bravecode-cli@0.1.43: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

bravecode-cli@0.1.43: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

16 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-arm64-musl,@opentui/core-linux-x64,@opentui/core-linux-x64-musl,@opentui/core-win32-arm64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall =

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall =

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/snapshot/index.jsView file

1import { execSync } from "child_process"; L2: import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";

High

Child Process

Package source references child process execution.

dist/core/snapshot/index.jsView on unpkg · L1

dist/cli-main.mjsView file

58* Constructs the CommanderError class L59: * @param {number} exitCode suggested exit code which could be used with process.exit L60: * @param {string} code an id string representing the error ... L1168: var EventEmitter = __require("node:events").EventEmitter; L1169: var childProcess = __require("node:child_process"); L1170: var path2 = __require("node:path"); ... L1218: this._outputConfiguration = { L1219: writeOut: (str) => process4.stdout.write(str), L1220: writeErr: (str) => process4.stderr.write(str), ... L1257: * @returns {Command[]} L1258: * @private L1259: */

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli-main.mjsView on unpkg · L58

58Trigger-reachable chain: manifest.bin -> dist/cli.cjs -> dist/cli-main.mjs L58: * Constructs the CommanderError class L59: * @param {number} exitCode suggested exit code which could be used with process.exit L60: * @param {string} code an id string representing the error ... L1168: var EventEmitter = __require("node:events").EventEmitter; L1169: var childProcess = __require("node:child_process"); L1170: var path2 = __require("node:path"); ... L1218: this._outputConfiguration = { L1219: writeOut: (str) => process4.stdout.write(str), L1220: writeErr: (str) => process4.stderr.write(str), ... L1257: * @returns {Command[]} L1258: * @private L1259: */

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli-main.mjsView on unpkg · L58

2008} L2009: const execArgv = process4.execArgv ?? []; L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

dist/core/tui/ChatTUI.jsView file

2export function ChatTUI({ agentName, modelName, onMessage, onExit }) { L3: const React = require("react"); L4: const { useState, useEffect, useCallback } = React;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/tui/ChatTUI.jsView on unpkg · L2

dist/core/update/index.jsView file

83console.log("Updating @bravecode/cli..."); L84: execSync("npm install -g @bravecode/cli@latest", { L85: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/core/update/index.jsView on unpkg · L83

dist/models.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/models.jsonView on unpkg

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = bravecode-cli@0.1.48 matchedIdentity = npm:YnJhdmVjb2RlLWNsaQ:0.1.48 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

Source & flagged code

16 flagged

package.jsonView file

Lines 2-42json

2 "name": "bravecode-cli",

3 "version": "0.1.43",

4 "description": "Agentic AI vibe coding CLI with free model support",

5 "type": "module",

6 "main": "dist/index.js",

7 "bin": {

8 "bravecode": "./dist/cli.cjs"

9 },

10 "files": [

11 "dist/**/*",

12 "scripts/**/*",

13 "README.md",

14 "LICENSE"

15 ],

16 "scripts": {

17 "build": "node scripts/build.js",

18 "dev": "tsx watch src/cli.ts",

19 "lint": "eslint \"src/**/*.{ts,tsx}\"",

20 "typecheck": "tsc --noEmit",

21 "prepublishOnly": "npm run build",

22 "postinstall": ""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

24 "keywords": [

25 "ai",

26 "coding",

27 "cli",

28 "agent",

29 "llm",

30 "deepseek",

31 "mistral",

32 "codestral",

33 "vibe-coding",

34 "agentic",

35 "code-generation"

36 ],

37 "author": "BraveCode",

38 "license": "MIT",

39 "repository": {

40 "type": "git",

41 "url": "https://github.com/brave-code-tech/brave-ai"

42 },

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-arm64-musl,@opentui/core-linux-x64,@opentui/core-linux-x64-musl,@opentui/core-win32-arm64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

dist/core/snapshot/index.jsView file

Lines 1-21javascript

1import { execSync } from "child_process";

2import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";

High

Child Process

Package source references child process execution.

dist/core/snapshot/index.jsView on unpkg · L1

3import { join } from "path";

4

dist/cli-main.mjsView file

58* Constructs the CommanderError class L59: * @param {number} exitCode suggested exit code which could be used with process.exit L60: * @param {string} code an id string representing the error ... L1168: var EventEmitter = __require("node:events").EventEmitter; L1169: var childProcess = __require("node:child_process"); L1170: var path2 = __require("node:path"); ... L1218: this._outputConfiguration = { L1219: writeOut: (str) => process4.stdout.write(str), L1220: writeErr: (str) => process4.stderr.write(str), ... L1257: * @returns {Command[]} L1258: * @private L1259: */

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli-main.mjsView on unpkg · L58

58Trigger-reachable chain: manifest.bin -> dist/cli.cjs -> dist/cli-main.mjs L58: * Constructs the CommanderError class L59: * @param {number} exitCode suggested exit code which could be used with process.exit L60: * @param {string} code an id string representing the error ... L1168: var EventEmitter = __require("node:events").EventEmitter; L1169: var childProcess = __require("node:child_process"); L1170: var path2 = __require("node:path"); ... L1218: this._outputConfiguration = { L1219: writeOut: (str) => process4.stdout.write(str), L1220: writeErr: (str) => process4.stderr.write(str), ... L1257: * @returns {Command[]} L1258: * @private L1259: */

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli-main.mjsView on unpkg · L58

2008} L2009: const execArgv = process4.execArgv ?? []; L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

dist/core/tui/ChatTUI.jsView file

Lines 1-22javascript

1import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";

2export function ChatTUI({ agentName, modelName, onMessage, onExit }) {

3 const

dist/core/update/index.jsView file

83console.log("Updating @bravecode/cli..."); L84: execSync("npm install -g @bravecode/cli@latest", { L85: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/core/update/index.jsView on unpkg · L83

dist/models.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/models.jsonView on unpkg

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = bravecode-cli@0.1.48 matchedIdentity = npm:YnJhdmVjb2RlLWNsaQ:0.1.48 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg