Loading npm security reports…
aws-runtime-bridge@1.9.170: Manual Review npm security report | LPM Firewall
Allowed — no malicious behavior detected
No malicious behavior detected. 37 low-signal pattern(s) reviewed.
aws-runtime-bridge@1.9.170 ⚠ Under review AgentsWorkStudio runtime bridge service for machine-level agent runtime integration
scanned 6d ago · by lpm-firewall-ai Inspected lifecycle setup is consistent with this package’s declared native and browser requirements, and the Playwright runner excerpt shows ordinary test-output cleanup. The flagged runtime paths and account-operation callers remain unresolved, so the evidence is insufficient to classify the package as clean or malicious.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Unresolved; the inspected lifecycle hooks activate during installation, and the runtime entrypoint is dist/index.js.
Impact
No malicious impact was confirmed; unresolved runtime behavior prevents a clean determination.
Mechanism
The inspected setup scripts install compiler tools or Chromium for package functionality. Other flagged runtime behavior and callers were not fully traced.
AI rationale
Inspected lifecycle setup is consistent with this package’s declared native and browser requirements, and the Playwright runner excerpt shows ordinary test-output cleanup. The flagged runtime paths and account-operation callers remain unresolved, so the evidence is insufficient to classify the package as clean or malicious.
Evidence
scripts/ensure-build-tools.mjs scripts/ensure-playwright-browser.mjs
public snapshot AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
package.json runs preinstall and postinstall setup scripts. The preinstall script may install compiler tools on Linux when run as root; the postinstall script installs Chromium unless skipped. The inspected Playwright runner excerpt removes configured output directories as part of test setup. The available inspection did not resolve all flagged runtime paths and account-operation callers. Evidence against
The setup scripts describe actions tied to this package’s node-pty and Playwright requirements and provide skip settings. The inspected agent configuration excerpt resolves paths for Claude settings and MCP configuration; it does not show a write. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Filesystem Network Shell
Supply chain HighEntropyStrings Minified PossibleObfuscation UrlStrings
28 flagged · loading source • scripts.preinstall = node scripts/ensure-build-tools.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/ensure-bin-executable.mjs && node scripts/ensure-playwright-browser.mjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg 1 #!/usr/bin/env node
L2: import{existsSync as T,readFileSync as D}from"node:fs";import M from"node:os";import S from"node:path";import{pathToFileURL as E}from"node:url";import x from"cors";import P from"ex...
L3:
High Child Process
Package source references child process execution.
dist/index.js View on unpkg · L1 1 Critical 21 High 8 Medium 7 Low
Critical Trojan Source Unicode node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.js
High Install Time Lifecycle Scripts package.json
High Child Process dist/index.js
High Shell dist/remote-desktop/ui-automation.js
High Same File Env Network Execution dist/adapter/OpencodeSdkAdapter.js
High Sandbox Evasion Gated Capability scripts/ensure-playwright-browser.mjs
High Obfuscated Payload Loader node_modules/playwright/lib/common/index.js
High Cross File Remote Execution Context node_modules/playwright-core/lib/coreBundle.js
High Trigger Reachable Persistence dist/services/cli-commands.js
High Semantic Analysis Limited dist/remote-desktop/system-backend.js#virtual:string-array:round1
Affected versions and remediation This report applies to aws-runtime-bridge@1.9.170 .
See all versions of aws-runtime-bridge for other recorded verdicts.
Review the evidence and your use of aws-runtime-bridge@1.9.170 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-10-17 12:22:42.415Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
scanned 263 file(s), 1.86 MB of source, external domains: 127.0.0.1, 192.168.1.100, npmmirror.com, registry.npmjs.org, schemas.openxmlformats.org, www.apple.com
• matchType = token_shingles
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/index.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/index.js View on unpkg 1 #!/usr/bin/env node
L2: import{existsSync as T,readFileSync as D}from"node:fs";import M from"node:os";import S from"node:path";import{pathToFileURL as E}from"node:url";import x from"cors";import P from"ex...
L3:
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/index.js View on unpkg · L1 dist/remote-desktop/ui-automation.js View file 1 import{exec as c}from"node:child_process";import{promisify as y}from"node:util";const p=y(c);function r(l){return typeof l=="number"?l:void 0}class h{async listApplications(){retur...
L2: `).filter(Boolean).map(o=>{const e=o.split(" "),[s,u,m,d]=e,i=d?d.split(",").map(Number):[];return{pid:Number(s)||0,name:u||"",isForeground:!1,windowTitle:m||void 0,windowBounds:i....
