blade-code@0.10.186: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

blade-code@0.10.186: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

10 flagged · loading source

dist/chunk-0egj5t8f.jsView file

714`}}import*as n from"node:fs/promises";import*as Y0 from"node:path";import{parse as yO}from"yaml";var hO=/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/,fO=/^[a-z0-9][a-z0-9-]{0,62}[a... L715: `)}get size(){return this.skills.size}async refresh(){return this.skills.clear(),this.pluginSkills.clear(),this.initialized=!1,this.initialize()}snapshot(){let O=new R({...this.con... L716: ${Y}

High

Child Process

Package source references child process execution.

dist/chunk-0egj5t8f.jsView on unpkg · L714

dist/chunk-qr8xb3x2.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-qr8xb3x2.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){l0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,Z=0,J=0,Y=0;for(let Q of this.readAll()){if(R6(Q.ownerPid)&&S6... [error] ${G.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(G){throw z.status="aborted",z.endTime=Date.now(),await U... `):o$(J,Math.max(0,X))}${m8}`,truncated:!0}}class c8{latestByPage=new Map;issue($){let Z=JU($.snapshot,$.maxBytes),J={snapshotId:`browser_snapshot_${_3()}`,pageId:$.pageId,pageGene... `).filter((w)=>w.toLocaleLowerCase("en-US").includes(B)),D=G.slice(

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-qr8xb3x2.jsView on unpkg

1import{Ga as W3}from"./chunk-g01mth5d.js";import{Ja as T,Ka as $$,Pa as HW,Qa as fY,Ra as e0}from"./chunk-nf7nbhtp.js";import{$a as BX,Sa as Y5,Va as pZ,Za as tZ,_a as zX,bb as nW,... L2: const { spawn } = require('node:child_process'); L3: const [ownerPidValue, command, ...args] = process.argv.slice(1); ... L11: if (!Number.isSafeInteger(ownerPid) || ownerPid <= 1) return false; L12: if (process.platform !== 'win32' && process.ppid !== ownerPid) return false; L13: try { ... L79: } else if (ownerIsRunning()) { L80: child.stdin.end(); L81: } else { ... L97: child = spawn(command, args, { L98: env: process.env, L99: stdio: ['pipe', 'inherit', 'inherit'],

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-qr8xb3x2.jsView on unpkg · L1

dist/chunk-8wc5v2x8.jsView file

1import{Xj as I}from"./chunk-9wajn74r.js";import{Mk as f}from"./chunk-eg3ms291.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-8wc5v2x8.jsView on unpkg · L1

1import{Xj as I}from"./chunk-9wajn74r.js";import{Mk as f}from"./chunk-eg3ms291.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-8wc5v2x8.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/blade.js -> dist/chunk-05ds0e8p.js -> dist/chunk-8wc5v2x8.js L1: import{Xj as I}from"./chunk-9wajn74r.js";import{Mk as f}from"./chunk-eg3ms291.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/chunk-8wc5v2x8.jsView on unpkg · L1

dist/chunk-6bpsz0rk.jsView file

1Cross-file remote execution chain: dist/chunk-6bpsz0rk.js spawns dist/chunk-qr8xb3x2.js; helper contains network access plus dynamic code execution. L1: import{e as $X,f as JX,h as S$,i as M4}from"./chunk-1xcspsc1.js";import{l as eX,m as $Z,n as JZ}from"./chunk-8wc5v2x8.js";import{A as q4,y as A9,z as b9}from"./chunk-3srr8yxv.js";i... L2: `),T9=$}function q6($,J,Y){try{let Z=IZ();SZ(Z);let X=new Date().toISOString(),Q=Y?` | ${JSON.stringify(Y)}`:"",G=`[${X}] [${$}] ${J}${Q} ... L10: `)});break}case"project_rules_loaded":{let Q=`Project rules loaded: ${X.files.length}`+(X.blockedWrite?" (write retry required)":"");$.sessionActions.addToolMessage(Q,{toolName:"Pr... L11: `)});break}case"steering_applied":if(Z(X.messages),$.appActions.projectFollowUpQueue(X.queue,$.followUpQueueOwner),X.recove

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-6bpsz0rk.jsView on unpkg · L1

dist/chunk-g01mth5d.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-g01mth5d.jsView on unpkg

dist/chunk-jj4ggb04.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-jj4ggb04.jsView on unpkg

dist/chunk-214593zs.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-214593zs.jsView on unpkg

Source & flagged code

10 flagged

dist/chunk-0egj5t8f.jsView file

Lines 694-734javascript

694| "提高温度" | temperature 调整 |

695| "限制 50 轮" | maxTurns = 50 |

696| "禁用 hooks" | disableAllHooks = true |

697| "添加环境变量" | env 对象更新 |

698

699## 验证流程

700

701每次安装 hook 或修改配置后，**必须**验证：

702

7031. 用 \`ConfigTool({ operation: "get", key: "<modified-key>" })\` 确认值已生效

7042. 如果是 hooks，检查结构是否正确（包含 matcher 和 hooks 数组）

7053. 如果是 permissions，确认 allow/ask/deny 数组格式正确

7064. 告知用户配置已保存到哪个文件（根据 scope 判断）

707

708## 注意事项

709

7101. **hooks 字段使用 deep-merge 策略**：设置新的 hook 不会覆盖已有的 hook。但如果同一事件下设置新的 matcher 数组，会替换该事件的整个 matcher 列表

