beast-agent@1.1.1: Suspicious npm security report (Warn)

Loading npm security reports…

beast-agent@1.1.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

23 flagged

package.jsonView file

Lines 22-62json

22 "windows",

23 "llm",

24 "openai"

25 ],

26 "main": "src/main.js",

27 "bin": {

28 "beast-agent": "bin/beast-agent.js",

29 "beast": "bin/beast-agent.js"

30 },

31 "files": [

32 "src/**/*",

33 "assets/**/*",

34 "scripts/**/*",

35 "!**/__pycache__/**"

36 ],

37 "scripts": {

38 "start": "electron .",

39 "dist": "electron-builder --win nsis portable",

40 "test": "node --test \"tests/**/*.test.js\"",

41 "release": "node scripts/release.js",

42 "postinstall": "node scripts/fix-electron.js --soft",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L42

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L42

43 "prepublishOnly": "node scripts/swap-electron.js deps",

44 "postpublish": "node scripts/swap-electron.js devdeps"

45 },

46 "devDependencies": {

47 "electron-builder": "^26.15.3"

48 },

49 "dependencies": {

50 "@pdf-lib/fontkit": "^1.1.1",

51 "@whiskeysockets/baileys": "^7.0.0-rc14",

52 "@xenova/transformers": "^2.17.2",

53 "electron-updater": "^6.8.9",

54 "ffmpeg-static": "^5.3.0",

55 "imapflow": "^1.7.6",

56 "nodemailer": "^9.0.5",

57 "pdf-lib": "^1.17.1",

58 "pdf-parse": "^2.4.5",

59 "pdf-to-img": "^6.3.0",

60 "pdfjs-dist": "^5.6.205",

61 "pdfkit": "^0.20.1",

62 "qrcode": "^1.5.4",

bin/beast-agent.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4/* Beast Agent global npm başlatıcısı (`beast` kısa adı da aynı scripte bağlı):

5 `beast` / `beast-agent` → uygulamayı detached başlatır, terminali hemen serbest bırakır

6 `beast update` → npm'den en son sürümü yükler (uygulama kapalıyken çalıştır) */

8const { spawn, spawnSync } = require(

src/agent/store.jsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. src/agent/store.js: const COMMUNITY_URL = 'https://raw.githubusercontent.com/algokodcom/beast-agent/main/store/skills.json'; const SKIP_DIRS = new Set(['node_modules', '.git', '__pycache__', '.drafts']); fs.writeFileSync(p, JSON.stringify(obj, null, 2)); fs.writeFileSync(target, String(content ?? ''), 'utf8');

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

src/agent/store.jsView on unpkg

src/main.jsView file

Lines 1-25javascript

1'use strict';

3const { app, BrowserWindow, WebContentsView, ipcMain, shell, dialog, Tray, Menu, nativeImage, desktopCapturer, session,

src/agent/tools.jsView file

Lines 1-25javascript

1'use strict';

3const fs = require('fs');

4const os = require('os');

5const

bin/beast-agent.js#virtual:normalized:round1View file

29L30: /* güncelleme modu: çalışan Beast"i kapat (dosya kilidi EBUSY vermesin) → npm güncelle (görünür ilerleme) → yeniden başlat.\n Bu komut güncelleme butonu tarafından GÖRÜNÜR bir cm... L31: detached: true,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/beast-agent.js#virtual:normalized:round1View on unpkg · L29

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/beast-agent.js#virtual:normalized:round1View on unpkg

src/agent/scripts/websearch.pyView file

•path = src/agent/scripts/websearch.py kind = build_helper sizeBytes = 7583 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/agent/scripts/websearch.pyView on unpkg

scripts/fix-electron.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = scripts/fix-electron.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-electron.jsView on unpkg

scripts/release.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = scripts/release.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release.jsView on unpkg

src/agent/obscura.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/obscura.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/obscura.jsView on unpkg

src/agent/watchers.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/watchers.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/watchers.jsView on unpkg

src/agent/bus.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/bus.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/bus.jsView on unpkg

src/agent/config.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/config.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/config.jsView on unpkg

src/agent/logger.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/logger.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/logger.jsView on unpkg

src/agent/memory.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/memory.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/memory.jsView on unpkg

src/agent/engine.jsView file

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/engine.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/engine.jsView on unpkg

Source & flagged code

23 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-electron.js --soft

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-electron.js --soft

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/beast-agent.jsView file

7L8: const { spawn, spawnSync } = require('child_process'); L9: const path = require('path');

High

Child Process

Package source references child process execution.

bin/beast-agent.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = bin/beast-agent.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/beast-agent.jsView on unpkg

7L8: const { spawn, spawnSync } = require('child_process'); L9: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/beast-agent.jsView on unpkg · L7

src/agent/store.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

src/agent/store.jsView on unpkg

src/main.jsView file

5Trigger-reachable chain: manifest.main -> src/main.js L5: const fs = require('fs'); L6: const http = require('http'); L7: const dns = require('dns'); L8: const crypto = require('crypto'); L9: const { spawn } = require('child_process'); L10: const { Engine, OBSERVE_MARK } = require('./agent/engine'); ... L57: if (res.ok) { L58: const j = await res.json(); L59: const v = String(j.version || '').trim(); ... L68: if (win && !win.isDestroyed()) { L69: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() }); L70: }

