Loading npm security reports…

cli-jaw@2.17.27: Malicious npm security report (Block) | LPM Firewall

registry / cli-jaw / 2.17.27

cli-jaw@2.17.27

Personal AI assistant powered by Pi, Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Grok, Kiro, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package automatically runs a broad setup routine. It downloads and executes remote installers, globally installs tools, and fetches remote skill content into user-controlled home directories.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

Unreviewed remote code and packages run during installation and alter the user's global developer and AI-tool environment.

Mechanism

automatic remote script execution and global tool installation

Attack narrative

On installation, the manifest launches a guard that imports the compiled postinstall routine. That routine automatically installs global packages, downloads remote shell or PowerShell installers and executes them, installs Claude unless explicitly disabled, and clones a remote skills repository before copying its contents into the user's CLI-JAW home. These actions occur before the user invokes the CLI and make the installed package a vehicle for unreviewed remote code and supply-chain content.

Rationale

The package's postinstall hook performs automatic remote-code execution, global package installation, and remote skill acquisition. Those install-time actions exceed package setup and present a concrete supply-chain attack surface.

Evidence

package.jsonscripts/postinstall-guard.cjsdist/bin/postinstall.jsdist/lib/mcp/skills-distribution.js~/.cli-jaw/skills~/.cli-jaw/skills_ref

Network endpoints4

Source & flagged code

27 flagged

package.jsonView file

Lines 35-75json

35 "node": ">=22.4.0"

36 },

37 "allowScripts": {

38 "better-sqlite3": false

39 },

40 "bin": {

41 "cli-jaw": "dist/bin/cli-jaw.js",

42 "jaw": "dist/bin/cli-jaw.js"

43 },

44 "files": [

45 "dist/",

46 "!dist/src/lib/native/*.node",

47 "public/",

48 "scripts/",

49 "package.json"

50 ],

51 "scripts": {

52 "dev": "tsx --env-file=.env server.ts",

53 "ensure:native": "node scripts/ensure-native-modules.cjs",

54 "rebuild:native": "npm rebuild better-sqlite3",

55 "postinstall": "node scripts/postinstall-guard.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

56 "clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",

57 "build:claude-e": "cargo build --release --manifest-path native/claude-e/Cargo.toml",

58 "test:claude-e": "cargo test --manifest-path native/claude-e/Cargo.toml",

59 "build:claude-exec": "npm run build:claude-e",

60 "test:claude-exec": "npm run test:claude-e",

61 "check:copilot-gap": "tsx scripts/check-copilot-gap.ts",

62 "check:deps": "tsx scripts/check-deps-offline.ts",

63 "check:deps:audit": "tsx scripts/check-deps-audit.ts",

64 "check:strict-baseline": "node scripts/check-strict-baseline.mjs",

65 "check:path-length": "node scripts/check-path-length.mjs",

66 "docs:check": "tsx scripts/docs/check-docs.mts",

67 "docs:windows": "tsx scripts/render-windows-support.mts",

68 "docs:channel-capabilities": "tsx scripts/generate-channel-capability-table.mts",

69 "check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",

70 "i18n:registry": "tsx scripts/i18n-registry.ts",

71 "check:deps:online": "bash scripts/check-deps-online.sh",

72 "prebuild": "npm run ensure:native",

73 "pretest": "npm run ensure:native",

74 "pretest:all": "npm run ensure:native",

75 "pretest:integration": "npm run ensure:native",

dist/bin/postinstall.jsView file

Lines 4-44javascript

4if (major < 22) {

5 console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`);

6 console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`);

7 process.exit(1

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

Lines 78-114javascript

78}

79async function injectBundle(page, source) {

80 const alreadyInjected = await page

81 // @strict-allow-any(in-page global probe)

dist/src/agent/jwc-runtime.jsView file

Lines 11-51javascript

11// session.subscribe(listener) → unsubscribe ; session.isStreaming ; session.dispose()

12//

13// The engine is loaded lazily by dynamic import so this module compiles before

14// the jwc package is linked (100 in flight). Resolution order:

15// 1. JWC_SDK_PATH env (absolute path to dist-node/sdk.js — dev/CI)

16// 2. "jawcode/sdk" package export (separately installed package path)

17import { homedir } from 'node:os';

18import { join }

dist/src/ide/diff.jsView file

Lines 1-27javascript

1/**

2 * src/ide/diff.ts — IDE Diff View Module

3 * Git diff 감지 + IDE (Antigravity/VS Code) 연동

4 * 서버 변경 0줄 — jaw chat (TUI) 전용

5 *

6 * 접근법: before/after "dirty file set" 비교 (서브모듈 재귀 지원)