High Shell
Package source references shell execution.
dist/remote-desktop/ui-automation.js View on unpkg · L1 1 import m from"node:crypto";import o from"node:fs";import u from"node:path";import{getRuntimeHomeDir as w}from"../config.js";import{createLogger as R}from"../utils/logger.js";const ...
L2: `)}
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/services/runtime-binding.js View on unpkg · L1 1 Trigger-reachable persistence chain: scripts.start -> dist/index.js -> dist/services/cli-commands.js
L1: import{spawnSync as h}from"node:child_process";import{existsSync as f,mkdirSync as I,readFileSync as G,rmSync as q,unlinkSync as N,writeFileSync as B}from"node:fs";import W from"no...
L2: `)}function le(e){process.stderr.write(`${e}
...
L5: `)}function C(e,r){return e("systemctl",r)}function x(e,r){return r.error?`[runtime-bridge] ${e}\u5931\u8D25: ${r.error.message}`:`[runtime-bridge] ${e}\u5931\u8D25\uFF0Csystemctl ...
L6: npm install -g aws-runtime-bridge`),{handled:!0,exitCode:1}}async function j(e){const r=e.windowsServiceManager;if(!r&&!ae())return ye(e.stderr);const t=e.windowsServiceLogPath||Y,...
L7:
High Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/services/cli-commands.js View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/services/cli-commands.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/cli-commands.js View on unpkg 1 import{spawnSync as h}from"node:child_process";import{existsSync as f,mkdirSync as I,readFileSync as G,rmSync as q,unlinkSync as N,writeFileSync as B}from"node:fs";import W from"no...
L2: `)}function le(e){process.stderr.write(`${e}
...
L5: `)}function C(e,r){return e("systemctl",r)}function x(e,r){return r.error?`[runtime-bridge] ${e}\u5931\u8D25: ${r.error.message}`:`[runtime-bridge] ${e}\u5931\u8D25\uFF0Csystemctl ...
L6: npm install -g aws-runtime-bridge`),{handled:!0,exitCode:1}}async function j(e){const r=e.windowsServiceManager;if(!r&&!ae())return ye(e.stderr);const t=e.windowsServiceLogPath||Y,...
L7:
Medium Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/services/cli-commands.js View on unpkg · L1 1 import{spawn as T}from"node:child_process";import{EventEmitter as E}from"node:events";import*as S from"node:fs";import*as x from"node:net";import*as A from"node:os";import*as g fro...
L2: `)):t}return this.sdkModule}async waitForServer(t,e,s,o){const n=Date.now()+s;for(;Date.now()<n;){try{if((await t.session.list({query:{directory:e}})).data!==void 0)return}catch{}a...
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/adapter/OpencodeSdkAdapter.js View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/adapter/OpencodeSdkAdapter.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/adapter/OpencodeSdkAdapter.js View on unpkg scripts/ensure-playwright-browser.mjs View file 20 */
L21: import { execFile, spawnSync } from "node:child_process";
L22: import { createRequire } from "node:module";
...
L34: try {
L35: const packageJsonPath = require.resolve("playwright/package.json");
L36: return join(dirname(packageJsonPath), "cli.js");
...
L49: encoding: "utf-8",
L50: shell: process.platform === "win32",
L51: stdio: ["ignore", "pipe", "ignore"],
L52: });
L53: if (result.status === 0 && result.stdout) {
L54: const url = result.stdout.trim();
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/ensure-playwright-browser.mjs View on unpkg · L20 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = scripts/ensure-playwright-browser.mjs
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/ensure-playwright-browser.mjs View on unpkg node_modules/playwright/lib/common/index.js View file 65 getFromCompilationCache: () => getFromCompilationCache,
L66: getUserData: () => getUserData,
L67: installSourceMapSupport: () => installSourceMapSupport,
...
L80: var { calculateSha1 } = require("playwright-core/lib/coreBundle").utils;
L81: var cacheDir = process.env.PWTEST_CACHE_DIR || (() => {
L82: if (process.platform === "win32")
L83: return import_path.default.join(import_os.default.tmpdir(), `playwright-transform-cache`);
...
L100: return {
L101: map: JSON.parse(import_fs.default.readFileSync(sourceMapPath, "utf-8")),
L102: url: source
...
