bravecode-cli@0.1.47: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

bravecode-cli@0.1.47: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•dependencies registry_only=@opentui/core-darwin-arm64,@opentui/core-darwin-x64,@opentui/core-linux-arm64,@opentui/core-linux-arm64-musl,@opentui/core-linux-x64,@opentui/core-linux-x64-musl,@opentui/core-win32-arm64,@opentui/core-win32-x64

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

•scripts.postinstall =

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall =

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli-main.mjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli-main.mjs: baseURL: "https://codero.sohailsyed.com/api", baseURL: "https://api.mistral.ai/v1", baseURL: "https://api.deepseek.com", baseURL: "https://openrouter.ai/api/v1", baseURL: "https://9router.com/v1", function isSameOrigin(url2, baseUrl) { return new URL(url2).origin === new URL(baseUrl).origin; message: `${description} API key must be a string.`

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-main.mjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli-main.mjs: // node_modules/commander/lib/error.js "node_modules/commander/lib/error.js"(exports) { // node_modules/commander/lib/argument.js "node_modules/commander/lib/argument.js"(exports) { // node_modules/commander/lib/help.js "node_modules/commander/lib/help.js"(exports) { * Detect manually wrapped and indented strings by checking for line break followed by whitespace. * Format the "item", which consists of a term and description. Pad the term and wrap the description, indenting the following lines.

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli-main.mjsView on unpkg

58* Constructs the CommanderError class L59: * @param {number} exitCode suggested exit code which could be used with process.exit L60: * @param {string} code an id string representing the error ... L1168: var EventEmitter = __require("node:events").EventEmitter; L1169: var childProcess = __require("node:child_process"); L1170: var path2 = __require("node:path"); ... L1218: this._outputConfiguration = { L1219: writeOut: (str) => process2.stdout.write(str), L1220: writeErr: (str) => process2.stderr.write(str), ... L1257: * @returns {Command[]} L1258: * @private L1259: */

Source & flagged code

8 flagged

package.jsonView file

Lines 1-42json

1{

2 "name": "bravecode-cli",

3 "version": "0.1.47",

4 "description": "Agentic AI vibe coding CLI with free model support",

5 "type": "module",

6 "main": "dist/index.js",

7 "bin": {

8 "bravecode": "./dist/cli.cjs"

9 },

10 "files": [

11 "dist/**/*",

12 "scripts/**/*",

13 "README.md",

14 "LICENSE"

15 ],

16 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L16

17 "build": "node scripts/build.js",

18 "dev": "tsx watch src/cli.ts",

19 "lint": "eslint \"src/**/*.{ts,tsx}\"",

20 "typecheck": "tsc --noEmit",

21 "prepublishOnly": "npm run build",

22 "postinstall": ""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

24 "keywords": [

25 "ai",

26 "coding",

27 "cli",

28 "agent",

29 "llm",

30 "deepseek",

31 "mistral",

32 "codestral",

33 "vibe-coding",

34 "agentic",

35 "code-generation"

36 ],

37 "author": "BraveCode",

38 "license": "MIT",

39 "repository": {

40 "type": "git",

41 "url": "https://github.com/brave-code-tech/brave-ai"

42 },

dist/cli-main.mjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli-main.mjs: baseURL: "https://codero.sohailsyed.com/api", baseURL: "https://api.mistral.ai/v1", baseURL: "https://api.deepseek.com", baseURL: "https://openrouter.ai/api/v1", baseURL: "https://9router.com/v1", function isSameOrigin(url2, baseUrl) { return new URL(url2).origin === new URL(baseUrl).origin; message: `${description} API key must be a string.`

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli-main.mjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli-main.mjs: // node_modules/commander/lib/error.js "node_modules/commander/lib/error.js"(exports) { // node_modules/commander/lib/argument.js "node_modules/commander/lib/argument.js"(exports) { // node_modules/commander/lib/help.js "node_modules/commander/lib/help.js"(exports) { * Detect manually wrapped and indented strings by checking for line break followed by whitespace. * Format the "item", which consists of a term and description. Pad the term and wrap the description, indenting the following lines.

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli-main.mjsView on unpkg

58* Constructs the CommanderError class L59: * @param {number} exitCode suggested exit code which could be used with process.exit L60: * @param {string} code an id string representing the error ... L1168: var EventEmitter = __require("node:events").EventEmitter; L1169: var childProcess = __require("node:child_process"); L1170: var path2 = __require("node:path"); ... L1218: this._outputConfiguration = { L1219: writeOut: (str) => process2.stdout.write(str), L1220: writeErr: (str) => process2.stderr.write(str), ... L1257: * @returns {Command[]} L1258: * @private L1259: */