blade-code@0.10.198: Manual Review npm security report (Allow) | LPM Firewall

Loading npm security reports…

blade-code@0.10.198: Manual Review npm security report (Allow) | LPM Firewall

Source & flagged code

11 flagged · loading source

dist/chunk-sqrhdczm.jsView file

714`}}import*as n from"node:fs/promises";import*as Y0 from"node:path";import{parse as yO}from"yaml";var hO=/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/,fO=/^[a-z0-9][a-z0-9-]{0,62}[a... L715: `)}get size(){return this.skills.size}async refresh(){return this.skills.clear(),this.pluginSkills.clear(),this.initialized=!1,this.initialize()}snapshot(){let O=new R({...this.con... L716: ${Y}

High

Child Process

Package source references child process execution.

dist/chunk-sqrhdczm.jsView on unpkg · L714

dist/chunk-r2ev8kdg.jsView file

1import{$e as q1,Ae as n2,Be as U1,Ce as A0,De as B1,Ee as H1,Ge as d2,Ne as i2,Oe as C0,Ve as p_,Xe as N1,Ze as r2,_e as o2,af as a2,pe as u2,qe as e,re as h2,se as Z1,te as l2,ue ... L2: `,"utf8"),!0}catch(W){if(R_(W,"EEXIST"))return!1;if($)await W_.unlink(_).catch(()=>{return});throw W}finally{await $?.close().catch(()=>{return})}}class $_ extends Error{code="BLAD... L3: L4: ...[middle omitted; read the private prompt artifact for the complete request]... L5: L6: `;function I1(_,X){return _ instanceof Error&&"code"in _&&_.code===X}function v_(_,X){let $=_ instanceof Error&&(_.message.startsWith("Prompt artifact")||_.message.startsWith("User... L7: `),Z=P1(_);return{content:I4(J,Z,W.contentLayout,x_-Buffer.byteLength(Y),Y),metadata:{...X,userPromptArtifact:Q},offloaded:!0}}async res

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-r2ev8kdg.jsView on unpkg · L1

dist/chunk-hasgf62t.jsView file

1import{Yj as I}from"./chunk-25ma8vb3.js";import{Nk as f}from"./chunk-cjfb4kjp.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-hasgf62t.jsView on unpkg · L1

1import{Yj as I}from"./chunk-25ma8vb3.js";import{Nk as f}from"./chunk-cjfb4kjp.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-hasgf62t.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/blade.js -> dist/chunk-bp1n4k48.js -> dist/chunk-hasgf62t.js L1: import{Yj as I}from"./chunk-25ma8vb3.js";import{Nk as f}from"./chunk-cjfb4kjp.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/chunk-hasgf62t.jsView on unpkg · L1

dist/chunk-0qfm5awe.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blade-code@0.10.189 matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.189 similarity = 0.973 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-0qfm5awe.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-0qfm5awe.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){p0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,Z=0,J=0,Y=0;for(let Q of this.readAll()){if(R6(Q.ownerPid)&&S6... [error] ${B.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(B){throw z.status="aborted",z.endTime=Date.now(),await H... `):o$(J,Math.max(0,X))}${m8}`,truncated:!0}}class c8{latestByPage=new Map;issue($){let Z=XH($.snapshot,$.maxBytes),J={snapshotId:`browser_snapshot_${F3()}`,pageId:$.pageId,pageGene... `).filter((q)=>q.toLocaleLowerCase("en-US").includes(G)),D=B.slice(

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-0qfm5awe.jsView on unpkg

dist/chunk-pxmskd21.jsView file

1Cross-file remote execution chain: dist/chunk-pxmskd21.js spawns dist/chunk-0qfm5awe.js; helper contains network access plus dynamic code execution. L1: import{e as U3,f as H3,g as R3,h as s0,i as q3}from"./chunk-g88adq1a.js";import{j as o1}from"./chunk-hnvvve5d.js";import{v as a0,w as y2}from"./chunk-zh4w88j6.js";import{A as m0,x ... L2: `;if(O.event!==void 0)$+=`event: ${O.event} L3: `;for(let Q of O.data.split(/\r\n|\r|\n/))$+=`data: ${Q} L4: `;if(O.retry!==void 0)$+=`retry: ${O.retry} L5: `;return $+=` L6: `,Buffer.byteLength($)}class K1{serial;buffered=[];bufferedBytes=0;nextOrder=0;phase="buffering";highestDeliveredSequence=0;highestReplaySequence=0;failure;maxPendingItems;maxPendi... L7: `)}function a$(O,$){let Q=($??[]).filter((J)=>J.type==="image"&&typeof J.content==="string").map

