auxilo-mcp@0.9.4: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

auxilo-mcp@0.9.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged · loading source

bin/auxilo-cli.jsView file

20const readline = require('readline'); L21: const { exec } = require('child_process'); L22: const installer = require('../lib/installer.js');

High

Child Process

Package source references child process execution.

bin/auxilo-cli.jsView on unpkg · L20

scripts/runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = auxilo-mcp@0.9.2 matchedIdentity = npm:YXV4aWxvLW1jcA:0.9.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/runner.jsView on unpkg

364if (process.env.AUXILO_NO_NOTIFY === '1') return; L365: const msg = `${count} learning(s) held for your review — run npx auxilo review`; L366: const child = spawn('/usr/bin/osascript', [ L367: '-e', `display notification ${JSON.stringify(msg)} with title "Auxilo"`,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/runner.jsView on unpkg · L364

26* AUXILO_API_KEY — API key for authenticated /learn submissions (REQUIRED unless --dry-run) L27: * AUXILO_BASE_URL — Server URL (default: http://localhost:49152) L28: * AUXILO_EXTRACTING — Recursion guard (A5.2); set to "1" by this runner ... L38: const crypto = require('crypto'); L39: const { spawn } = require('child_process'); L40: const { scanText, SENSITIVITY_FILTER_VERSION } = require('../lib/sensitivity-filter.js'); ... L45: L46: const AUXILO_DIR = path.join(os.homedir(), '.auxilo'); L47: const CREDS_PATH = path.join(AUXILO_DIR, 'credentials.json'); ... L63: if (fs.existsSync(CREDS_PATH)) { L64: fileCreds = JSON.parse(fs.readFileSync(CREDS_PATH, 'utf-8')); L65: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/runner.jsView on unpkg · L26

scripts/hooks/auxilo-extract.shView file

•path = scripts/hooks/auxilo-extract.sh kind = build_helper sizeBytes = 1783 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/hooks/auxilo-extract.shView on unpkg

Source & flagged code

5 flagged

bin/auxilo-cli.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

2

3'use strict';

4

5/**

6 * bin/auxilo-cli.js — Turnkey installer CLI (LW-12)

7 *

8 * npx auxilo setup Interactive: detect clients, register MCP, device-code

9 * login, install extraction runner + hook, record consent.

10 * npx auxilo status Show clients, auth, consent/mode, sentinel, hook, queue.

11 * npx auxilo disable Remove the local kill-switch sentinel (+ optional revoke).

12 *

13 * This file is the thin binding layer: real home directory, real fetch, real

14 * stdin. All logic lives in lib/installer.js (testable, fixture-driven).

15 * Supersedes `auxilo-mcp setup` and `auxilo-mcp login` (Change 3/4).

16 */

17

18const os = require('os');

19const path = require('path');

20const readline = require('readline');

21const { exec } = require('child_process');

22const installer = require('../lib/installer.js');

High

Child Process

Package source references child process execution.

bin/auxilo-cli.jsView on unpkg · L20

23const review = require('../lib/review.js');

24

25const HOME = os.homedir();

26

27// ─── Prompt helpers ─────────────────────────────────────────────────────────

28

29// LW-17: ONE shared readline interface for the whole run. Creating a fresh

30// interface per question loses any input readline already buffered when the

31// previous interface closed — with piped/scripted stdin the answer to

32// question N+1 arrives with question N's buffer and the next prompt hangs

33// on EOF (the 0.8.1 consent step silently never completed).

34let sharedRl = null;

35function getRl() {

36 if (!sharedRl) {

37 sharedRl = readline.createInterface({ input: process.stdin, output: process.stdout });

38 }

39 return sharedRl;

40}

scripts/runner.jsView file

Lines 6-46javascript

6 * Transport layer for the autonomous extraction pipeline:

7 * 1. Check kill-switch sentinel + recursion guard (A5.2)

8 * 2. Enumerate active sources via TranscriptSource interface

scripts/hooks/auxilo-extract.shView file

•path = scripts/hooks/auxilo-extract.sh kind = build_helper sizeBytes = 1783 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/hooks/auxilo-extract.shView on unpkg

Lines 344-384javascript

344 // tokens live ONLY on the per-run caller log lines. This line previously

345 // carried `published=` too and the digest double-counted every extraction

346 // (its dedup only drops byte-identical lines). P1-13b.

347 log(`[runner] client-side extraction: ${learnings.length} candidate(s) → ${published} live, ${held} held for review, ${rejected} rejected`);

348 return { learnings_published: published, learnings_held: held, learnings_rejected: rejected, extraction_id: `client-${sessionId}` };

349}

350

351// ─── Held-items local notification (LW-18 layer 2) ──────────────────────────

352

353/**

354 * macOS notification when a run holds items for review: COUNT ONLY, no titles,

355 * no content (pending bodies are adversarial by assumption — LW-18 threat

356 * model). Fail-silent: darwin-only, detached osascript spawn, every error

357 * swallowed; a broken notifier must never fail the run. AUXILO_NO_NOTIFY=1

358 * disables (tests, headless CI).

359 */

360function notifyHeld(count) {

361 try {

362 if (!count || count <= 0) return;

363 if (process.platform !== 'darwin') return;

364 if (process.env.AUXILO_NO_NOTIFY === '1') return;

365 const msg = `${count} learning(s) held for your review — run npx auxilo review`;

366 const child = spawn('/usr/bin/osascript', [

367 '-e', `display notification ${JSON.stringify(msg)} with title "Auxilo"`,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/runner.jsView on unpkg · L364

368 ], { stdio: 'ignore', detached: true });

369 child.unref();

370 child.on('error', () => { /* fail-silent */ });

371 } catch { /* fail-silent */ }

372}

373

374// ─── Install Hooks (B15) ────────────────────────────────────────────────────

375

376function installHooks() {

377 const hookSrc = path.join(__dirname, 'hooks', 'auxilo-extract.sh');

378 const claudeHooksDir = path.join(os.homedir(), '.claude', 'hooks');

379 const hookDest = path.join(claudeHooksDir, 'auxilo-extract.sh');

380 const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');

381 const hookCmd = hookDest;

382

383 // 1. Copy hook script

384 if (!fs.existsSync(hookSrc)) {