Loading npm security reports…

cli-jaw@2.17.53: Suspicious npm security report (Warn) | LPM Firewall

registry / cli-jaw / 2.17.53

cli-jaw@2.17.53

Personal AI assistant powered by Pi, Antigravity, Claude, Codex, Codex App, Cursor, Grok, Kiro, OpenCode, and Copilot — Web, Terminal, Slack, Telegram, and Discord interfaces with 33 skills active by default from a 230-skill reference library

AI Security Review

scanned 16h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Postinstall can migrate skills into shared agent configuration locations when an explicit environment setting enables the migration.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Run npm install with `CLI_JAW_MIGRATE_SHARED_PATHS=1` or its accepted true value.

Impact

The opt-in setup can change shared agent skill paths and affect which skills those tools can discover.

Mechanism

The setup routine enables links in shared Agents, compatibility-agent, and Claude locations; migration is skipped when the setting is absent.

AI rationale

The package has an install-time path that can modify shared agent skill locations, but the migration requires an explicit opt-in. This supports a warning for guarded agent extension lifecycle risk, not a block.

Evidence

dist/bin/postinstall.js

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The npm postinstall hook runs the package’s setup guard, which invokes bundled setup.
During postinstall, setting `CLI_JAW_MIGRATE_SHARED_PATHS` enables migration of shared agent skill paths, including Agents and Claude locations.

Source & flagged code

27 flagged

package.jsonView file

Lines 50-90json

50 "public/",

51 "scripts/",

52 "package.json",

53 "!**/[dD][eE][vV][lL][oO][gG]",

54 "!**/[dD][eE][vV][lL][oO][gG]/**",

55 "!**/[dD][eE][vV][lL][oO][gG][._-]*",

56 "!**/[dD][eE][vV][lL][oO][gG][._-]*/**",

57 "!**/[cC][lL][iI]-[jJ][aA][wW]-[iI][nN][tT][eE][rR][nN][aA][lL]",

58 "!**/[cC][lL][iI]-[jJ][aA][wW]-[iI][nN][tT][eE][rR][nN][aA][lL]/**",

59 "!**/_[pP][lL][aA][nN]",

60 "!**/_[pP][lL][aA][nN]/**",

61 "!**/_[fF][iI][nN]",

62 "!**/_[fF][iI][nN]/**",

63 "!**/.[jJ][wW][cC]",

64 "!**/.[jJ][wW][cC]/**"

65 ],

66 "scripts": {

67 "dev": "tsx --env-file=.env server.ts",

68 "ensure:native": "node scripts/ensure-native-modules.cjs",

69 "rebuild:native": "npm rebuild better-sqlite3",

70 "postinstall": "node scripts/postinstall-guard.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L70

71 "clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",

72 "check:copilot-gap": "tsx scripts/check-copilot-gap.ts",

73 "check:deps": "tsx scripts/check-deps-offline.ts",

74 "check:deps:audit": "tsx scripts/check-deps-audit.ts",

75 "check:strict-baseline": "node scripts/check-strict-baseline.mjs",

76 "check:path-length": "node scripts/check-path-length.mjs",

77 "docs:check": "tsx scripts/docs/check-docs.mts",

78 "docs:windows": "tsx scripts/render-windows-support.mts",

79 "docs:channel-capabilities": "tsx scripts/generate-channel-capability-table.mts",

80 "check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",

81 "i18n:registry": "tsx scripts/i18n-registry.ts",

82 "check:deps:online": "bash scripts/check-deps-online.sh",

83 "prebuild": "npm run ensure:native",

84 "pretest": "npm run ensure:native",

85 "pretest:all": "npm run ensure:native",

86 "pretest:integration": "npm run ensure:native",

87 "pretest:smoke": "npm run ensure:native",

88 "test": "tsx --experimental-test-module-mocks tests/run.mts",

89 "test:all": "tsx --experimental-test-module-mocks tests/run.mts --all",

90 "test:shard": "tsx --experimental-test-module-mocks tests/run.mts --scope root,unit --shard",

dist/bin/postinstall.jsView file

Lines 4-44javascript

4if (major < 22) {

5 console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`);

6 console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`);

7 process.exit(1

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

Lines 78-114javascript

78}

79async function injectBundle(page, source) {

80 const alreadyInjected = await page

81 // @strict-allow-any(in-page global probe)

scripts/staging-cleanup.cjsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Best-effort cleanup for npm staging directories left behind on Windows.

4 *

5 * A probe cannot close the Windows TOCTOU window between checking files and

6 * removing the directory. If a file becomes locked after the probe, rm fails

7 * and the ledger-backed .deleting directory remains visible to doctor and is

8 * retried on the next install.