L407: return file2;
L408: return import_path2.default.relative(process.cwd(), file2);
High Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
node_modules/playwright/lib/common/index.js View on unpkg · L65 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright/lib/common/index.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright/lib/common/index.js View on unpkg node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.js View file 7 contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=K(i,t),o=a.text.length,d,f;function p(n,r){return wr(e,J(t,n),`div`,a,r)}function m(t,n,r){var i=Ar(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.js View on unpkg · L7 node_modules/playwright-core/lib/coreBundle.js View file 470 Cross-file remote execution chain: node_modules/playwright-core/lib/coreBundle.js spawns node_modules/playwright-core/lib/vite/traceViewer/sw.bundle.js; helper contains network access plus dynamic code execution.
L470:
L471: // packages/isomorphic/base64.ts
L472: function base64ByteLength(data) {
...
L587: }
L588: return { data: Buffer.from(buffer), width: size.width, height: size.height };
L589: }
...
L3829: ["BrowserContext.setNetworkInterceptionPatterns", { title: "Route requests", group: "route" }],
L3830: ["BrowserContext.[redacted]", { title: "Route WebSockets", group: "route" }],
L3831: ["BrowserContext.setOffline", { title: "Set offline mode" }],
...
L5592: }
L5593: case "stdout": {
L5594: contextEntry.stdio.push(event);
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
node_modules/playwright-core/lib/coreBundle.js View on unpkg · L470 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright-core/lib/coreBundle.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright-core/lib/coreBundle.js View on unpkg package/acode/dist/grammars/grammars/tree-sitter-go.wasm View file • path = [redacted]-sitter-go.wasm
kind = wasm_module
sizeBytes = 217182
magicHex = [redacted]
Medium Ships Wasm Module
Package ships WebAssembly modules.
package/acode/dist/grammars/grammars/tree-sitter-go.wasm View on unpkg node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 View file • path = node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1
kind = build_helper
sizeBytes = 869
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 View on unpkg dist/remote-desktop/system-backend.js#virtual:string-array:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/remote-desktop/system-backend.js#virtual:string-array:round1 View on unpkg node_modules/playwright/lib/runner/index.js View file • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright/lib/runner/index.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright/lib/runner/index.js View on unpkg node_modules/playwright-core/lib/utilsBundle.js View file • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright-core/lib/utilsBundle.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright-core/lib/utilsBundle.js View on unpkg • matchType = token_shingles
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/routes/git.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/routes/git.js View on unpkg • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/services/tool-installer.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/tool-installer.js View on unpkg • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/utils/file-utils.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/utils/file-utils.js View on unpkg node_modules/playwright-core/lib/tools/cli-client/channelSessions.js View file • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright-core/lib/tools/cli-client/channelSessions.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright-core/lib/tools/cli-client/channelSessions.js View on unpkg High Known Malware Source Similarity node_modules/playwright/lib/common/index.js
High Known Malware Source Similarity node_modules/playwright/lib/runner/index.js
High Known Malware Source Similarity dist/adapter/OpencodeSdkAdapter.js
High Known Malware Source Similarity dist/index.js
High Known Malware Source Similarity node_modules/playwright-core/lib/utilsBundle.js
High Known Malware Source Similarity scripts/ensure-playwright-browser.mjs
High Known Malware Source Similarity dist/routes/git.js
High Known Malware Source Similarity dist/services/cli-commands.js
High Known Malware Source Similarity dist/services/tool-installer.js
High Known Malware Source Similarity dist/utils/file-utils.js
High Known Malware Source Similarity node_modules/playwright-core/lib/coreBundle.js
High Known Malware Source Similarity node_modules/playwright-core/lib/tools/cli-client/channelSessions.js
Medium Ambiguous Install Lifecycle Script package.json
