aws-runtime-bridge@1.9.144: Malicious npm security report (Block)

Loading npm security reports…

aws-runtime-bridge@1.9.144: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

27 flagged

package.jsonView file

Lines 22-62json

22 "package/acode/README.md"

23 ],

24 "bundleDependencies": [

25 "playwright"

26 ],

27 "optionalDependencies": {

28 "node-windows": "^1.0.0-beta.8",

29 "sharp": "^0.35.3"

30 },

31 "engines": {

32 "node": ">=20.0.0 <25"

33 },

34 "scripts": {

35 "build:agent-mcp": "npm run build --prefix package/aws-client-agent-mcp",

36 "build:acode": "npm run build --prefix package/acode",

37 "build:desktop": "node scripts/build-desktop-mcp.mjs",

38 "build:all": "npm run build:acode && npm run build:agent-mcp",

39 "prebuild": "npm run build:all",

40 "preinstall": "node scripts/ensure-build-tools.mjs",

41 "build": "tsc -p tsconfig.json && node scripts/minify-dist.mjs",

42 "postinstall": "node scripts/ensure-bin-executable.mjs && node scripts/ensure-playwright-browser.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L42

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L42

43 "pretypecheck": "npm run build:all",

44 "typecheck": "tsc -p tsconfig.json --noEmit",

45 "prestart": "npm run build:agent-mcp && npm run build:acode",

46 "start": "node dist/index.js",

47 "predev": "npm run build:all",

48 "dev": "tsc -p tsconfig.json && node scripts/dev-runner.mjs",

49 "prepublishOnly": "npm run build",

50 "prepack": "node scripts/prepack-guard.mjs",

51 "postpack": "node scripts/postpack-restore.mjs",

52 "minify": "node scripts/minify-dist.mjs",

53 "lint": "eslint src --max-warnings 0",

54 "lint:fix": "eslint src --fix",

55 "format": "prettier --write \"src/**/*.ts\"",

56 "format:check": "prettier --check \"src/**/*.ts\"",

57 "test": "vitest run",

58 "test:watch": "vitest",

59 "test:coverage": "vitest run --coverage"

60 },

61 "dependencies": {

62 "@agentswork/acode": "file:package/acode",

dist/index.jsView file

Lines 1-4javascript

1#!/usr/bin/env node

2import{existsSync as T,readFileSync as D}from"node:fs";import M from"node:os";import S from"node:path";import E from"cors";import P

dist/utils/sdk-package-loader.jsView file

Lines 1-3javascript

1import{access as p,readFile as m}from"node:fs/promises";import n from"node:path";import{fileURLToPath as y,pathToFileURL as l}from"node:url";const d=n.

dist/routes/instance.jsView file

Lines 1-3javascript

1import{spawn as A}from"node:child_process";import{createHash as W,timingSafeEqual as G}from"node:crypto";import I from"node:path";import{fileURLToPath as V}from"node:url";

dist/services/cli-commands.jsView file

Lines 1-8javascript

1import{spawnSync as g}from"node:child_process";import{existsSync as h,mkdirSync as I,readFileSync as X,rmSync as Z,unlinkSync as H,writeFileSync as G}from"node:fs";import D from"node:os"

dist/adapter/OpencodeSdkAdapter.jsView file

Lines 1-5javascript

1import{spawn as E}from"node:child_process";import{EventEmitter as T}from"node:events";import*as S from"node:fs";import*as x from"node:net";import*