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-pxmskd21.jsView on unpkg · L1

dist/chunk-p0wyhp5a.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-p0wyhp5a.jsView on unpkg

dist/chunk-vzdsext4.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-vzdsext4.jsView on unpkg

dist/chunk-vd58pp9k.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-vd58pp9k.jsView on unpkg

Source & flagged code

11 flagged

dist/chunk-sqrhdczm.jsView file

Lines 694-734javascript

694| "提高温度" | temperature 调整 |

695| "限制 50 轮" | maxTurns = 50 |

696| "禁用 hooks" | disableAllHooks = true |

697| "添加环境变量" | env 对象更新 |

698

699## 验证流程

700

701每次安装 hook 或修改配置后，**必须**验证：

702

7031. 用 \`ConfigTool({ operation: "get", key: "<modified-key>" })\` 确认值已生效

7042. 如果是 hooks，检查结构是否正确（包含 matcher 和 hooks 数组）

7053. 如果是 permissions，确认 allow/ask/deny 数组格式正确

7064. 告知用户配置已保存到哪个文件（根据 scope 判断）

707

708## 注意事项

709

7101. **hooks 字段使用 deep-merge 策略**：设置新的 hook 不会覆盖已有的 hook。但如果同一事件下设置新的 matcher 数组，会替换该事件的整个 matcher 列表

7112. **permissions 字段使用 replace 策略**：设置 permissions 会完全替换现有值。如果只想添加规则，先 GET 当前值，合并后再 SET

7123. **env 字段使用 deep-merge 策略**：可以逐个添加环境变量

7134. **scope 默认值**：不指定 scope 时，根据字段路由表决定（hooks/permissions/env 默认 local，temperature/codeTheme 等默认 global）

714`}}import*as n from"node:fs/promises";import*as Y0 from"node:path";import{parse as yO}from"yaml";var hO=/^---\r?\n([\s\S]*?)\r

715`)}get size(){return this.skills.size}async refresh(){return this.skills.clear(),this.pluginSkills.clear(),this.initialized=!1,this.initialize()}snapshot(){let O=new R({...this.config});return O.skills=new Map(Array.from(this.skills,([$,Q])=>[$,{...Q,...Q.allowedTools?{allowedTools:[...Q.allowedTools]}:{}}])),O.pluginSkills=new Map(Array.from(this.pluginSkills,([$,Q])=>[$,{...Q,metadata:{...Q.metadata,...Q.metadata.allowedTools?{allowedTools:[...Q.metadata.allowedTools]}:{}}}])),O.initialized=this.initialized,O}registerPluginSkill(O){this.pluginSkills.set(O.namespacedName,O),this.skills.set(O. ...

716${Y}

High

Child Process

Package source references child process execution.

dist/chunk-sqrhdczm.jsView on unpkg · L714

717\`\`\``;J=J.replace(L,H)}}catch{}}return J}hasDynamicContent(O){return{hasArgs:/\$ARGUMENTS|\$\d/.test(

718

719`,J=Z.length,L=0;for(let K of $){let W=K.argumentHint?` ${K.argumentHint}`:"",G=`- /${K.name}${W}: ${K.description} ${K.label}

720`;if(J+G.length>O)break;Z+=G,J+=G.length,L++}if(L<Q)Z+=`

721(${L} of ${Q} commands shown due to character budget)`;return{text:Z,includedCount:L,totalCount:Q}}snapshot(){let O=new z;return O.workspaceRoot=this.workspaceRoot,O.commands=new Map(Array.from(this.commands,([$,Q])=>[$,{...Q,config:{...Q.config,...Q.config.allowedTools?{allowedTools:[...Q.config.allowedTools]}:{}}}])),O.pluginCommands=new Map(Array.from(this.pluginCommands,([$,Q])=>[$,{...Q,config:{...Q.config,...Q.config.allowedTools?{allowedTools:[...Q.config.allowedTools]}:{}}}])),O.initialized=this.initialized,O.lastDiscoveryResult=this.lastDiscoveryResult?{commands:Array.from(O.commands. ...