9 */

10const fs

dist/src/ide/diff.jsView file

Lines 1-27javascript

1/**

2 * src/ide/diff.ts — IDE Diff View Module

3 * Git diff 감지 + IDE (Antigravity/VS Code) 연동

4 * 서버 변경 0줄 — jaw chat (TUI) 전용

5 *

6 * 접근법: before/after "dirty file set" 비교 (서브모듈 재귀 지원)

7 */

8import { execFileSync, execFile } from 'node:child_process';

9import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync }

dist/bin/commands/launchd.jsView file

Lines 1-29javascript

1/**

2 * cli-jaw launchd — macOS LaunchAgent 관리

3 * Usage:

4 * jaw launchd — plist 확인 → 없으면 생성 → 시작 (원스텝)

5 * jaw launchd --port 3458 — 커스텀 포트로 등록

6 * jaw launchd unset — plist 제거 + 해제

7 * jaw launchd status — 현재 상태 확인

8 * jaw launchd cleanup — legacy plist 정리

9 */

10import { execSync } from

dist/bin/commands/doctor.jsView file

Lines 545-585javascript

545 });

546 return 'granted';

547 }

548 catch {

549 // Auto-open System Preferences

550 try {

551 execSync('open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"'

dist/bin/commands/skill.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { readfilesync, writefilesync, existssync, mkdirsync, rmsync, cpsync } from 'node:fs'; import { join } from 'node:path'; import { homedir } from 'node:os'; import { execsync } from 'node:child_process'; import { jaw_home, skills_dir } from '../../src/core/config.js'; import { dedupeskilldirentries } from '../../lib/mcp/sk[redacted]'; import { resolveskillid, legacyskillidnotice } from '../../lib/mcp/sk[redacted]'; const codex_skills = join(homedir(), '.codex', 'skills'); const ref_dir = join(jaw_home, 'skills_ref'); const c = { reset: '\x1b[0m

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-D6JaLDE4.jsView file

142contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-D6JaLDE4.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

11* Package detection: L12: * npm: @scope/name or name → npm i -g <pkg> L13: * pypi: name (with --pypi flag) → uv tool install <pkg> / pip install <pkg> ... L15: */ L16: import { execSync, execFileSync } from 'node:child_process'; L17: import { readFileSync, existsSync, unlinkSync } from 'node:fs';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/bin/commands/clone.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 31

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/commands/clone.js#virtual:normalized:round1View on unpkg

scripts/postinstall-guard.cjsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = scripts/postinstall-guard.cjs matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-guard.cjsView on unpkg

dist/bin/commands/service.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/bin/commands/service.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/service.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/src/agent/pi-runtime.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/src/cli/capability-probe-worker.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/src/routes/quota.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/src/routes/quota.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/routes/quota.jsView on unpkg

dist/bin/commands/chat.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/bin/commands/chat.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/bin/commands/dashboard.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

dist/lib/mcp/skills-distribution.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/lib/mcp/sk[redacted] matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-distribution.jsView on unpkg

dist/lib/mcp/skills-reset.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-reset.jsView on unpkg

Source & flagged code

27 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-guard.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin/postinstall.jsView file

24import os from 'os'; L25: import { execFileSync } from 'child_process'; L26: import { ensureSharedHomeSkillsLinks, initMcpConfig, copyDefaultSkills, propagateSkillsToInstances, migrateAllJawHomes, loadUnifiedMcp, saveUnifiedMcp } from '../lib/mcp-sync.js';

High

Child Process

Package source references child process execution.

dist/bin/postinstall.jsView on unpkg · L24

180function persistWindowsUserPathDir(dir) { L181: const ps = process.env["SystemRoot"] ? path.join(process.env["SystemRoot"], 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe') : 'powershell'; L182: const script = `

High

Shell

Package source references shell execution.

dist/bin/postinstall.jsView on unpkg · L180

5console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`); L6: console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`); L7: process.exit(1); ... L24: import os from 'os'; L25: import { execFileSync } from 'child_process'; L26: import { ensureSharedHomeSkillsLinks, initMcpConfig, copyDefaultSkills, propagateSkillsToInstances, migrateAllJawHomes, loadUnifiedMcp, saveUnifiedMcp } from '../lib/mcp-sync.js'; ... L29: let execFileAdapter = execFileSync; L30: let toolPlatform = process.platform; L31: /** Test seam. Returns a restore function. Not for production use. */ ... L61: const JAW_HOME = (() => { L62: if (!process.env["CLI_JAW_HOME"]) L63: return path.join(os.homedir(), '.cli-jaw');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bin/postinstall.jsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/bin/postinstall.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/postinstall.jsView on unpkg

