bravecode-cli@0.1.25: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

bravecode-cli@0.1.25: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-arm64-musl,@opentui/core-linux-x64,@opentui/core-linux-x64-musl,@opentui/core-win32-arm64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall =

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall =

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/snapshot/index.jsView file

1import { execSync } from "child_process"; L2: import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";

High

Child Process

Package source references child process execution.

dist/core/snapshot/index.jsView on unpkg · L1

dist/cli-main.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = bravecode-cli@0.1.9 matchedIdentity = npm:YnJhdmVjb2RlLWNsaQ:0.1.9 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli-main.mjsView on unpkg

2008} L2009: const execArgv = process2.execArgv ?? []; L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/cli-main.mjsView on unpkg · L2008

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli-main.mjs: baseURL: "https://codero.sohailsyed.com/api", baseURL: "https://api.mistral.ai/v1", baseURL: "https://api.deepseek.com", baseURL: "https://openrouter.ai/api/v1", baseURL: "https://9router.com/v1", function isSameOrigin(url2, baseUrl) { return new URL(url2).origin === new URL(baseUrl).origin; message: `${description} API key must be a string.`

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-main.mjsView on unpkg

dist/core/tui/ChatTUI.jsView file

2export function ChatTUI({ agentName, modelName, onMessage, onExit }) { L3: const React = require("react"); L4: const { useState, useEffect, useCallback } = React;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/tui/ChatTUI.jsView on unpkg · L2

dist/core/update/index.jsView file

83console.log("Updating @bravecode/cli..."); L84: execSync("npm install -g @bravecode/cli@latest", { L85: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/core/update/index.jsView on unpkg · L83

Source & flagged code

12 flagged

package.jsonView file

Lines 1-42json

1{

2 "name": "bravecode-cli",

3 "version": "0.1.25",

4 "description": "Agentic AI vibe coding CLI with free model support",

5 "type": "module",

6 "main": "dist/index.js",

7 "bin": {

8 "bravecode": "./dist/cli.cjs"

9 },

10 "files": [

11 "dist/**/*",

12 "scripts/**/*",

13 "README.md",

14 "LICENSE"

15 ],

16 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L16

17 "build": "node scripts/build.js",

18 "dev": "tsx watch src/cli.ts",

19 "lint": "eslint \"src/**/*.{ts,tsx}\"",

20 "typecheck": "tsc --noEmit",

21 "prepublishOnly": "npm run build",

22 "postinstall": ""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

24 "keywords": [

25 "ai",

26 "coding",

27 "cli",

28 "agent",

29 "llm",

30 "deepseek",

31 "mistral",

32 "codestral",

33 "vibe-coding",

34 "agentic",

35 "code-generation"

36 ],

37 "author": "BraveCode",

38 "license": "MIT",

39 "repository": {

40 "type": "git",

41 "url": "https://github.com/brave-code-tech/brave-ai"

42 },

dist/core/snapshot/index.jsView file

Lines 1-21javascript

1import { execSync } from "child_process";

2import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";

High

Child Process

Package source references child process execution.

dist/core/snapshot/index.jsView on unpkg · L1

3import { join } from "path";

4

dist/cli-main.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = bravecode-cli@0.1.9 matchedIdentity = npm:YnJhdmVjb2RlLWNsaQ:0.1.9 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli-main.mjsView on unpkg

2008} L2009: const execArgv = process2.execArgv ?? []; L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/cli-main.mjsView on unpkg · L2008

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli-main.mjs: baseURL: "https://codero.sohailsyed.com/api", baseURL: "https://api.mistral.ai/v1", baseURL: "https://api.deepseek.com", baseURL: "https://openrouter.ai/api/v1", baseURL: "https://9router.com/v1", function isSameOrigin(url2, baseUrl) { return new URL(url2).origin === new URL(baseUrl).origin; message: `${description} API key must be a string.`

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-main.mjsView on unpkg

dist/core/tui/ChatTUI.jsView file

Lines 1-22javascript

1import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";

2export function ChatTUI({ agentName, modelName, onMessage, onExit }) {

3 const

dist/core/update/index.jsView file

Lines 63-103javascript

63 latestVersion: CURRENT_VERSION,

64 updateAvailable: false,

65 };

66 }

67 }

68 compareVersions(a, b) {

69 const