722`,"utf8"),await Z.close(),async()=>{try{if(JSON.parse(await F.readFile(O,"utf8")).token===$)await F.unlink(O)}catch(J){if(!u(J))j.warn(`Failed to release plugin package lock: ${J}`)}}}catch(Z){if(Z.code!=="EEXIST")throw Z;await this.removeStaleStoreLock(O),await new Promise((J)=>setTimeout(J,50))}throw new U("PLUGIN_STORE_BUSY","Plugin package store is busy; retry the operation")}async removeStaleStoreLock(O){try{let $=await F.lstat(O);if(!$.isFile()||$.isSymbolicLink())throw new U("PLUGIN_STORE_INVALID","Plugin package lock must be a regular file");if(process.getuid&&$.uid!==process.getuid()| ...

723`,{mode:384,encoding:"utf8"}),await F.chmod(this.statePath,384)}async ensureStoreDirectory(){try{let O=await F.lstat(this.stateRoot);if(!O.isDirectory()||O.isSymbolicLink())throw new U("PLUGIN_STORE_INVALID","Plugin package store must be a regular directory");if(process.getuid&&O.uid!==process.getuid())throw new U("PLUGIN_STORE_INVALID","Plugin package store must be owned by the current user");if((O.mode&511)!==448)throw new U("PLUGIN_STORE_INVALID","Plugin package store permissions must be 0700")}catch(O){if(!u(O))throw O;await F.mkdir(this.stateRoot,{recursive:!0,mode:448}),await F.chmod(thi ...

724`)}}function e(O=B()){return T.getInstance(O)}var O0=new Map,ZO=Object.values(B0);function o0(O,$){let Q=QO.resolve(O),Z=O0.get(Q);if(!Z||$&&Z.registry!==$)return!1;return $0.getInstance().loadConfig(Z.base,Q),O0.delete(Q),!0}function i0(O){let $={...O};for(let Q of ZO)$[Q]=(O[Q]??[]).map((Z)=>({...Z,matcher:Z.matcher?{...Z.matcher}:void 0,hooks:Z.hooks.map((J)=>({...J}))}));return $}class a0{commandRegistry;

725${K.content}

726</instruction-file>`}),J=Q==="contextual-project-instructions"&&$.length>0?` trigger-paths="${VO($.join(","))}"`:"",L=Z.length>0?`<${Q}${J}>

727${Z.join(`

728

729`)}

730</${Q}>`:"";return{content:L,files:[...O],references:O.map(c$),triggerPaths:[...$],contentBytes:Buffer.byteLength(L,"utf8"),provenanceSha256:x0(O.map((K)=>`${K.id}:${K.contentSha256}`).join(`

731`))}}function jO(O,$){let Q=$,Z=[];for(let J=O.length-1;J>=0;J-=1){let L=O[J];if(!L)continue;let K=Buffer.byteLength(L.content,"utf8");if(K>Q)continue;Z.push(L),Q-=K}return Z.reverse()}class h{projectRoot;catalogSha256;definitions;byId;constructor(O,$=[]){this.projectRoot=O;this.projectRoot=O1(O),this.definitions=Object.freeze([...$].sort(Q1).map((Q)=>Object.freeze({...Q}))),this.byId=new Map(this.definitions.map((Q)=>[Q.id,Q])),this.catalogSha256=x0(this.definitions.map((Q)=>`${Q.id}:${Q.contentSha256}`).join(`

732`))}static empty(O){return new h(O)}list(){return this.definitions.map((O)=>({id:O.id,relativePath:O.relativePath,source:O.source,kind:O.kind,conditional:O.conditional,contentSha256:O.contentSha256}))}snapshot(){return new h(this.projectRoot,this.definitions.map((O)=>({...O,patterns:O.patterns?[...O.patterns]:void 0})))}staticRules(O,$=y$){if(this.definitions.length===0)return Q0([],[],"project-instructions");let Q=this.relativeSourcePath(O),Z=this.definitions.filter((J)=>!J.conditional&&$1(J.scopeDirectory,Q));return Q0(jO(Z,$),[],"project-instructions")}contextualRules(O,$,Q,Z=h$){if(this.de ...