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/main.jsView on unpkg · L5

5const fs = require('fs'); L6: const http = require('http'); L7: const dns = require('dns'); L8: const crypto = require('crypto'); L9: const { spawn } = require('child_process'); L10: const { Engine, OBSERVE_MARK } = require('./agent/engine'); ... L57: if (res.ok) { L58: const j = await res.json(); L59: const v = String(j.version || '').trim(); ... L68: if (win && !win.isDestroyed()) { L69: win.webContents.send('agent:event', { type: 'update', ...updateState, current: app.getVersion() }); L70: }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

src/main.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/main.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

src/agent/tools.jsView file

5const path = require('path'); L6: const https = require('https'); L7: const { execFile } = require('child_process'); L8: const { spawn } = require('child_process'); ... L100: ['-NoProfile', '-NoExit', '-Command', '-'], L101: { cwd: cwd || process.cwd(), windowsHide: true, env: envWithPathPrefix() } L102: ); ... L118: proc.stdin.unref && proc.stdin.unref(); L119: proc.stdout.unref && proc.stdout.unref(); L120: proc.stderr.unref && proc.stderr.unref(); ... L190: native exe hata verirse gerçek kod işaret satırına yazılır */ L191: sess.proc.stdin.write(`$global:LASTEXITCODE = 0\n${cmd}${cmd.endsWith('\n') ? '' : '\n'}Write-Output "${marker}"\n`);

Critical

Download Execute

Source downloads or fetches remote code and executes it.

src/agent/tools.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = beast-agent@1.1.0 matchedPath = src/agent/tools.js matchedIdentity = npm:YmVhc3QtYWdlbnQ:1.1.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/tools.jsView on unpkg

bin/beast-agent.js#virtual:normalized:round1View file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/beast-agent.js#virtual:normalized:round1View on unpkg · L29

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/beast-agent.js#virtual:normalized:round1View on unpkg

src/agent/scripts/websearch.pyView file

•path = src/agent/scripts/websearch.py kind = build_helper sizeBytes = 7583 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/agent/scripts/websearch.pyView on unpkg

scripts/fix-electron.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-electron.jsView on unpkg

scripts/release.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release.jsView on unpkg

src/agent/obscura.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/obscura.jsView on unpkg

src/agent/watchers.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/watchers.jsView on unpkg

src/agent/bus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/bus.jsView on unpkg

src/agent/config.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/config.jsView on unpkg

src/agent/logger.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/logger.jsView on unpkg

src/agent/memory.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/memory.jsView on unpkg

src/agent/engine.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/engine.jsView on unpkg

Source & flagged code

23 flagged

package.jsonView file

Lines 22-62json

22 "windows",

23 "llm",

24 "openai"

25 ],

26 "main": "src/main.js",

27 "bin": {

28 "beast-agent": "bin/beast-agent.js",

29 "beast": "bin/beast-agent.js"

30 },

31 "files": [

32 "src/**/*",

33 "assets/**/*",

34 "scripts/**/*",

35 "!**/__pycache__/**"

36 ],

37 "scripts": {

38 "start": "electron .",

39 "dist": "electron-builder --win nsis portable",

40 "test": "node --test \"tests/**/*.test.js\"",

41 "release": "node scripts/release.js",

42 "postinstall": "node scripts/fix-electron.js --soft",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L42

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L42

43 "prepublishOnly": "node scripts/swap-electron.js deps",

44 "postpublish": "node scripts/swap-electron.js devdeps"

45 },

46 "devDependencies": {

47 "electron-builder": "^26.15.3"

48 },

49 "dependencies": {

50 "@pdf-lib/fontkit": "^1.1.1",

51 "@whiskeysockets/baileys": "^7.0.0-rc14",

52 "@xenova/transformers": "^2.17.2",

53 "electron-updater": "^6.8.9",

54 "ffmpeg-static": "^5.3.0",

55 "imapflow": "^1.7.6",

56 "nodemailer": "^9.0.5",

57 "pdf-lib": "^1.17.1",

58 "pdf-parse": "^2.4.5",

59 "pdf-to-img": "^6.3.0",

60 "pdfjs-dist": "^5.6.205",

61 "pdfkit": "^0.20.1",

62 "qrcode": "^1.5.4",

bin/beast-agent.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4/* Beast Agent global npm başlatıcısı (`beast` kısa adı da aynı scripte bağlı):

5 `beast` / `beast-agent` → uygulamayı detached başlatır, terminali hemen serbest bırakır

6 `beast update` → npm'den en son sürümü yükler (uygulama kapalıyken çalıştır) */

8const { spawn, spawnSync } = require(

src/agent/store.jsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

src/agent/store.jsView on unpkg

src/main.jsView file

Lines 1-25javascript

1'use strict';

3const { app, BrowserWindow, WebContentsView, ipcMain, shell, dialog, Tray, Menu, nativeImage, desktopCapturer, session,

src/agent/tools.jsView file

Lines 1-25javascript

1'use strict';

3const fs = require('fs');

4const os = require('os');

5const

bin/beast-agent.js#virtual:normalized:round1View file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/beast-agent.js#virtual:normalized:round1View on unpkg · L29

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/beast-agent.js#virtual:normalized:round1View on unpkg

src/agent/scripts/websearch.pyView file

•path = src/agent/scripts/websearch.py kind = build_helper sizeBytes = 7583 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/agent/scripts/websearch.pyView on unpkg

scripts/fix-electron.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-electron.jsView on unpkg

scripts/release.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release.jsView on unpkg

src/agent/obscura.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/obscura.jsView on unpkg

src/agent/watchers.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/watchers.jsView on unpkg

src/agent/bus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/bus.jsView on unpkg

src/agent/config.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/config.jsView on unpkg

src/agent/logger.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/logger.jsView on unpkg

src/agent/memory.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/memory.jsView on unpkg

src/agent/engine.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agent/engine.jsView on unpkg

beast-agent@1.1.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code