botmux@3.18.8: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

botmux@3.18.8: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bin.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/codex-rpc-engine.jsView file

23// what froze the Web terminal). See codex-rpc-lifecycle + worker engageCodexRpc. L24: import { spawn, execFileSync } from 'node:child_process'; L25: import { createServer } from 'node:net';

High

Child Process

Package source references child process execution.

dist/codex-rpc-engine.jsView on unpkg · L23

dist/core/worker-pool.jsView file

86/** 在完整 Worker 模块加载前接住首条 IPC，避免冷启动耗时被误判为投递失败。 */ L87: function workerForkExecArgv() { L88: const preloadPath = join(__dirname, '..', 'worker-ipc-preload.js');

High

Shell

Package source references shell execution.

dist/core/worker-pool.jsView on unpkg · L86

dist/core/plugins/runtime.jsView file

90throw new Error(`plugin_service_entry_not_found:${record.id}:${entrypoint}`); L91: const mod = await import(pathToFileURL(entry).href); L92: const exported = mod.default ?? mod;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/plugins/runtime.jsView on unpkg · L90

dist/worker.jsView file

9* 3. Spawns CLI via CliAdapter + PtyBackend (interactive mode) L10: * 4. Starts HTTP + WebSocket server for xterm.js L11: * 5. Receives 'message' events from daemon, writes to PTY stdin ... L20: import { homedir, tmpdir, userInfo } from 'node:os'; L21: import { spawnSync } from 'node:child_process'; L22: import { [redacted], credentialIsolationRequired, [redacted], [redacted], buildCredentialIsolationRules... ... L176: // this one covers any worker spawn path that bypasses it). Scrubbing L177: // process.env — not just the spawned child's env — matters because worker-side L178: // resolvers consult it dynamically (codex submit confirmation / resume ... L723: headers: { 'content-type': 'application/json' }, L724: body: JSON.stringify({ L725: sessionId: cfg.sessionId,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/worker.jsView on unpkg · L9

dist/autostart.jsView file

19*/ L20: import { spawnSync } from 'node:child_process'; L21: import { existsSync, mkdirSync, writeFileSync, unlinkSync, readFileSync } from 'node:fs'; ... L35: * MUST BE CONSUMED AND DELETED by whoever reads it (see `cmdStart`). The fleet L36: * spawns the supervisor with `{...process.env}`, and daemons/workers/session CLIs L37: * inherit from there; a marker left in the environment would make any later ... L60: function platform() { L61: if (process.platform === 'darwin') L62: return 'macos'; ... L72: function plistPath() { L73: return join(homedir(), 'Library', 'LaunchAgents', `${LABEL}.plist`); L74: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/autostart.jsView on unpkg · L19

dist/mira-runner.jsView file

1#!/usr/bin/env node L2: import { execFileSync } from 'node:child_process'; L3: import { existsSync } from 'node:fs'; ... L8: import { RunnerControlWriter } from './adapters/cli/runner-control-channel.js'; L9: const MIRA_DOMAIN = 'https://mira.bytedance.com'; L10: const API_BASE_URL = process.env.MIRA_API_BASE_URL ?? `${MIRA_DOMAIN}/mira/api/v1`; L11: const MODEL_METADATA_URL = process.env.MIRA_MODEL_METADATA_URL ?? `${MIRA_DOMAIN}/api/v1/model/metadata`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/mira-runner.jsView on unpkg · L1

dist/adapters/backend/mojo-types.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 44

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/adapters/backend/mojo-types.js#virtual:normalized:round1View on unpkg

dist/adapters/backend/riff-backend.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = botmux@3.18.11 matchedIdentity = npm:Ym90bXV4:3.18.11 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/adapters/backend/riff-backend.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 44-84json

44 "test:all": "vitest run",

45 "test:e2e": "vitest run --project e2e",

46 "test:bun": "node scripts/run-bun-tests.mjs",

47 "test:bun:self-check": "node scripts/run-bun-tests.mjs --self-check",

48 "test:bench": "tsx scripts/bench-tests.ts",

49 "test:codex": "vitest run --project e2e test/codex-input.e2e.ts",

50 "test:gemini": "vitest run --project e2e test/gemini-input.e2e.ts",

51 "test:agy": "vitest run --project e2e test/agy-input.e2e.ts",

52 "bench:resource": "node --expose-gc --import tsx scripts/bench-resource.ts",

53 "test:e2e-browser:setup": "tsx test/e2e-browser/setup-login.ts",

54 "test:e2e-browser": "tsx scripts/run-e2e.ts",

55 "report:dashboard": "tsx scripts/report-dashboard.ts",

56 "desktop:bundle": "node scripts/build-desktop-icons.mjs && esbuild src/desktop/main.ts --bundle --outfile=dist/desktop/main.cjs --platform=node --format=cjs --external:electron && esbuild src/desktop/preload.ts --bundle --outfile=dist/desktop/preload.cjs --platform=node --format=cjs --external:electron && esbuild src/desktop/renderer/app.ts --bundle --outfile=dist/desktop/renderer/app.js --platform=browser --format=iife && cp src/desktop/renderer/index.html dist/desktop/renderer/index.html && cp src/desktop/renderer/style.css dist/desktop/renderer/style.css && cp -R src/desktop/assets dist ...