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

98// eslint-disable-next-line no-new-func -- vendored bundle injection on CSP-strict pages L99: new Function(src)(); L100: }, source);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView on unpkg · L98

scripts/staging-cleanup.cjsView file

9*/ L10: const fs = require('fs'); L11: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/staging-cleanup.cjsView on unpkg · L9

dist/src/ide/diff.jsView file

7*/ L8: import { execFileSync, execFile } from 'node:child_process'; L9: import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync } from 'node:fs'; ... L139: // Antigravity: 여러 env 시그널 확인 (VS Code 포크라서 VSCODE_* 도 공존) L140: if (process.env["ANTIGRAVITY_AGENT"] === '1') L141: return 'antigravity';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/ide/diff.jsView on unpkg · L7

dist/bin/commands/launchd.jsView file

9Trigger-reachable persistence chain: manifest.bin -> dist/bin/cli-jaw.js -> dist/bin/commands/launchd.js L9: */ L10: import { execSync } from 'node:child_process'; L11: import { existsSync, readFileSync, writeFileSync, unlinkSync, readdirSync } from 'node:fs'; ... L16: import { asRecord, errString } from '../_http-client.js'; L17: if (process.argv[2] === 'launchd' && !process.env["_CLI_JAW_SERVICE_DELEGATE"]) { L18: console.error(' ⚠️ jaw launchd is deprecated. Use jaw service instead (cross-platform).'); ... L42: const LABEL = `com.cli-jaw.${INSTANCE}`; L43: const PLIST_PATH = join(homedir(), 'Library', 'LaunchAgents', `${LABEL}.plist`); L44: const LOG_DIR = join(JAW_HOME, 'logs'); ... L75: try { L76: execSync(`launchctl print ${GUI_DOMAIN}/${LABEL}`, { stdio: 'pipe' }); L77: return tru

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/bin/commands/launchd.jsView on unpkg · L9

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/bin/commands/launchd.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/launchd.jsView on unpkg

9*/ L10: import { execSync } from 'node:child_process'; L11: import { existsSync, readFileSync, writeFileSync, unlinkSync, readdirSync } from 'node:fs'; ... L16: import { asRecord, errString } from '../_http-client.js'; L17: if (process.argv[2] === 'launchd' && !process.env["_CLI_JAW_SERVICE_DELEGATE"]) { L18: console.error(' ⚠️ jaw launchd is deprecated. Use jaw service instead (cross-platform).'); ... L42: const LABEL = `com.cli-jaw.${INSTANCE}`; L43: const PLIST_PATH = join(homedir(), 'Library', 'LaunchAgents', `${LABEL}.plist`); L44: const LOG_DIR = join(JAW_HOME, 'logs'); ... L75: try { L76: execSync(`launchctl print ${GUI_DOMAIN}/${LABEL}`, { stdio: 'pipe' }); L77: return true;

dist/bin/commands/doctor.jsView file

565const installHint = process.platform === 'win32' L566: ? 'powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"' L567: : 'curl -LsSf https://astral.sh/uv/install.sh | sh'; ... L576: // works, so it has to ask the question against `getconf PATH` instead of L577: // process.env.PATH. L578: if (process.platform !== 'win32') {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/commands/doctor.jsView on unpkg · L565

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.17.51 matchedPath = dist/bin/commands/doctor.js matchedIdentity = npm:Y2xpLWphdw:2.17.51 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/doctor.jsView on unpkg

dist/bin/commands/skill.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-D6JaLDE4.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-D6JaLDE4.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/bin/commands/clone.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 31

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/commands/clone.js#virtual:normalized:round1View on unpkg

scripts/postinstall-guard.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-guard.cjsView on unpkg

dist/bin/commands/service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/service.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/src/routes/quota.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/routes/quota.jsView on unpkg

dist/bin/commands/chat.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

dist/lib/mcp/skills-distribution.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-distribution.jsView on unpkg

dist/lib/mcp/skills-reset.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-reset.jsView on unpkg

Source & flagged code

27 flagged

package.jsonView file

Lines 50-90json

50 "public/",

51 "scripts/",

52 "package.json",

53 "!**/[dD][eE][vV][lL][oO][gG]",

54 "!**/[dD][eE][vV][lL][oO][gG]/**",

55 "!**/[dD][eE][vV][lL][oO][gG][._-]*",

56 "!**/[dD][eE][vV][lL][oO][gG][._-]*/**",

57 "!**/[cC][lL][iI]-[jJ][aA][wW]-[iI][nN][tT][eE][rR][nN][aA][lL]",

58 "!**/[cC][lL][iI]-[jJ][aA][wW]-[iI][nN][tT][eE][rR][nN][aA][lL]/**",

59 "!**/_[pP][lL][aA][nN]",

60 "!**/_[pP][lL][aA][nN]/**",

61 "!**/_[fF][iI][nN]",

62 "!**/_[fF][iI][nN]/**",

63 "!**/.[jJ][wW][cC]",

64 "!**/.[jJ][wW][cC]/**"