Medium Dynamic Require dist/index.js
Medium Install Persistence dist/services/cli-commands.js
Medium Ships Wasm Module package/acode/dist/grammars/grammars/tree-sitter-go.wasm
Medium Ships Build Helper node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1
Medium Structural Risk Force Deep Review
Low Non Install Lifecycle Scripts
Low Weak Crypto dist/services/runtime-binding.js
preinstall
prepublishOnly
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Filesystem Network Shell HighEntropyStrings Minified PossibleObfuscation UrlStrings NoLicense
28 flagged Lines 21-63 json
22 "package/acode/package.json" ,
23 "package/acode/README.md"
25 "bundleDependencies" : [
28 "optionalDependencies" : {
29 "node-windows" : "^1.0.0-beta.8" ,
33 "node" : ">=20.0.0 <25"
36 "build:agent-mcp" : "npm run build --prefix package/aws-client-agent-mcp" ,
37 "build:acode" : "npm run build --prefix package/acode" ,
38 "build:desktop" : "node scripts/build-desktop-mcp.mjs" ,
39 "build:all" : "npm run build:acode && npm run build:agent-mcp" ,
40 "prebuild" : "npm run build:all" ,
41 "preinstall" : "node scripts/ensure-build-tools.mjs" ,
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg · L41 42 "build" : "tsc -p tsconfig.json && node scripts/minify-dist.mjs" ,
43 "postinstall" : "node scripts/ensure-bin-executable.mjs && node scripts/ensure-playwright-browser.mjs" ,
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg · L43 44 "pretypecheck" : "npm run build:all" ,
45 "typecheck" : "tsc -p tsconfig.json --noEmit" ,
46 "prestart" : "npm run build:agent-mcp && npm run build:acode" ,
47 "start" : "node dist/index.js" ,
48 "predev" : "npm run build:all" ,
49 "dev" : "tsc -p tsconfig.json && node scripts/dev-runner.mjs" ,
50 "prepublishOnly" : "npm run build" ,
51 "prepack" : "node scripts/prepack-guard.mjs" ,
52 "postpack" : "node scripts/postpack-restore.mjs" ,
53 "minify" : "node scripts/minify-dist.mjs" ,
54 "lint" : "eslint src --max-warnings 0" ,
55 "lint:fix" : "eslint src --fix" ,
56 "format" : "prettier --write \" src/**/*.ts \" " ,
57 "format:check" : "prettier --check \" src/**/*.ts \" " ,
59 "test:watch" : "vitest" ,
60 "test:coverage" : "vitest run --coverage"
63 "@agentswork/acode" : "file:package/acode" ,
Lines 1-4 javascript
2 import {existsSync as T,readFileSync as D} from "node:fs" ; import M from "node:os" ; import S from "node:path" ; import {pathToFileURL as E} from "node:url" ;
dist/remote-desktop/ui-automation.js View file Lines 1-21 javascript
1 import {exec as c} from "node:child_process" ; import {promisify as y} from "node:util" ; const p = y (c); function r ( l ){ return
Lines 1-7 javascript
1 import m from "node:crypto" ; import o from "node:fs" ; import u from "node:path" ; import {getRuntimeHomeDir as w} from "../config.js" ; import {createLogger as R} from "../utils/logger.js"
Lines 1-8 javascript
1 import {spawnSync as h} from "node:child_process" ; import {existsSync as f,mkdirSync as I,readFileSync as G,rmSync as q,unlinkSync as N,writeFileSync as B} from "node:fs" ; import W from "node:os"
Lines 1-5 javascript
1 import {spawn as T} from "node:child_process" ; import {EventEmitter as E} from "node:events" ; import * as S from "node:fs" ; import * as x from "node:net" ; import *
scripts/ensure-playwright-browser.mjs View file 20 */
L21: import { execFile, spawnSync } from "node:child_process";
L22: import { createRequire } from "node:module";
...
L34: try {
L35: const packageJsonPath = require.resolve("playwright/package.json");
L36: return join(dirname(packageJsonPath), "cli.js");
...
L49: encoding: "utf-8",
L50: shell: process.platform === "win32",
L51: stdio: ["ignore", "pipe", "ignore"],
L52: });
L53: if (result.status === 0 && result.stdout) {
L54: const url = result.stdout.trim();
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/ensure-playwright-browser.mjs View on unpkg · L20 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = scripts/ensure-playwright-browser.mjs
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/ensure-playwright-browser.mjs View on unpkg node_modules/playwright/lib/common/index.js View file 65 getFromCompilationCache: () => getFromCompilationCache,
L66: getUserData: () => getUserData,
L67: installSourceMapSupport: () => installSourceMapSupport,
...
L80: var { calculateSha1 } = require("playwright-core/lib/coreBundle").utils;
L81: var cacheDir = process.env.PWTEST_CACHE_DIR || (() => {
L82: if (process.platform === "win32")
L83: return import_path.default.join(import_os.default.tmpdir(), `playwright-transform-cache`);
...
L100: return {
L101: map: JSON.parse(import_fs.default.readFileSync(sourceMapPath, "utf-8")),
L102: url: source
...