7112. **permissions 字段使用 replace 策略**：设置 permissions 会完全替换现有值。如果只想添加规则，先 GET 当前值，合并后再 SET

7123. **env 字段使用 deep-merge 策略**：可以逐个添加环境变量

7134. **scope 默认值**：不指定 scope 时，根据字段路由表决定（hooks/permissions/env 默认 local，temperature/codeTheme 等默认 global）

714`}}import*as n from"node:fs/promises";import*as Y0 from"node:path";import{parse as yO}from"yaml";var hO=/^---\r?\n([\s\S]*?)\r

715`)}get size(){return this.skills.size}async refresh(){return this.skills.clear(),this.pluginSkills.clear(),this.initialized=!1,this.initialize()}snapshot(){let O=new R({...this.config});return O.skills=new Map(Array.from(this.skills,([$,Q])=>[$,{...Q,...Q.allowedTools?{allowedTools:[...Q.allowedTools]}:{}}])),O.pluginSkills=new Map(Array.from(this.pluginSkills,([$,Q])=>[$,{...Q,metadata:{...Q.metadata,...Q.metadata.allowedTools?{allowedTools:[...Q.metadata.allowedTools]}:{}}}])),O.initialized=this.initialized,O}registerPluginSkill(O){this.pluginSkills.set(O.namespacedName,O),this.skills.set(O. ...

716${Y}

High

Child Process

Package source references child process execution.

dist/chunk-0egj5t8f.jsView on unpkg · L714

717\`\`\``;J=J.replace(L,H)}}catch{}}return J}hasDynamicContent(O){return{hasArgs:/\$ARGUMENTS|\$\d/.test(

718

719`,J=Z.length,L=0;for(let K of $){let W=K.argumentHint?` ${K.argumentHint}`:"",G=`- /${K.name}${W}: ${K.description} ${K.label}

720`;if(J+G.length>O)break;Z+=G,J+=G.length,L++}if(L<Q)Z+=`

721(${L} of ${Q} commands shown due to character budget)`;return{text:Z,includedCount:L,totalCount:Q}}snapshot(){let O=new z;return O.workspaceRoot=this.workspaceRoot,O.commands=new Map(Array.from(this.commands,([$,Q])=>[$,{...Q,config:{...Q.config,...Q.config.allowedTools?{allowedTools:[...Q.config.allowedTools]}:{}}}])),O.pluginCommands=new Map(Array.from(this.pluginCommands,([$,Q])=>[$,{...Q,config:{...Q.config,...Q.config.allowedTools?{allowedTools:[...Q.config.allowedTools]}:{}}}])),O.initialized=this.initialized,O.lastDiscoveryResult=this.lastDiscoveryResult?{commands:Array.from(O.commands. ...

722`,"utf8"),await Z.close(),async()=>{try{if(JSON.parse(await F.readFile(O,"utf8")).token===$)await F.unlink(O)}catch(J){if(!u(J))j.warn(`Failed to release plugin package lock: ${J}`)}}}catch(Z){if(Z.code!=="EEXIST")throw Z;await this.removeStaleStoreLock(O),await new Promise((J)=>setTimeout(J,50))}throw new U("PLUGIN_STORE_BUSY","Plugin package store is busy; retry the operation")}async removeStaleStoreLock(O){try{let $=await F.lstat(O);if(!$.isFile()||$.isSymbolicLink())throw new U("PLUGIN_STORE_INVALID","Plugin package lock must be a regular file");if(process.getuid&&$.uid!==process.getuid()| ...

723`,{mode:384,encoding:"utf8"}),await F.chmod(this.statePath,384)}async ensureStoreDirectory(){try{let O=await F.lstat(this.stateRoot);if(!O.isDirectory()||O.isSymbolicLink())throw new U("PLUGIN_STORE_INVALID","Plugin package store must be a regular directory");if(process.getuid&&O.uid!==process.getuid())throw new U("PLUGIN_STORE_INVALID","Plugin package store must be owned by the current user");if((O.mode&511)!==448)throw new U("PLUGIN_STORE_INVALID","Plugin package store permissions must be 0700")}catch(O){if(!u(O))throw O;await F.mkdir(this.stateRoot,{recursive:!0,mode:448}),await F.chmod(thi ...