57 "desktop:runtime": "node scripts/prepare-desktop-runtime.mjs",

58 "desktop:smoke": "tsx scripts/desktop-smoke.ts",

59 "desktop:install:local": "bash src/desktop/install-local.sh",

60 "desktop:dev": "bun run build && bun run desktop:bundle && electron dist/desktop/main.cjs",

61 "desktop:pack": "bun run desktop:pack:local",

62 "desktop:pack:local": "node scripts/desktop-pack-local.mjs",

63 "prepublishOnly": "npm run build",

64 "postinstall": "node scripts/postinstall-bin.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L64

65 "prepare": "git config core.hooksPath scripts/git-hooks 2>/dev/null || true"

66 },

67 "dependencies": {

68 "@larksuiteoapi/node-sdk": "^1.64.0",

69 "@modelcontextprotocol/sdk": "^1.29.0",

70 "@xterm/addon-unicode11": "^0.9.0",

71 "@xterm/headless": "^6.0.0",

72 "croner": "^10.0.1",

73 "dotenv": "^17.3.1",

74 "markdown-it": "^14.1.1",

75 "pm2": "^6.0.0",

76 "proxy-agent": "^6.5.0",

77 "qrcode-terminal": "^0.12.0",

78 "react": "^19.2.7",

79 "react-dom": "^19.2.7",

80 "ws": "^8.19.0",

81 "yaml": "^2.9.0",

82 "zod": "^3.23.0"

83 },

84 "optionalDependencies": {

Long lines were clipped for display.

dist/codex-rpc-engine.jsView file

Lines 3-43javascript

3// Runs one `codex app-server --listen ws://127.0.0.1:<port>` per session (the

4// shared engine) and speaks JSON-RPC to it. The session's tmux pane runs the

5// real `codex --remote ws://... resume <threadId>` TUI, so rendering / web

6// terminal / idle detection are unchanged. User input is delivered via

7// `turn/start` (an acked RPC) instead of a tmux paste — bypassing the terminal

8// entirely, which is where codex drops bracketed pastes during its startup /

9// settings-churn terminal re-init (see codex-0144 investigation).

10//

11// Coordination (verified — raw-WS repro + real `codex --remote` TUI): the

12

dist/core/worker-pool.jsView file

86/** 在完整 Worker 模块加载前接住首条 IPC，避免冷启动耗时被误判为投递失败。 */ L87: function workerForkExecArgv() { L88: const preloadPath = join(__dirname, '..', 'worker-ipc-preload.js');

High

Shell

Package source references shell execution.

dist/core/worker-pool.jsView on unpkg · L86

dist/core/plugins/runtime.jsView file

Lines 70-110javascript

70 for (const id of selected) {

71 if (seen.has(id))

72 continue;

73 const record = registry.plugins[id];

dist/worker.jsView file

9* 3. Spawns CLI via CliAdapter + PtyBackend (interactive mode) L10: * 4. Starts HTTP + WebSocket server for xterm.js L11: * 5. Receives 'message' events from daemon, writes to PTY stdin ... L20: import { homedir, tmpdir, userInfo } from 'node:os'; L21: import { spawnSync } from 'node:child_process'; L22: import { [redacted], credentialIsolationRequired, [redacted], [redacted], buildCredentialIsolationRules... ... L176: // this one covers any worker spawn path that bypasses it). Scrubbing L177: // process.env — not just the spawned child's env — matters because worker-side L178: // resolvers consult it dynamically (codex submit confirmation / resume ... L723: headers: { 'content-type': 'application/json' }, L724: body: JSON.stringify({ L725: sessionId: cfg.sessionId,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/worker.jsView on unpkg · L9

dist/autostart.jsView file

Lines 1-39javascript

1/**

2 * Boot-time autostart integration for the botmux daemon.

3 *

4 * macOS — installs a LaunchAgent at ~/Library/LaunchAgents/com.botmux.daemon.plist

5 * and bootstraps it into the GUI domain (no sudo).

6 * Linux — installs a user systemd unit at ~/.config/systemd/user/botmux.service

7 * and enables it (no sudo). Reminds the user to run

8 * `loginctl enable-linger` if the unit needs to survive logout.

9 * Windows — installs a per-user Task Scheduler task, or falls back to the

10 * current user's Startup folder if task registration is denied.

dist/mira-runner.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { execFileSync } from 'node:child_process';

3import { existsSync } from 'node:fs';

4import { homedir } from 'node:os';

5import { join } from

dist/adapters/backend/mojo-types.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 44

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/adapters/backend/mojo-types.js#virtual:normalized:round1View on unpkg

dist/adapters/backend/riff-backend.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = botmux@3.18.11 matchedIdentity = npm:Ym90bXV4:3.18.11 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/adapters/backend/riff-backend.jsView on unpkg