733export{O4 as Cg,$4 as Dg,Q4 as Eg,H1 as Fg,q4 as Gg,G4 as Hg,s as Ig,x4 as Jg,m as Kg,z as Lg,s0 as Mg,j0 as Ng,T as Og,e as Pg,t0 as Qg,M0 as Rg,h as Sg,zO as Tg,_0 as Ug,bO as Vg,s$ as Wg,u2 as Xg,c2 as Yg,l2 as Zg,s2 as _g,n2 as $g,i2 as ah,o2 as bh};

734

Long lines were clipped for display.

dist/chunk-r2ev8kdg.jsView file

Lines 1-21javascript

1import{$e as q1,Ae as n2,Be as U1,Ce as A0,De as B1,Ee as H1,Ge as d2,Ne as i2,Oe as C0,Ve as p_,Xe as N1,Ze as r2,_e as o2,af as a2,pe as

dist/chunk-hasgf62t.jsView file

1import{Yj as I}from"./chunk-25ma8vb3.js";import{Nk as f}from"./chunk-cjfb4kjp.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-hasgf62t.jsView on unpkg · L1

1import{Yj as I}from"./chunk-25ma8vb3.js";import{Nk as f}from"./chunk-cjfb4kjp.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-hasgf62t.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/blade.js -> dist/chunk-bp1n4k48.js -> dist/chunk-hasgf62t.js L1: import{Yj as I}from"./chunk-25ma8vb3.js";import{Nk as f}from"./chunk-cjfb4kjp.js";import*as j from"fs/promises";import*as S from"path";import X from"semver";import{ProxyAgent as R,... L2: export{A as k,V as l,v as m,p as n,h as o};

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/chunk-hasgf62t.jsView on unpkg · L1

dist/chunk-0qfm5awe.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = blade-code@0.10.189 matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.189 similarity = 0.973 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-0qfm5awe.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-0qfm5awe.js: `,{encoding:"utf8",mode:384,fsync:!0}),Q}remove($){p0.rmSync(this.filePath($),{force:!0})}async reapOrphans(){let $=0,Z=0,J=0,Y=0;for(let Q of this.readAll()){if(R6(Q.ownerPid)&&S6... [error] ${B.message}`),z.releaseAdmission(),z.resolveCompletion()})()}),this.processes.set(J,z);try{await W.release()}catch(B){throw z.status="aborted",z.endTime=Date.now(),await H... `):o$(J,Math.max(0,X))}${m8}`,truncated:!0}}class c8{latestByPage=new Map;issue($){let Z=XH($.snapshot,$.maxBytes),J={snapshotId:`browser_snapshot_${F3()}`,pageId:$.pageId,pageGene... `).filter((q)=>q.toLocaleLowerCase("en-US").includes(G)),D=B.slice(

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-0qfm5awe.jsView on unpkg

dist/chunk-pxmskd21.jsView file

Lines 1-15javascript

1import{e as U3,f as H3,g as R3,h as s0,i as q3}from"./chunk-g88adq1a.js";import{j as o1}from"./chunk-hnvvve5d.js";import{v as a0,w as y2}from

dist/chunk-p0wyhp5a.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-a60cmnmz.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-p0wyhp5a.jsView on unpkg

dist/chunk-vzdsext4.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-6p6ts4kv.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-vzdsext4.jsView on unpkg

dist/chunk-vd58pp9k.jsView file

•matchType = normalized_sha256 matchedPackage = blade-code@0.10.130 matchedPath = dist/chunk-kfkvdj49.js matchedIdentity = npm:YmxhZGUtY29kZQ:0.10.130 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-vd58pp9k.jsView on unpkg