7 */

8import { execFileSync, execFile } from 'node:child_process';

9import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync }

dist/bin/commands/launchd.jsView file

Lines 1-29javascript

1/**

2 * cli-jaw launchd — macOS LaunchAgent 관리

3 * Usage:

4 * jaw launchd — plist 확인 → 없으면 생성 → 시작 (원스텝)

5 * jaw launchd --port 3458 — 커스텀 포트로 등록

6 * jaw launchd unset — plist 제거 + 해제

7 * jaw launchd status — 현재 상태 확인

8 * jaw launchd cleanup — legacy plist 정리

9 */

10import { execSync } from

dist/bin/commands/doctor.jsView file

Lines 599-639javascript

599 });

600 return 'granted';

601 }

602 catch {

603 // Auto-open System Preferences

604 try {

605 execSync('open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"'

dist/bin/commands/skill.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { readfilesync, writefilesync, existssync, mkdirsync, rmsync, cpsync } from 'node:fs'; import { join } from 'node:path'; import { homedir } from 'node:os'; import { execsync } from 'node:child_process'; import { jaw_home, skills_dir } from '../../src/core/config.js'; import { dedupeskilldirentries } from '../../lib/mcp/sk[redacted]'; import { resolveskillid, legacyskillidnotice } from '../../lib/mcp/sk[redacted]'; const codex_skills = join(homedir(), '.codex', 'skills'); const ref_dir = join(jaw_home, 'skills_ref'); const c = { reset: '\x1b[0m

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-DanGAZL5.jsView file

142contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-DanGAZL5.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

11* Package detection: L12: * npm: @scope/name or name → npm i -g <pkg> L13: * pypi: name (with --pypi flag) → uv tool install <pkg> / pip install <pkg> ... L15: */ L16: import { execSync, execFileSync } from 'node:child_process'; L17: import { readFileSync, existsSync, unlinkSync } from 'node:fs';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/bin/commands/clone.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/commands/clone.js#virtual:normalized:round1View on unpkg

dist/bin/commands/service.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/bin/commands/service.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/service.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/src/agent/pi-runtime.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/src/cli/capability-probe-worker.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/bin/commands/chat.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/bin/commands/chat.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/bin/commands/dashboard.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

dist/lib/mcp/skills-distribution.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/lib/mcp/sk[redacted] matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-distribution.jsView on unpkg

dist/lib/mcp/skills-reset.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-reset.jsView on unpkg

dist/lib/quota-copilot.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/lib/quota-copilot.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/quota-copilot.jsView on unpkg

dist/src/agent/codex-app-client.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/src/agent/codex-app-client.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/codex-app-client.jsView on unpkg

dist/src/cli/acp-client.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/src/cli/acp-client.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/acp-client.jsView on unpkg

Source & flagged code

27 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-guard.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin/postinstall.jsView file

24import os from 'os'; L25: import { execFileSync } from 'child_process'; L26: import { ensureSharedHomeSkillsLinks, initMcpConfig, copyDefaultSkills, propagateSkillsToInstances, migrateAllJawHomes, loadUnifiedMcp, saveUnifiedMcp } from '../lib/mcp-sync.js';

High

Child Process

Package source references child process execution.

dist/bin/postinstall.jsView on unpkg · L24

180function persistWindowsUserPathDir(dir) { L181: const ps = process.env["SystemRoot"] ? path.join(process.env["SystemRoot"], 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe') : 'powershell'; L182: const script = `

High

Shell

Package source references shell execution.

dist/bin/postinstall.jsView on unpkg · L180

5console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`); L6: console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`); L7: process.exit(1); ... L24: import os from 'os'; L25: import { execFileSync } from 'child_process'; L26: import { ensureSharedHomeSkillsLinks, initMcpConfig, copyDefaultSkills, propagateSkillsToInstances, migrateAllJawHomes, loadUnifiedMcp, saveUnifiedMcp } from '../lib/mcp-sync.js'; ... L29: let execFileAdapter = execFileSync; L30: let toolPlatform = process.platform; L31: /** Test seam. Returns a restore function. Not for production use. */ ... L61: const JAW_HOME = (() => { L62: if (!process.env["CLI_JAW_HOME"]) L63: return path.join(os.homedir(), '.cli-jaw');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bin/postinstall.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/bin/postinstall.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/postinstall.jsView on unpkg