L407: return file2;
L408: return import_path2.default.relative(process.cwd(), file2);
High Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
node_modules/playwright/lib/common/index.js View on unpkg · L65 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright/lib/common/index.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright/lib/common/index.js View on unpkg node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.js View file 7 contains invisible/control Unicode U+200B (zero width space)
height: `+(r-t)+`px`))}function d(t,n,r){var a=K(i,t),o=a.text.length,d,f;function p(n,r){return wr(e,J(t,n),`div`,a,r)}function m(t,n,r){var i=Ar(e,a,null,t),o=n==`ltr`==(r==`after`)?`left`:`right`;return p(r==
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
node_modules/playwright-core/lib/vite/traceViewer/assets/codeMirrorModule-By56iMx7.js View on unpkg · L7 node_modules/playwright-core/lib/coreBundle.js View file 470 Cross-file remote execution chain: node_modules/playwright-core/lib/coreBundle.js spawns node_modules/playwright-core/lib/vite/traceViewer/sw.bundle.js; helper contains network access plus dynamic code execution.
L470:
L471: // packages/isomorphic/base64.ts
L472: function base64ByteLength(data) {
...
L587: }
L588: return { data: Buffer.from(buffer), width: size.width, height: size.height };
L589: }
...
L3829: ["BrowserContext.setNetworkInterceptionPatterns", { title: "Route requests", group: "route" }],
L3830: ["BrowserContext.[redacted]", { title: "Route WebSockets", group: "route" }],
L3831: ["BrowserContext.setOffline", { title: "Set offline mode" }],
...
L5592: }
L5593: case "stdout": {
L5594: contextEntry.stdio.push(event);
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
node_modules/playwright-core/lib/coreBundle.js View on unpkg · L470 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright-core/lib/coreBundle.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright-core/lib/coreBundle.js View on unpkg package/acode/dist/grammars/grammars/tree-sitter-go.wasm View file • path = [redacted]-sitter-go.wasm
kind = wasm_module
sizeBytes = 217182
magicHex = [redacted]
Medium Ships Wasm Module
Package ships WebAssembly modules.
package/acode/dist/grammars/grammars/tree-sitter-go.wasm View on unpkg node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 View file • path = node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1
kind = build_helper
sizeBytes = 869
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
node_modules/playwright-core/bin/reinstall_msedge_dev_win.ps1 View on unpkg dist/remote-desktop/system-backend.js#virtual:string-array:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/remote-desktop/system-backend.js#virtual:string-array:round1 View on unpkg node_modules/playwright/lib/runner/index.js View file • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright/lib/runner/index.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright/lib/runner/index.js View on unpkg node_modules/playwright-core/lib/utilsBundle.js View file • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright-core/lib/utilsBundle.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright-core/lib/utilsBundle.js View on unpkg • matchType = token_shingles
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/routes/git.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/routes/git.js View on unpkg • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/services/tool-installer.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/tool-installer.js View on unpkg • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/utils/file-utils.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/utils/file-utils.js View on unpkg node_modules/playwright-core/lib/tools/cli-client/channelSessions.js View file • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = node_modules/playwright-core/lib/tools/cli-client/channelSessions.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
node_modules/playwright-core/lib/tools/cli-client/channelSessions.js View on unpkg import
x
from
"cors"
;
import
P
from
"express"
;
import
{adapterRegistry
as
F}
from
"./adapter/index.js"
;
import
{attachBrowserWebSocketServer
as
G}
from
"./browser/browser-ws-bridge.js"
;
import
{getAcodeDataHome
as
O,getActiveBridgeHttpPort
as
y,getAutoRegisterConfigFilePath
as
L,getBridgeDataHome
as
_,getBridgeRuntimePropertiesFilePath
as
j,getBridgeTemplateConfigFile
as
K,reserveBridgeListenPort
as
N,validateProductionToken
as
W,writeBridgeRuntimePropertiesFile as ...
3
High Child Process
Package source references child process execution.
dist/index.js View on unpkg · L1 Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/index.js View on unpkg · L1 Long lines were clipped for display.
• matchType = token_shingles
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/index.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/index.js View on unpkg typeof
l
==
"number"
?
l
:void
0
}
class
h
{
async
listApplications
(){
return
process.platform
===
"win32"
?
this
.
listAppsWindows
()
:
process.platform
===
"darwin"
?
this
.
listAppsMacOS
()
:
this
.
listAppsLinux
()}
async
getUIElements
(
t
){
return
process.platform
===
"win32"
?
this
.
getUIElementsWindows
(t)
:
process.platform
===
"darwin"
?
this
.
getUIElementsMacOS
(t)
:
this
.
getUIElementsLinux
(t)}
async
clickElement
(
t
){
throw
new
Error
(
`clickElement not yet implemented for ${
process
.
platform
}. Use click(x, y) with element boun ...
