bravecode-cli@0.1.9: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

bravecode-cli@0.1.9: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall =

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall =

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/snapshot/index.jsView file

1import { execSync } from "child_process"; L2: import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";

High

Child Process

Package source references child process execution.

dist/core/snapshot/index.jsView on unpkg · L1

dist/cli.mjsView file

1996} L1997: const execArgv = process14.execArgv ?? []; L1998: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/cli.mjsView on unpkg · L1996

dist/core/tui/ChatTUI.jsView file

2export function ChatTUI({ agentName, modelName, onMessage, onExit }) { L3: const React = require("react"); L4: const { useState, useEffect, useCallback } = React;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/tui/ChatTUI.jsView on unpkg · L2

dist/cli.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.cjs: baseURL: "https://codero.sohailsyed.com/api", baseURL: "https://api.mistral.ai/v1", baseURL: "https://api.deepseek.com", baseURL: "https://openrouter.ai/api/v1", baseURL: "https://9router.com/v1", function isSameOrigin(url2, baseUrl) { return new URL(url2).origin === new URL(baseUrl).origin; message: `${description} API key must be a string.`

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.cjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli.cjs: // node_modules/commander/lib/error.js "node_modules/commander/lib/error.js"(exports2) { // node_modules/commander/lib/argument.js "node_modules/commander/lib/argument.js"(exports2) { // node_modules/commander/lib/help.js "node_modules/commander/lib/help.js"(exports2) { * Detect manually wrapped and indented strings by checking for line break followed by whitespace. * Format the "item", which consists of a term and description. Pad the term and wrap the description, indenting the following lines.

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli.cjsView on unpkg

41* Constructs the CommanderError class L42: * @param {number} exitCode suggested exit code which could be used with process.exit L43: * @param {string} code an id string representing the error ... L1151: var EventEmitter = require("node:events").EventEmitter; L1152: var childProcess = require("node:child_process"); L1153: var path2 = require("node:path"); ... L1201: this._outputConfiguration = { L1202: writeOut: (str) => process2.stdout.write(str), L1203: writeErr: (str) => process2.stderr.write(str), ... L1240: * @returns {Command[]} L1241: * @private L1242: */

dist/cli.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: \n`); } catch (error) { console.log(`\ncould not open browser automatically.`); console.log(`please open this url manually: ${url}\n`); } }); program .command("fetch <url>") .description("fetch content from a url") .option("-m, --method <method>", "http method", "get") .option("-d, --data <data>", "request body for post/put") .action(async (url, options) => { const method = options.method || "get"; console.log(`\nfetching ${url} (${method})...\n`); try { const response = await fetch(url, { method, headers: { "user-agent": "bravecode-ai/1.0", }, body: options.data,

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli.jsView on unpkg

dist/core/update/index.jsView file

83console.log("Updating @bravecode/cli..."); L84: execSync("npm install -g @bravecode/cli@latest", { L85: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/core/update/index.jsView on unpkg · L83

Source & flagged code

10 flagged

package.jsonView file

Lines 2-42json

2 "name": "bravecode-cli",

3 "version": "0.1.9",

4 "description": "Agentic AI vibe coding CLI with free model support",

5 "type": "module",

6 "main": "dist/index.js",

7 "bin": {

8 "bravecode": "./dist/cli.cjs"

9 },

10 "files": [

11 "dist/**/*",

12 "scripts/**/*",

13 "README.md",

14 "LICENSE"

15 ],

16 "scripts": {

17 "build": "node scripts/build.js",

18 "dev": "tsx watch src/cli.ts",

19 "lint": "eslint src/ --ext .ts",

20 "typecheck": "tsc --noEmit",

21 "prepublishOnly": "npm run build",

22 "postinstall": ""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

24 "keywords": [

25 "ai",

26 "coding",

27 "cli",

28 "agent",

29 "llm",

30 "deepseek",

31 "mistral",

32 "codestral",

33 "vibe-coding",

34 "agentic",

35 "code-generation"

36 ],

37 "author": "BraveCode",

38 "license": "MIT",

39 "repository": {

40 "type": "git",

41 "url": "https://github.com/brave-code-tech/brave-ai"

42 },

dist/core/snapshot/index.jsView file

Lines 1-21javascript

1import { execSync } from "child_process";

2import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";

High

Child Process

Package source references child process execution.

dist/core/snapshot/index.jsView on unpkg · L1

3import { join } from "path";

4

dist/cli.mjsView file

1996} L1997: const execArgv = process14.execArgv ?? []; L1998: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/cli.mjsView on unpkg · L1996

dist/core/tui/ChatTUI.jsView file

Lines 1-22javascript

1import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";

2export function ChatTUI({ agentName, modelName, onMessage, onExit }) {

3 const

dist/cli.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.cjs: baseURL: "https://codero.sohailsyed.com/api", baseURL: "https://api.mistral.ai/v1", baseURL: "https://api.deepseek.com", baseURL: "https://openrouter.ai/api/v1", baseURL: "https://9router.com/v1", function isSameOrigin(url2, baseUrl) { return new URL(url2).origin === new URL(baseUrl).origin; message: `${description} API key must be a string.`

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.cjsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli.cjs: // node_modules/commander/lib/error.js "node_modules/commander/lib/error.js"(exports2) { // node_modules/commander/lib/argument.js "node_modules/commander/lib/argument.js"(exports2) { // node_modules/commander/lib/help.js "node_modules/commander/lib/help.js"(exports2) { * Detect manually wrapped and indented strings by checking for line break followed by whitespace. * Format the "item", which consists of a term and description. Pad the term and wrap the description, indenting the following lines.

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli.cjsView on unpkg

41* Constructs the CommanderError class L42: * @param {number} exitCode suggested exit code which could be used with process.exit L43: * @param {string} code an id string representing the error ... L1151: var EventEmitter = require("node:events").EventEmitter; L1152: var childProcess = require("node:child_process"); L1153: var path2 = require("node:path"); ... L1201: this._outputConfiguration = { L1202: writeOut: (str) => process2.stdout.write(str), L1203: writeErr: (str) => process2.stderr.write(str), ... L1240: * @returns {Command[]} L1241: * @private L1242: */

dist/cli.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: \n`); } catch (error) { console.log(`\ncould not open browser automatically.`); console.log(`please open this url manually: ${url}\n`); } }); program .command("fetch <url>") .description("fetch content from a url") .option("-m, --method <method>", "http method", "get") .option("-d, --data <data>", "request body for post/put") .action(async (url, options) => { const method = options.method || "get"; console.log(`\nfetching ${url} (${method})...\n`); try { const response = await fetch(url, { method, headers: { "user-agent": "bravecode-ai/1.0", }, body: options.data,

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli.jsView on unpkg

dist/core/update/index.jsView file

Lines 63-103javascript

63 latestVersion: CURRENT_VERSION,

64 updateAvailable: false,

65 };

66 }

67 }

68 compareVersions(a, b) {

69 const