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

98// eslint-disable-next-line no-new-func -- vendored bundle injection on CSP-strict pages L99: new Function(src)(); L100: }, source);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView on unpkg · L98

dist/src/agent/jwc-runtime.jsView file

31const spec = override && override.trim() ? override.trim() : DEFAULT_JWC_SDK_SPEC; L32: sdkPromise = import(spec).catch(err => { L33: sdkPromise = null;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/src/agent/jwc-runtime.jsView on unpkg · L31

dist/src/ide/diff.jsView file

7*/ L8: import { execFileSync, execFile } from 'node:child_process'; L9: import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync } from 'node:fs'; ... L139: // Antigravity: 여러 env 시그널 확인 (VS Code 포크라서 VSCODE_* 도 공존) L140: if (process.env["ANTIGRAVITY_AGENT"] === '1') L141: return 'antigravity';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/ide/diff.jsView on unpkg · L7

dist/bin/commands/launchd.jsView file

9Trigger-reachable persistence chain: manifest.bin -> dist/bin/cli-jaw.js -> dist/bin/commands/launchd.js L9: */ L10: import { execSync } from 'node:child_process'; L11: import { existsSync, readFileSync, writeFileSync, unlinkSync, readdirSync } from 'node:fs'; ... L16: import { asRecord, errString } from '../_http-client.js'; L17: if (process.argv[2] === 'launchd' && !process.env["_CLI_JAW_SERVICE_DELEGATE"]) { L18: console.error(' ⚠️ jaw launchd is deprecated. Use jaw service instead (cross-platform).'); ... L42: const LABEL = `com.cli-jaw.${INSTANCE}`; L43: const PLIST_PATH = join(homedir(), 'Library', 'LaunchAgents', `${LABEL}.plist`); L44: const LOG_DIR = join(JAW_HOME, 'logs'); ... L75: try { L76: execSync(`launchctl print ${GUI_DOMAIN}/${LABEL}`, { stdio: 'pipe' }); L77: return tru

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/bin/commands/launchd.jsView on unpkg · L9

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.24 matchedPath = dist/bin/commands/launchd.js matchedIdentity = npm:Y2xpLWphdw:2.17.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/launchd.jsView on unpkg

9*/ L10: import { execSync } from 'node:child_process'; L11: import { existsSync, readFileSync, writeFileSync, unlinkSync, readdirSync } from 'node:fs'; ... L16: import { asRecord, errString } from '../_http-client.js'; L17: if (process.argv[2] === 'launchd' && !process.env["_CLI_JAW_SERVICE_DELEGATE"]) { L18: console.error(' ⚠️ jaw launchd is deprecated. Use jaw service instead (cross-platform).'); ... L42: const LABEL = `com.cli-jaw.${INSTANCE}`; L43: const PLIST_PATH = join(homedir(), 'Library', 'LaunchAgents', `${LABEL}.plist`); L44: const LOG_DIR = join(JAW_HOME, 'logs'); ... L75: try { L76: execSync(`launchctl print ${GUI_DOMAIN}/${LABEL}`, { stdio: 'pipe' }); L77: return true;

dist/bin/commands/doctor.jsView file

619const installHint = process.platform === 'win32' L620: ? 'powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"' L621: : 'curl -LsSf https://astral.sh/uv/install.sh | sh'; ... L630: // works, so it has to ask the question against `getconf PATH` instead of L631: // process.env.PATH. L632: if (process.platform !== 'win32') {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/commands/doctor.jsView on unpkg · L619

dist/bin/commands/skill.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-DanGAZL5.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-DanGAZL5.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/bin/commands/clone.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/commands/clone.js#virtual:normalized:round1View on unpkg

dist/bin/commands/service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/service.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/bin/commands/chat.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

dist/lib/mcp/skills-distribution.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-distribution.jsView on unpkg

dist/lib/mcp/skills-reset.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-reset.jsView on unpkg

dist/lib/quota-copilot.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/quota-copilot.jsView on unpkg

dist/src/agent/codex-app-client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/codex-app-client.jsView on unpkg

dist/src/cli/acp-client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/acp-client.jsView on unpkg

Source & flagged code

27 flagged

package.jsonView file

Lines 35-75json

35 "node": ">=22.4.0"

36 },

37 "allowScripts": {

38 "better-sqlite3": false

39 },

40 "bin": {

41 "cli-jaw": "dist/bin/cli-jaw.js",

42 "jaw": "dist/bin/cli-jaw.js"