2 ` ). filter (Boolean). map ( o => { const e = o. split ( " " ),[ s , u , m , d ] = e, i = d ? d. split ( "," ). map (Number) : []; return {pid: Number (s) || 0 ,name:u || "" ,isForeground: ! 1 ,windowTitle:m ||void 0 ,windowBounds:i. length === 4 ? {x:i[ 0 ],y:i[ 1 ],width:i[ 2 ],height:i[ 3 ]} :void 0 }})} async getUIElementsMacOS ( t ){ const n = `osascript -e 'tell application "System Events"' -e 'set proc to first process whose unix id is ${ t }' -e 'set output to ""' -e 'repeat with win in (every window of proc)' -e 'set winName to name of win' -e 'set elemList to every UI element of win' -e 'repeat with elem in elemList' -e 'set eRole to role of elem' -e 'set eNa ...
High Shell
Package source references shell execution.
dist/remote-desktop/ui-automation.js View on unpkg · L1 3 ` ). filter (Boolean).map((o, e ) => {const s = o. split ( " " ),[u,m,d,i]=s,a=i?i.split(",").map(Number):[];return{id: `mac-${ e }` ,role:(u || "" ). replace ( "AX" , "" ). toLowerCase (),name:m ||void 0 ,value:d ||void 0 ,bounds:a. length === 4 ? {x:a[ 0 ],y:a[ 1 ],width:a[ 2 ],height:a[ 3 ]} :void 0 }})} async listAppsLinux (){ const t = `python3 -c "
5 desktop = pyatspi.Registry.getDesktop(0)
7 for i in range(desktop.childCount):
8 app = desktop.getChildAtIndex(i)
10 apps.append({'pid': app.getApplicationID(), 'name': app.name, 'role': app.getRoleName()})
11 print(json.dumps(apps))
12 " 2>/dev/null` ; try { const { stdout : n } =await p (t,{timeout: 1e4 }), o = JSON . parse (n. trim ()); return (Array. isArray (o) ? o : o ? [o] : []). map ( e => ({pid: typeof e.pid == "number" ? e.pid : 0 ,name: typeof e.name == "string" ? e.name : "" ,isForeground: ! 1 ,windowTitle: typeof e.name == "string" ? e.name :void 0 }))} catch { return []}} async getUIElementsLinux ( t ){ const n = `python3 -c "
14 desktop = pyatspi.Registry.getDesktop(0)
16 for i in range(desktop.childCount):
17 app = desktop.getChildAtIndex(i)
18 if app and app.getApplicationID() == ${ t }:
19 for j in range(min(app.childCount, 50)):
20 child = app.getChildAtIndex(j)
Long lines were clipped for display.
;
const
g
=
R
(
"runtime-binding"
),
b
=
"sha256"
,
x
=
v
();
function
v
(){
const
e
=
m.
randomInt
(
0
,
1e6
);
return
String
(e).
padStart
(
6
,
"0"
).
replace
(
/(
\d
{3}
)(
\d
{3}
)/
,
"$1-$2"
)}
function
a
(){
return
u.
join
(
w
(),
".aws-bridge"
)}
function
p
(){
return
u.
join
(
a
(),
"binding.json"
)}
function
S
(){
return
u.
join
(
a
(),
"runtime-tokens.properties"
)}
function
T
(
e
){
return
m.
createHash
(b).
update
(e,
"utf8"
).
digest
(
"hex"
)}
function
$
(
e
,
t
){
const
n
=
Buffer.
from
(e,
"hex"
),
r
=
Buffe
...
2 `)}
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/services/runtime-binding.js View on unpkg · L1 3 ` ,{encoding: "utf8" ,mode: 384 })} function A ( e ){ const t = d (e.accessToken); if (t. length < 16 ) throw new Error ( "accessToken must be at least 16 characters" ); const n = y (e.serverBaseUrl), r = k (); return r. set (n,t), B (r),n} function O ( e ){ if (e) try { const t = y (e); return k (). get (t)} catch { return }} function _ ( e ){ if ( ! e) return! 1 ; try { const t = y (e), n = k (), r = n. delete (t); return r && B (n),r} catch { return! 1 }} function j ( e ){ if ( ! e) return! 1 ; for ( const t of k (). values ()) if ( H (e,t)) return! 0 ; return! 1 } function l (){ try { const e = o. readFileSync ( p (), "utf8" ), t = JSON . parse (e); if (t?.status === "paired" && t.tokenHash) return { ... t,schedulerBaseUrl: f (t.schedu ...