65 ],

66 "scripts": {

67 "dev": "tsx --env-file=.env server.ts",

68 "ensure:native": "node scripts/ensure-native-modules.cjs",

69 "rebuild:native": "npm rebuild better-sqlite3",

70 "postinstall": "node scripts/postinstall-guard.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L70

71 "clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",

72 "check:copilot-gap": "tsx scripts/check-copilot-gap.ts",

73 "check:deps": "tsx scripts/check-deps-offline.ts",

74 "check:deps:audit": "tsx scripts/check-deps-audit.ts",

75 "check:strict-baseline": "node scripts/check-strict-baseline.mjs",

76 "check:path-length": "node scripts/check-path-length.mjs",

77 "docs:check": "tsx scripts/docs/check-docs.mts",

78 "docs:windows": "tsx scripts/render-windows-support.mts",

79 "docs:channel-capabilities": "tsx scripts/generate-channel-capability-table.mts",

80 "check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",

81 "i18n:registry": "tsx scripts/i18n-registry.ts",

82 "check:deps:online": "bash scripts/check-deps-online.sh",

83 "prebuild": "npm run ensure:native",

84 "pretest": "npm run ensure:native",

85 "pretest:all": "npm run ensure:native",

86 "pretest:integration": "npm run ensure:native",

87 "pretest:smoke": "npm run ensure:native",

88 "test": "tsx --experimental-test-module-mocks tests/run.mts",

89 "test:all": "tsx --experimental-test-module-mocks tests/run.mts --all",

90 "test:shard": "tsx --experimental-test-module-mocks tests/run.mts --scope root,unit --shard",

dist/bin/postinstall.jsView file

Lines 4-44javascript

4if (major < 22) {

5 console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`);

6 console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`);

7 process.exit(1

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

Lines 78-114javascript

78}

79async function injectBundle(page, source) {

80 const alreadyInjected = await page

81 // @strict-allow-any(in-page global probe)

scripts/staging-cleanup.cjsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Best-effort cleanup for npm staging directories left behind on Windows.

4 *

5 * A probe cannot close the Windows TOCTOU window between checking files and

6 * removing the directory. If a file becomes locked after the probe, rm fails

7 * and the ledger-backed .deleting directory remains visible to doctor and is

8 * retried on the next install.

9 */

10const fs

dist/src/ide/diff.jsView file

Lines 1-27javascript

1/**

2 * src/ide/diff.ts — IDE Diff View Module

3 * Git diff 감지 + IDE (Antigravity/VS Code) 연동

4 * 서버 변경 0줄 — jaw chat (TUI) 전용

5 *

6 * 접근법: before/after "dirty file set" 비교 (서브모듈 재귀 지원)

7 */

8import { execFileSync, execFile } from 'node:child_process';

9import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync }

dist/bin/commands/launchd.jsView file

Lines 1-29javascript

1/**

2 * cli-jaw launchd — macOS LaunchAgent 관리

3 * Usage:

4 * jaw launchd — plist 확인 → 없으면 생성 → 시작 (원스텝)

5 * jaw launchd --port 3458 — 커스텀 포트로 등록

6 * jaw launchd unset — plist 제거 + 해제

7 * jaw launchd status — 현재 상태 확인

8 * jaw launchd cleanup — legacy plist 정리

9 */

10import { execSync } from

dist/bin/commands/doctor.jsView file

Lines 545-585javascript

545 });

546 return 'granted';

547 }

548 catch {

549 // Auto-open System Preferences

550 try {

551 execSync('open "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility"'

dist/bin/commands/skill.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-D6JaLDE4.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-D6JaLDE4.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/bin/commands/clone.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 31

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/commands/clone.js#virtual:normalized:round1View on unpkg

scripts/postinstall-guard.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall-guard.cjsView on unpkg

dist/bin/commands/service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/service.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/src/routes/quota.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/routes/quota.jsView on unpkg

dist/bin/commands/chat.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

dist/lib/mcp/skills-distribution.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-distribution.jsView on unpkg

dist/lib/mcp/skills-reset.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib/mcp/skills-reset.jsView on unpkg

cli-jaw@2.17.53

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code