scripts/ensure-playwright-browser.mjsView file

Lines 1-40javascript

1#!/usr/bin/env node

2/**

3 * postinstall 钩子：确保 Playwright Chromium 已就绪。

4 *

5 * 背景：npm 包不携带浏览器二进制，Linux 上安装 bridge 后 agent 启动浏览器会报

6 * 「Playwright 浏览器没有安装」。本脚本在 npm install 时自动下载 Chromium，

7 * 保证 `npm install -g aws-runtime-bridge` 后浏览器立即可用。

8 *

9 * 策略：

10 * - Linux + root（如 sudo npm install -g）：`install --with-deps chromium`，

node_modules/playwright/lib/common/index.jsView file

65getFromCompilationCache: () => getFromCompilationCache, L66: getUserData: () => getUserData, L67: installSourceMapSupport: () => installSourceMapSupport, ... L80: var { calculateSha1 } = require("playwright-core/lib/coreBundle").utils; L81: var cacheDir = process.env.PWTEST_CACHE_DIR || (() => { L82: if (process.platform === "win32") L83: return import_path.default.join(import_os.default.tmpdir(), `playwright-transform-cache`); ... L100: return { L101: map: JSON.parse(import_fs.default.readFileSync(sourceMapPath, "utf-8")), L102: url: source ... L407: return file2; L408: return import_path2.default.relative(process.cwd(), file2);

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/playwright/lib/common/index.jsView on unpkg · L65

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = node_modules/playwright/lib/common/index.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright/lib/common/index.jsView on unpkg

node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.jsView file

7contains invisible/control Unicode U+200B (zero width space) height: `+(r-t)+`px`))}function d(t,n,r){var a=K(i,t),o=a.text.length,d,f;function p(n,r){return wr(e,J(t,n),`div`,a,r)}function m(t,n,r){var i=Ar(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.jsView on unpkg · L7

node_modules/playwright-core/lib/coreBundle.jsView file

470Cross-file remote execution chain: node_modules/playwright-core/lib/coreBundle.js spawns node_modules/playwright-core/lib/vite/traceViewer/sw.bundle.js; helper contains network access plus dynamic code execution. L470: L471: // packages/isomorphic/base64.ts L472: function base64ByteLength(data) { ... L587: } L588: return { data: Buffer.from(buffer), width: size.width, height: size.height }; L589: } ... L3829: ["BrowserContext.setNetworkInterceptionPatterns", { title: "Route requests", group: "route" }], L3830: ["BrowserContext.[redacted]", { title: "Route WebSockets", group: "route" }], L3831: ["BrowserContext.setOffline", { title: "Set offline mode" }], ... L5592: } L5593: case "stdout": { L5594: contextEntry.stdio.push(event);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

node_modules/playwright-core/lib/coreBundle.jsView on unpkg · L470

package/acode/dist/grammars/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

package/acode/dist/grammars/grammars/tree-sitter-go.wasmView on unpkg

node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1View file

•path = node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 kind = build_helper sizeBytes = 869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1View on unpkg

dist/remote-desktop/system-backend.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/remote-desktop/system-backend.js#virtual:string-array:round1View on unpkg

node_modules/playwright/lib/runner/index.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = node_modules/playwright/lib/runner/index.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright/lib/runner/index.jsView on unpkg

dist/adapter/ClaudeSdkAdapter.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/adapter/ClaudeSdkAdapter.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapter/ClaudeSdkAdapter.jsView on unpkg

dist/routes/terminal.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/routes/terminal.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/terminal.jsView on unpkg

node_modules/playwright-core/lib/utilsBundle.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = node_modules/playwright-core/lib/utilsBundle.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright-core/lib/utilsBundle.jsView on unpkg

dist/routes/git.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/routes/git.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/git.jsView on unpkg

dist/routes/pty.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/routes/pty.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/pty.jsView on unpkg

dist/services/plugin-manager.jsView file

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/services/plugin-manager.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/plugin-manager.jsView on unpkg

Source & flagged code

27 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/ensure-bin-executable.mjs && node scripts/ensure-playwright-browser.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/ensure-bin-executable.mjs && node scripts/ensure-playwright-browser.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

1#!/usr/bin/env node L2: import{existsSync as T,readFileSync as D}from"node:fs";import M from"node:os";import S from"node:path";import E from"cors";import P from"express";import{adapterRegistry as x}from".... L3:

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/index.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist/utils/sdk-package-loader.jsView file