4 `,{encoding:"utf8",mode:384}),s.schedulerBaseUrl){const c=A({serverBaseUrl:s.schedulerBaseUrl,accessToken:t});g.info(` [runtime - bridge] scoped runtime token saved: key = ${c} `)}return g.info(` [runtime - bridge] runtime binding saved: ${ p ()} `),s}function V(){const t={...l(),status:"unpaired",accessToken:void 0,tokenHash:void 0,revokedAt:new Date().toISOString(),updatedAt:new Date().toISOString()};o.mkdirSync(a(),{recursive:!0}),o.writeFileSync(p(),` ${JSON.stringify(t,null, 2 )}
5 `,{encoding:"utf8",mode:384}),g.info("[runtime-bridge] runtime binding cleared")}function X(){const e=w(),t=u.join(e,".agentswork","runtime-bridge"),n=a();if(t===n||!o.existsSync(t))return;const r=["binding.json","runtime-tokens.properties"];let i=0;for(const s of r){const c=u.join(t,s),h=u.join(n,s);if(o.existsSync(c)&&!o.existsSync(h)){o.mkdirSync(n,{recursive:!0}),o.copyFileSync(c,h);try{o.chmodSync(h,384)}catch{}i++,g.info(` [runtime - bridge] \u5DF2\u8FC1\u79FB ${c} \u2192 ${h} `)}}i>0&&g.info(` [runtime - bridge] \u5DF2\u8FC1\u79FB ${i} \u4E2A\u914D\u7F6E\u6587\u4EF6\u4ECE ${t} \u5230 ${n} `)}ex ...
Long lines were clipped for display.
;
import
c
from
"node:path"
;
import
{createInterface
as
re}
from
"node:readline/promises"
;
import
{fileURLToPath
as
V}
from
"node:url"
;
import
{getRuntimeHomeDir
as
te}
from
"../config.js"
;
import
{configureStartupConfig
as
ne,printConfigExampleCommand
as
ie}
from
"./startup-config-wizard.js"
;
import
{createWindowsServiceManager
as
se,isNodeWindowsAvailable
as
ae}
from
"./windows-service-manager.js"
;
const
b
=
"awsb.service"
,
L
=
`/etc/sy ...
2 ` )} function le ( e ){process.stderr. write ( `${ e }
3 ` )} function me ( e ){ return e === "-v" || e === "--version" || e === "version" } function fe ( e ){ return `"${ e . replace ( / \\ / g , " \\\\ " ). replace ( /"/ g , ' \\ "' ) }"` } function Q (){ return process.argv[ 1 ] ? c. resolve (process.argv[ 1 ]) : V ( import . meta .url)} function ge ( e ){ return [ "[Unit]" , "Description=AgentsWorkStudio Runtime Bridge" , "After=network-online.target" , "Wants=network-online.target" , "" , "[Service]" , "Type=simple" , "Environment=AWS_BRIDGE_SKIP_SETUP=true" , `ExecStart=${ [ process . execPath , e ]. map ( t => fe ( t )). join ( " " ) }` , "Restart=on-failure" , "RestartSec=5s" , "" , "[Install]" , "WantedBy=multi-user.target" , "" ]. join ( `
4 ` )} function y ( e ){ return e. replace ( /&/ g , "&" ). replace ( /</ g , "<" ). replace ( />/ g , ">" )} function he ( e , r = {}){ const t = r.userHomeDir ?? W . homedir (), i = r.logPath ?? M , s = i. replace ( / \. out \. log $ / , ".err.log" ); return [ '<?xml version="1.0" encoding="UTF-8"?>' , '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">' , '<plist version="1.0">' , "<dict>" , " <key>Label</key>" , ` <string>${ y ( U ) }</string>` , " <key>ProgramArguments</key>" , " <array>" , ` <string>${ y ( process . execPath ) }</string>` , ` <string>${ y ( e ) }</string>` , " </array>" , " <key>EnvironmentVariables</ke .. .
5 `)}function C(e,r){return e("systemctl",r)}function x(e,r){return r.error?` [runtime - bridge] ${e}\u5931\u8D25: ${r.error.message} `:` [runtime - bridge] ${e}\u5931\u8D25\uFF0Csystemctl \u9000\u51FA\u7801: ${r.status?? "unknown" } `}function o(e){return!e.error&&e.status===0}function $(e,r){return e==="linux"?!0:(r("[runtime-bridge] service \u547D\u4EE4\u4EC5\u652F\u6301 Linux systemd \u73AF\u5883\u3002 "),!1)}function p(e,r){return e==="darwin"?!0:(r("[runtime-bridge] service \u547D\u4EE4\u4EC5\u652F\u6301 macOS launchd \u73AF\u5883\u3002 "),!1)}function z(e){e("Usage: awsb service <install|uninstall|st ...
