balladeer: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

balladeer: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

4 flagged · loading source

bin/balladeer.jsView file

15const { join, sep } = require("node:path"); L16: const { spawnSync } = require("node:child_process"); L17: const readline = require("node:readline");

High

Child Process

Package source references child process execution.

bin/balladeer.jsView on unpkg · L15

15const { join, sep } = require("node:path"); L16: const { spawnSync } = require("node:child_process"); L17: const readline = require("node:readline"); L18: L19: const BASE = process.env.BALLADEER_INSTALL_BASE ?? "https://get.balladeer.ai"; L20: const TGZ_URL = `${BASE}/install/client.tgz`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/balladeer.jsView on unpkg · L15

15const { join, sep } = require("node:path"); L16: const { spawnSync } = require("node:child_process"); L17: const readline = require("node:readline"); L18: L19: const BASE = process.env.BALLADEER_INSTALL_BASE ?? "https://get.balladeer.ai"; L20: const TGZ_URL = `${BASE}/install/client.tgz`; ... L39: } L40: return Buffer.from(await res.arrayBuffer()); L41: } ... L56: } L57: const rl = readline.createInterface({ input: process.stdin, output: process.stderr }); L58: const answer = await new Promise((res) => rl.question("Install the Balladeer client now? [Y/n] ", res));

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

bin/balladeer.jsView on unpkg · L15

15const { join, sep } = require("node:path"); L16: const { spawnSync } = require("node:child_process"); L17: const readline = require("node:readline"); L18: L19: const BASE = process.env.BALLADEER_INSTALL_BASE ?? "https://get.balladeer.ai"; L20: const TGZ_URL = `${BASE}/install/client.tgz`; ... L39: } L40: return Buffer.from(await res.arrayBuffer()); L41: } ... L56: } L57: const rl = readline.createInterface({ input: process.stdin, output: process.stderr }); L58: const answer = await new Promise((res) => rl.question("Install the Balladeer client now? [Y/n] ", res));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/balladeer.jsView on unpkg · L15

Source & flagged code

4 flagged

bin/balladeer.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * Bootstrapper for the Balladeer client (npm name: balladeer).

4 *

5 * This package is not the client; it installs it. On consent it downloads the

6 * current client tarball from Balladeer's central installer endpoints, verifies

7 * the published sha256, and `npm install -g`s the verified file, which replaces

8 * this package in place (the client ships under the same package name).

9 *

10 * Flags: --yes/-y skip the prompt; --download-only fetch + verify, print the path.

11 */

12const { createHash } = require("node:crypto");

13const { existsSync, mkdtempSync, writeFileSync, rmSync } = require("node:fs");

14const { tmpdir } = require("node:os");

15const { join, sep } = require("node:path");

16const { spawnSync } = require("node:child_process");

17const readline = require("node:readline");

High

Child Process

Package source references child process execution.

bin/balladeer.jsView on unpkg · L15

18

19const BASE = process.env.BALLADEER_INSTALL_BASE ?? "https://get.balladeer.ai";

20const TGZ_URL = `${BASE}/install/client.tgz`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/balladeer.jsView on unpkg · L15

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

bin/balladeer.jsView on unpkg · L15

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/balladeer.jsView on unpkg · L15

21const SHA_URL = `${BASE}/install/client.tgz.sha256`;

22

23const args = process.argv.slice(2);

24const yes = args.includes("--yes") || args.includes("-y");

25const downloadOnly = args.includes("--download-only");

26

27function fail(msg, code = 1) {

28 console.error(msg);

29 process.exit(code);

30}

31

32async function fetchBytes(url) {

33 const res = await fetch(url, { redirect: "follow" });

34 if (!res.ok) {

35 fail(