1import{access as p,readFile as m}from"node:fs/promises";import n from"node:path";import{fileURLToPath as y,pathToFileURL as l}from"node:url";const d=n.resolve(n.dirname(y(import.me... L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/utils/sdk-package-loader.jsView on unpkg · L1

dist/routes/instance.jsView file

1import{spawn as A}from"node:child_process";import{createHash as W,timingSafeEqual as G}from"node:crypto";import I from"node:path";import{fileURLToPath as V}from"node:url";import _ ... L2:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/routes/instance.jsView on unpkg · L1

dist/services/cli-commands.jsView file

1Trigger-reachable persistence chain: scripts.start -> dist/index.js -> dist/services/cli-commands.js L1: import{spawnSync as g}from"node:child_process";import{existsSync as h,mkdirSync as I,readFileSync as X,rmSync as Z,unlinkSync as H,writeFileSync as G}from"node:fs";import D from"no... L2: `)}function le(e){process.stderr.write(`${e} ... L5: `)}function b(e,r){return e("systemctl",r)}function C(e,r){return r.error?`[runtime-bridge] ${e}\u5931\u8D25: ${r.error.message}`:`[runtime-bridge] ${e}\u5931\u8D25\uFF0Csystemctl ... L6: npm install -g aws-runtime-bridge`),{handled:!0,exitCode:1}}async function O(e){const r=e.windowsServiceManager;if(!r&&!ie())return ve(e.stderr);const t=e.windowsServiceLogPath||B,... L7:

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/services/cli-commands.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/services/cli-commands.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/cli-commands.jsView on unpkg

1import{spawnSync as g}from"node:child_process";import{existsSync as h,mkdirSync as I,readFileSync as X,rmSync as Z,unlinkSync as H,writeFileSync as G}from"node:fs";import D from"no... L2: `)}function le(e){process.stderr.write(`${e} ... L5: `)}function b(e,r){return e("systemctl",r)}function C(e,r){return r.error?`[runtime-bridge] ${e}\u5931\u8D25: ${r.error.message}`:`[runtime-bridge] ${e}\u5931\u8D25\uFF0Csystemctl ... L6: npm install -g aws-runtime-bridge`),{handled:!0,exitCode:1}}async function O(e){const r=e.windowsServiceManager;if(!r&&!ie())return ve(e.stderr);const t=e.windowsServiceLogPath||B,... L7:

dist/adapter/OpencodeSdkAdapter.jsView file

1import{spawn as E}from"node:child_process";import{EventEmitter as T}from"node:events";import*as S from"node:fs";import*as x from"node:net";import*as A from"node:os";import*as g fro... L2: `)):t}return this.sdkModule}async waitForServer(t,e,s,r){const i=Date.now()+s;for(;Date.now()<i;){try{if((await t.session.list({query:{directory:e}})).data!==void 0)return}catch{}a...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/adapter/OpencodeSdkAdapter.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = dist/adapter/OpencodeSdkAdapter.js matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapter/OpencodeSdkAdapter.jsView on unpkg

scripts/ensure-playwright-browser.mjsView file

20*/ L21: import { execFile, spawnSync } from "node:child_process"; L22: import { createRequire } from "node:module"; ... L34: try { L35: const packageJsonPath = require.resolve("playwright/package.json"); L36: return join(dirname(packageJsonPath), "cli.js"); ... L49: encoding: "utf-8", L50: shell: process.platform === "win32", L51: stdio: ["ignore", "pipe", "ignore"], L52: }); L53: if (result.status === 0 && result.stdout) { L54: const url = result.stdout.trim();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/ensure-playwright-browser.mjsView on unpkg · L20

•matchType = normalized_sha256 matchedPackage = aws-runtime-bridge@1.9.142 matchedPath = scripts/ensure-playwright-browser.mjs matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ensure-playwright-browser.mjsView on unpkg

node_modules/playwright/lib/common/index.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/playwright/lib/common/index.jsView on unpkg · L65

