.js';

45import { ACP_AGENT_FLAG, CLAUDE_ACP_NAME, CODEX_ACP_NAME, isSafeNpxCommand, } from '../tools/acpAgents.js';

46import { shSingleQuote } from '../tools/shellEnv.js';

47import { metadataHeaderValue } from '../types.js';

48import { bold, dim, fail, info, ok, warn } from '../util/log.js';

49const MANAGED_HELP = `${bold('anyray-connect managed')} — fleet-wide Claude Code routing via managed-settings.json

50

51Emit or install the OS \`managed-settings.json\` that points a managed fleet's

52Claude Code at the Anyray gateway. It reads at a HIGHER precedence than a user's

53\`~/.claude/settings.json\`, so it survives users editing or wiping their own

54settings. The managed file removes per-dev routing edits, but no credential is

55ever written to it: each user still needs one enrollment/bootstrap so the

56gateway can attribute and authenticate their requests.

57

58${bold('Modes')} (pick one)

59 --print Emit the managed-settings JSON to stdout for MDM packaging

60 (Jamf profile, Ansible template, etc.). Writes nothing unless

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/commands/managed.jsView on unpkg · L58

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/managed.jsView on unpkg · L58

61 --out names a file.

62 --write Write it to the OS system path (merging into any existing file,

63 preserving non-Anyray keys). Requires root (sudo).

64 --revert Remove only the Anyray-owned keys from the system file.

65

66${bold('Options')}

67 --tool <id> Which fleet artifact to emit (default claude-code):

68 claude-code the managed-settings.json described above

69 jetbrains acp.json registering the Anyray ACP agents

70 (--print only; needs --bin and --npx; takes

71 no gateway/attribution — everything resolves

72 from each user's own enrollment at launch)

73 shell /etc/profile.d snippet exporting the gateway

74 base URLs only (--print only; never a key)

75 bootstrap content-free fleet bootstrap file carrying

76 the org SSO link (--print only; needs --sso;

77 read by deferred-enrollment surfaces on

78 machines whose dev never ran Connect)

dist/util/copilotSeatToken.jsView file

Lines 6-46javascript

6 *

7 * Verified 2026-07-27 against GitHub's Copilot API: `api.githubcopilot.com`

8 * accepts the device-login OAuth token directly as `Authorization: Bearer` —

9 *

dist/util/desktopHistoryRestore.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/util/desktopHistoryRestore.jsView on unpkg

dist/commands/acpAgent.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/commands/acpAgent.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/acpAgent.jsView on unpkg

dist/tools/cursor.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/tools/cursor.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/cursor.jsView on unpkg

dist/util/appQuit.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/util/appQuit.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/util/appQuit.jsView on unpkg

dist/util/claudeImporter.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/util/claudeImporter.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/util/claudeImporter.jsView on unpkg

dist/util/refreshScheduler.jsView file

•matchType = normalized_sha256 matchedPackage = anyray-connect@0.11.101 matchedPath = dist/util/refreshScheduler.js matchedIdentity = npm:YW55cmF5LWNvbm5lY3Q:0.11.101 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/util/refreshScheduler.jsView on unpkg