43 },

44 "files": [

45 "dist/",

46 "!dist/src/lib/native/*.node",

47 "public/",

48 "scripts/",

49 "package.json"

50 ],

51 "scripts": {

52 "dev": "tsx --env-file=.env server.ts",

53 "ensure:native": "node scripts/ensure-native-modules.cjs",

54 "rebuild:native": "npm rebuild better-sqlite3",

55 "postinstall": "node scripts/postinstall-guard.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

56 "clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",

57 "build:claude-e": "cargo build --release --manifest-path native/claude-e/Cargo.toml",

58 "test:claude-e": "cargo test --manifest-path native/claude-e/Cargo.toml",

59 "build:claude-exec": "npm run build:claude-e",

60 "test:claude-exec": "npm run test:claude-e",

61 "check:copilot-gap": "tsx scripts/check-copilot-gap.ts",

62 "check:deps": "tsx scripts/check-deps-offline.ts",

63 "check:deps:audit": "tsx scripts/check-deps-audit.ts",

64 "check:strict-baseline": "node scripts/check-strict-baseline.mjs",

65 "check:path-length": "node scripts/check-path-length.mjs",

66 "docs:check": "tsx scripts/docs/check-docs.mts",

67 "docs:windows": "tsx scripts/render-windows-support.mts",

68 "docs:channel-capabilities": "tsx scripts/generate-channel-capability-table.mts",

69 "check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",

70 "i18n:registry": "tsx scripts/i18n-registry.ts",

71 "check:deps:online": "bash scripts/check-deps-online.sh",

72 "prebuild": "npm run ensure:native",

73 "pretest": "npm run ensure:native",

74 "pretest:all": "npm run ensure:native",

75 "pretest:integration": "npm run ensure:native",

dist/bin/postinstall.jsView file

Lines 4-44javascript

4if (major < 22) {

5 console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`);

6 console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`);

7 process.exit(1

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

Lines 78-114javascript

78}

79async function injectBundle(page, source) {

80 const alreadyInjected = await page

81 // @strict-allow-any(in-page global probe)

dist/src/agent/jwc-runtime.jsView file

Lines 11-51javascript

11// session.subscribe(listener) → unsubscribe ; session.isStreaming ; session.dispose()

12//

13// The engine is loaded lazily by dynamic import so this module compiles before

14// the jwc package is linked (100 in flight). Resolution order:

15// 1. JWC_SDK_PATH env (absolute path to dist-node/sdk.js — dev/CI)

16// 2. "jawcode/sdk" package export (separately installed package path)

17import { homedir } from 'node:os';

18import { join }

dist/src/ide/diff.jsView file

Lines 1-27javascript

1/**

2 * src/ide/diff.ts — IDE Diff View Module

3 * Git diff 감지 + IDE (Antigravity/VS Code) 연동

4 * 서버 변경 0줄 — jaw chat (TUI) 전용

5 *

6 * 접근법: before/after "dirty file set" 비교 (서브모듈 재귀 지원)

7 */

8import { execFileSync, execFile } from 'node:child_process';

9import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync }

dist/bin/commands/launchd.jsView file

Lines 1-29javascript

1/**

2 * cli-jaw launchd — macOS LaunchAgent 관리

3 * Usage:

4 * jaw launchd — plist 확인 → 없으면 생성 → 시작 (원스텝)

5 * jaw launchd --port 3458 — 커스텀 포트로 등록

6 * jaw launchd unset — plist 제거 + 해제

7 * jaw launchd status — 현재 상태 확인

8 * jaw launchd cleanup — legacy plist 정리

9 */

10import { execSync } from

dist/bin/commands/doctor.jsView file

Lines 599-639javascript

599 });

600 return 'granted';

601 }

602 catch {

603 // Auto-open System Preferences

604 try {

605 execSync('open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"'

dist/bin/commands/skill.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-DanGAZL5.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-DanGAZL5.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/bin/commands/clone.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/commands/clone.js#virtual:normalized:round1View on unpkg

dist/bin/commands/service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/service.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/bin/commands/chat.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

dist/lib/mcp/skills-distribution.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-distribution.jsView on unpkg

dist/lib/mcp/skills-reset.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-reset.jsView on unpkg

dist/lib/quota-copilot.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/quota-copilot.jsView on unpkg

dist/src/agent/codex-app-client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/codex-app-client.jsView on unpkg

dist/src/cli/acp-client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/acp-client.jsView on unpkg

cli-jaw@2.17.27

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code