6 npm install -g aws-runtime-bridge` ),{handled: ! 0 ,exitCode: 1 }} async function j ( e ){ const r = e.windowsServiceManager; if ( ! r &&! ae ()) return ye (e.stderr); const t = e.windowsServiceLogPath || Y , i = c. dirname (e.executablePath), s = W . homedir (); try { await (r || se ()). install ({name: K ,description: "awsb runtime bridge" ,script:e.executablePath,workingDirectory:i,env:[{name: "AWS_BRIDGE_SKIP_SETUP" ,value: "true" },{name: "AWS_RUNTIME_HOME_DIR" ,value:s}],logpath: A ()})} catch (u){ const m = u instanceof Error ? u :new Error ( String (u)); return e. stderr ( `[runtime-bridge] \u5B89\u88C5 Windows \u670D\u52A1\u5931\u8D25 : ${ m . message }` ),{ha ...
7
Medium Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/services/cli-commands.js View on unpkg · L1 Long lines were clipped for display.
1 Trigger-reachable persistence chain: scripts.start -> dist/index.js -> dist/services/cli-commands.js
L1: import{spawnSync as h}from"node:child_process";import{existsSync as f,mkdirSync as I,readFileSync as G,rmSync as q,unlinkSync as N,writeFileSync as B}from"node:fs";import W from"no...
L2: `)}function le(e){process.stderr.write(`${e}
...
L5: `)}function C(e,r){return e("systemctl",r)}function x(e,r){return r.error?`[runtime-bridge] ${e}\u5931\u8D25: ${r.error.message}`:`[runtime-bridge] ${e}\u5931\u8D25\uFF0Csystemctl ...
L6: npm install -g aws-runtime-bridge`),{handled:!0,exitCode:1}}async function j(e){const r=e.windowsServiceManager;if(!r&&!ae())return ye(e.stderr);const t=e.windowsServiceLogPath||Y,...
L7:
High Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/services/cli-commands.js View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/services/cli-commands.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/services/cli-commands.js View on unpkg as A
from
"node:os"
;
import
*
as g
from
"node:path"
;
import
{v4
as
P}
from
"uuid"
;
import
{getAcodeDataHome
as
_}
from
"../config.js"
;
import
{registerListenerWakeHook
as
M,unregisterListenerWakeHook
as
D}
from
"../services/browser-session-manager.js"
;
import
{logger
as
$}
from
"../utils/logger.js"
;
import
{BRIDGE_PACKAGE_ROOT
as
L,importBridgeSdkPackage
as
N}
from
"../utils/sdk-package-loader.js"
;
import
{IdlePollLoop
as
C}
from
"./idle-poll-loop.js"
;
import
{MESSAGE_POLLING_IDLE ...
2 `)):t}return this.sdkModule}async waitForServer(t,e,s,o){const n=Date.now()+s;for(;Date.now()<n;){try{if((await t.session.list({query:{directory:e}})).data!==void 0)return}catch{}await new Promise(i=>setTimeout(i,300))}throw new Error(` OpenCode server (port ${o}) did not start within ${s} ms `)}recordStartupOutput(t,e){const s=e.trim();s&&(t.startupOutput=[...t.startupOutput??[],s].slice(-8))}formatStartupExitMessage(t,e){const s=t.signal?` signal ${t.signal} `:` code ${t.code?? "unknown" } `,o=(e??[]).join(`
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/adapter/OpencodeSdkAdapter.js View on unpkg · L1 3 `).trim();return o?` OpenCode server exited during startup (${s}): ${o} `:` OpenCode server exited during startup (${s}). Please check whether opencode serve can run in this workspace. `}dispatchInitialPrompt(t,e){this.sendMessage(t,e).catch(s=>{const o=s instanceof Error?s.message:String(s);this.emitEvent({type:"error",sessionId:t,timestamp:new Date().toISOString(),data:{text:` OpenCode initial prompt failed: ${o} `}})})}startSseLoop(t,e){e.sseActive=!0;const s=new AbortController;e.sseAbortController=s,this.runSseLoop(t,e,s).catch(o=>{s.signal.aborted||console.error("[OpencodeSdkAdapter] SSE loop ...
Long lines were clipped for display.
• matchType = normalized_sha256
matchedPackage = aws-runtime-bridge@1.9.153
matchedPath = dist/adapter/OpencodeSdkAdapter.js
matchedIdentity = npm:YXdzLXJ1bnRpbWUtYnJpZGdl:1.9.153
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/adapter/OpencodeSdkAdapter.js View on unpkg