724`)}}function e(O=B()){return T.getInstance(O)}var O0=new Map,ZO=Object.values(B0);function o0(O,$){let Q=QO.resolve(O),Z=O0.get(Q);if(!Z||$&&Z.registry!==$)return!1;return $0.getInstance().loadConfig(Z.base,Q),O0.delete(Q),!0}function i0(O){let $={...O};for(let Q of ZO)$[Q]=(O[Q]??[]).map((Z)=>({...Z,matcher:Z.matcher?{...Z.matcher}:void 0,hooks:Z.hooks.map((J)=>({...J}))}));return $}class a0{commandRegistry;

725${K.content}

726</instruction-file>`}),J=Q==="contextual-project-instructions"&&$.length>0?` trigger-paths="${VO($.join(","))}"`:"",L=Z.length>0?`<${Q}${J}>

727${Z.join(`

728

729`)}

730</${Q}>`:"";return{content:L,files:[...O],references:O.map(c$),triggerPaths:[...$],contentBytes:Buffer.byteLength(L,"utf8"),provenanceSha256:x0(O.map((K)=>`${K.id}:${K.contentSha256}`).join(`

731`))}}function jO(O,$){let Q=$,Z=[];for(let J=O.length-1;J>=0;J-=1){let L=O[J];if(!L)continue;let K=Buffer.byteLength(L.content,"utf8");if(K>Q)continue;Z.push(L),Q-=K}return Z.reverse()}class h{projectRoot;catalogSha256;definitions;byId;constructor(O,$=[]){this.projectRoot=O;this.projectRoot=O1(O),this.definitions=Object.freeze([...$].sort(Q1).map((Q)=>Object.freeze({...Q}))),this.byId=new Map(this.definitions.map((Q)=>[Q.id,Q])),this.catalogSha256=x0(this.definitions.map((Q)=>`${Q.id}:${Q.contentSha256}`).join(`

732`))}static empty(O){return new h(O)}list(){return this.definitions.map((O)=>({id:O.id,relativePath:O.relativePath,source:O.source,kind:O.kind,conditional:O.conditional,contentSha256:O.contentSha256}))}snapshot(){return new h(this.projectRoot,this.definitions.map((O)=>({...O,patterns:O.patterns?[...O.patterns]:void 0})))}staticRules(O,$=y$){if(this.definitions.length===0)return Q0([],[],"project-instructions");let Q=this.relativeSourcePath(O),Z=this.definitions.filter((J)=>!J.conditional&&$1(J.scopeDirectory,Q));return Q0(jO(Z,$),[],"project-instructions")}contextualRules(O,$,Q,Z=h$){if(this.de ...

733export{O4 as Bg,$4 as Cg,Q4 as Dg,H1 as Eg,q4 as Fg,G4 as Gg,s as Hg,x4 as Ig,m as Jg,z as Kg,s0 as Lg,j0 as Mg,T as Ng,e as Og,t0 as Pg,M0 as Qg,h as Rg,zO as Sg,_0 as Tg,bO as Ug,s$ as Vg,u2 as Wg,c2 as Xg,l2 as Yg,s2 as Zg,n2 as _g,i2 as $g,o2 as ah};

734

Long lines were clipped for display.

dist/chunk-qr8xb3x2.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-qr8xb3x2.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){l0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,Z=0,J=0,Y=0;for(let Q of this.readAll()){if(R6(Q.ownerPid)&&S6... [error] ${G.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(G){throw z.status="aborted",z.endTime=Date.now(),await U... `):o$(J,Math.max(0,X))}${m8}`,truncated:!0}}class c8{latestByPage=new Map;issue($){let Z=JU($.snapshot,$.maxBytes),J={snapshotId:`browser_snapshot_${_3()}`,pageId:$.pageId,pageGene... `).filter((w)=>w.toLocaleLowerCase("en-US").includes(B)),D=G.slice(

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-qr8xb3x2.jsView on unpkg

1import{Ga as W3}from"./chunk-g01mth5d.js";import{Ja as T,Ka as $$,Pa as HW,Qa as fY,Ra as e0}from"./chunk-nf7nbhtp.js";import{$a as BX,Sa as Y5,Va as pZ,Za as tZ,_a as zX,bb as nW,... L2: const { spawn } = require('node:child_process'); L3: const [ownerPidValue, command, ...args] = process.argv.slice(1); ... L11: if (!Number.isSafeInteger(ownerPid) || ownerPid <= 1) return false; L12: if (process.platform !== 'win32' && process.ppid !== ownerPid) return false; L13: try { ... L79: } else if (ownerIsRunning()) { L80: child.stdin.end(); L81: } else { ... L97: child = spawn(command, args, { L98: env: process.env, L99: stdio: ['pipe', 'inherit', 'inherit'],

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-qr8xb3x2.jsView on unpkg · L1

dist/chunk-8wc5v2x8.jsView file

Lines 1-3javascript

1import{Xj as I}from"./chunk-9wajn74r.js";import{Mk as f}from"./chunk-eg3ms291.js";import*as j from"fs/promises";import*as S from"path";import X from

dist/chunk-6bpsz0rk.jsView file

Lines 1-21javascript

1import{e as $X,f as JX,h as S$,i as M4}from"./chunk-1xcspsc1.js";import{l as eX,m as $Z,n as JZ}from"./chunk-8wc5v2x8.js";import{A as q4,y as

dist/chunk-g01mth5d.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-g01mth5d.jsView on unpkg

dist/chunk-jj4ggb04.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-jj4ggb04.jsView on unpkg

dist/chunk-214593zs.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-214593zs.jsView on unpkg