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright/lib/common/index.jsView on unpkg

node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.jsView on unpkg · L7

node_modules/playwright-core/lib/coreBundle.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

node_modules/playwright-core/lib/coreBundle.jsView on unpkg · L470

package/acode/dist/grammars/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

package/acode/dist/grammars/grammars/tree-sitter-go.wasmView on unpkg

node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1View file

•path = node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 kind = build_helper sizeBytes = 869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1View on unpkg

dist/remote-desktop/system-backend.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/remote-desktop/system-backend.js#virtual:string-array:round1View on unpkg

node_modules/playwright/lib/runner/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright/lib/runner/index.jsView on unpkg

dist/adapter/ClaudeSdkAdapter.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapter/ClaudeSdkAdapter.jsView on unpkg

dist/routes/terminal.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/terminal.jsView on unpkg

node_modules/playwright-core/lib/utilsBundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright-core/lib/utilsBundle.jsView on unpkg

dist/routes/git.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/git.jsView on unpkg

dist/routes/pty.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/pty.jsView on unpkg

dist/services/plugin-manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/plugin-manager.jsView on unpkg

Findings

1 Critical21 High8 Medium7 Low

CriticalTrojan Source Unicodenode_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.js

HighShell

HighSame File Env Network Executiondist/adapter/OpencodeSdkAdapter.js

HighSandbox Evasion Gated Capabilityscripts/ensure-playwright-browser.mjs

HighObfuscated Payload Loadernode_modules/playwright/lib/common/index.js

HighCross File Remote Execution Contextnode_modules/playwright-core/lib/coreBundle.js

HighTrigger Reachable Persistencedist/services/cli-commands.js

HighSemantic Analysis Limiteddist/remote-desktop/system-backend.js#virtual:string-array:round1

HighKnown Malware Source Similaritynode_modules/playwright/lib/common/index.js

HighKnown Malware Source Similaritynode_modules/playwright/lib/runner/index.js

HighKnown Malware Source Similaritydist/adapter/ClaudeSdkAdapter.js

HighKnown Malware Source Similaritydist/adapter/OpencodeSdkAdapter.js

HighKnown Malware Source Similaritydist/index.js

HighKnown Malware Source Similaritydist/routes/terminal.js

HighKnown Malware Source Similaritynode_modules/playwright-core/lib/utilsBundle.js

HighKnown Malware Source Similarityscripts/ensure-playwright-browser.mjs

HighKnown Malware Source Similaritydist/routes/git.js

HighKnown Malware Source Similaritydist/routes/pty.js

HighKnown Malware Source Similaritydist/services/cli-commands.js

HighKnown Malware Source Similaritydist/services/plugin-manager.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/utils/sdk-package-loader.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/services/cli-commands.js

MediumShips Wasm Modulepackage/acode/dist/grammars/grammars/tree-sitter-go.wasm

MediumShips Build Helpernode_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/routes/instance.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

27 flagged

package.jsonView file

Lines 22-62json

22 "package/acode/README.md"

23 ],

24 "bundleDependencies": [

25 "playwright"

26 ],

27 "optionalDependencies": {

28 "node-windows": "^1.0.0-beta.8",

29 "sharp": "^0.35.3"

30 },

31 "engines": {

32 "node": ">=20.0.0 <25"

33 },

34 "scripts": {

35 "build:agent-mcp": "npm run build --prefix package/aws-client-agent-mcp",

36 "build:acode": "npm run build --prefix package/acode",

37 "build:desktop": "node scripts/build-desktop-mcp.mjs",

38 "build:all": "npm run build:acode && npm run build:agent-mcp",

39 "prebuild": "npm run build:all",

40 "preinstall": "node scripts/ensure-build-tools.mjs",

41 "build": "tsc -p tsconfig.json && node scripts/minify-dist.mjs",

42 "postinstall": "node scripts/ensure-bin-executable.mjs && node scripts/ensure-playwright-browser.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L42

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L42

43 "pretypecheck": "npm run build:all",

44 "typecheck": "tsc -p tsconfig.json --noEmit",

45 "prestart": "npm run build:agent-mcp && npm run build:acode",

46 "start": "node dist/index.js",

47 "predev": "npm run build:all",

48 "dev": "tsc -p tsconfig.json && node scripts/dev-runner.mjs",

49 "prepublishOnly": "npm run build",

50 "prepack": "node scripts/prepack-guard.mjs",

51 "postpack": "node scripts/postpack-restore.mjs",

52 "minify": "node scripts/minify-dist.mjs",

53 "lint": "eslint src --max-warnings 0",

54 "lint:fix": "eslint src --fix",

55 "format": "prettier --write \"src/**/*.ts\"",

56 "format:check": "prettier --check \"src/**/*.ts\"",

57 "test": "vitest run",

58 "test:watch": "vitest",

59 "test:coverage": "vitest run --coverage"

60 },

61 "dependencies": {

62 "@agentswork/acode": "file:package/acode",

dist/index.jsView file

Lines 1-4javascript

1#!/usr/bin/env node

2import{existsSync as T,readFileSync as D}from"node:fs";import M from"node:os";import S from"node:path";import E from"cors";import P

dist/utils/sdk-package-loader.jsView file

Lines 1-3javascript

1import{access as p,readFile as m}from"node:fs/promises";import n from"node:path";import{fileURLToPath as y,pathToFileURL as l}from"node:url";const d=n.

dist/routes/instance.jsView file

Lines 1-3javascript

1import{spawn as A}from"node:child_process";import{createHash as W,timingSafeEqual as G}from"node:crypto";import I from"node:path";import{fileURLToPath as V}from"node:url";

dist/services/cli-commands.jsView file

Lines 1-8javascript

1import{spawnSync as g}from"node:child_process";import{existsSync as h,mkdirSync as I,readFileSync as X,rmSync as Z,unlinkSync as H,writeFileSync as G}from"node:fs";import D from"node:os"

dist/adapter/OpencodeSdkAdapter.jsView file

Lines 1-5javascript

1import{spawn as E}from"node:child_process";import{EventEmitter as T}from"node:events";import*as S from"node:fs";import*as x from"node:net";import*

scripts/ensure-playwright-browser.mjsView file

Lines 1-40javascript

1#!/usr/bin/env node

2/**

3 * postinstall 钩子：确保 Playwright Chromium 已就绪。

4 *

5 * 背景：npm 包不携带浏览器二进制，Linux 上安装 bridge 后 agent 启动浏览器会报

6 * 「Playwright 浏览器没有安装」。本脚本在 npm install 时自动下载 Chromium，

7 * 保证 `npm install -g aws-runtime-bridge` 后浏览器立即可用。

8 *

9 * 策略：

10 * - Linux + root（如 sudo npm install -g）：`install --with-deps chromium`，

node_modules/playwright/lib/common/index.jsView file

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

node_modules/playwright/lib/common/index.jsView on unpkg · L65

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright/lib/common/index.jsView on unpkg

node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.jsView on unpkg · L7

node_modules/playwright-core/lib/coreBundle.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

node_modules/playwright-core/lib/coreBundle.jsView on unpkg · L470

package/acode/dist/grammars/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

package/acode/dist/grammars/grammars/tree-sitter-go.wasmView on unpkg

node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1View file

•path = node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 kind = build_helper sizeBytes = 869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1View on unpkg

dist/remote-desktop/system-backend.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/remote-desktop/system-backend.js#virtual:string-array:round1View on unpkg

node_modules/playwright/lib/runner/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright/lib/runner/index.jsView on unpkg

dist/adapter/ClaudeSdkAdapter.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapter/ClaudeSdkAdapter.jsView on unpkg

dist/routes/terminal.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/terminal.jsView on unpkg

node_modules/playwright-core/lib/utilsBundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

node_modules/playwright-core/lib/utilsBundle.jsView on unpkg

dist/routes/git.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/git.jsView on unpkg

dist/routes/pty.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/routes/pty.jsView on unpkg

dist/services/plugin-manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/plugin-manager.jsView on unpkg

aws-runtime-bridge@1.9.144

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code