cli-jaw@2.2.25: Suspicious npm security report (Warn)

Loading npm security reports…

Source & flagged code

20 flagged

package.jsonView file

Lines 35-75json

35 "node": ">=22.4.0"

36 },

37 "allowScripts": {

38 "better-sqlite3": false

39 },

40 "bin": {

41 "cli-jaw": "dist/bin/cli-jaw.js",

42 "jaw": "dist/bin/cli-jaw.js"

43 },

44 "files": [

45 "dist/",

46 "!dist/src/lib/native/*.node",

47 "public/",

48 "scripts/",

49 "package.json"

50 ],

51 "scripts": {

52 "dev": "tsx --env-file=.env server.ts",

53 "ensure:native": "node scripts/ensure-native-modules.cjs",

54 "rebuild:native": "npm rebuild better-sqlite3",

55 "postinstall": "node scripts/postinstall-guard.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

56 "clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",

57 "build:claude-e": "cargo build --release --manifest-path native/claude-e/Cargo.toml",

58 "test:claude-e": "cargo test --manifest-path native/claude-e/Cargo.toml",

59 "build:claude-exec": "npm run build:claude-e",

60 "test:claude-exec": "npm run test:claude-e",

61 "check:copilot-gap": "tsx scripts/check-copilot-gap.ts",

62 "check:deps": "tsx scripts/check-deps-offline.ts",

63 "check:strict-baseline": "node scripts/check-strict-baseline.mjs",

64 "docs:check": "tsx scripts/docs/check-docs.mts",

65 "check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",

66 "i18n:registry": "tsx scripts/i18n-registry.ts",

67 "check:deps:online": "bash scripts/check-deps-online.sh",

68 "prebuild": "npm run ensure:native",

69 "pretest": "npm run ensure:native",

70 "pretest:all": "npm run ensure:native",

71 "pretest:integration": "npm run ensure:native",

72 "pretest:smoke": "npm run ensure:native",

73 "test": "tsx --experimental-test-module-mocks tests/run.mts",

74 "test:all": "tsx --experimental-test-module-mocks tests/run.mts --all",

75 "test:integration": "tsx --experimental-test-module-mocks --test tests/integration/*.test.ts",

dist/bin/postinstall.jsView file

Lines 4-44javascript

4if (major < 22) {

5 console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`);

6 console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`);

7 process.exit(1

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

Lines 78-114javascript

78}

79async function injectBundle(page, source) {

80 const alreadyInjected = await page

81 // @strict-allow-any(in-page global probe)

dist/src/agent/jwc-runtime.jsView file

Lines 11-51javascript

11// session.subscribe(listener) → unsubscribe ; session.isStreaming ; session.dispose()

12//

13// The engine is loaded lazily by dynamic import so this module compiles before

14// the jwc package is linked (100 in flight). Resolution order:

15// 1. JWC_SDK_PATH env (absolute path to dist-node/sdk.js — dev/CI)

16// 2. "jawcode/sdk" package export (separately installed package path)

17import { homedir } from 'node:os';

18import { join }

dist/src/ide/diff.jsView file

Lines 1-27javascript

1/**

2 * src/ide/diff.ts — IDE Diff View Module

3 * Git diff 감지 + IDE (Antigravity/VS Code) 연동

4 * 서버 변경 0줄 — jaw chat (TUI) 전용

5 *

6 * 접근법: before/after "dirty file set" 비교 (서브모듈 재귀 지원)

7 */

8import { execFileSync, execFile } from 'node:child_process';

9import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync }

dist/bin/commands/launchd.jsView file

Lines 1-29javascript

1/**

2 * cli-jaw launchd — macOS LaunchAgent 관리

3 * Usage:

4 * jaw launchd — plist 확인 → 없으면 생성 → 시작 (원스텝)

5 * jaw launchd --port 3458 — 커스텀 포트로 등록

6 * jaw launchd unset — plist 제거 + 해제

7 * jaw launchd status — 현재 상태 확인

8 * jaw launchd cleanup — legacy plist 정리

9 */

10import { execSync } from

dist/lib/quota-copilot.jsView file

Lines 1-27javascript

1// ─── Copilot Quota: copilot_internal/user API ───────────────────

2// Token resolution order:

3// 1. ENV vars (COPILOT_GITHUB_TOKEN, GH_TOKEN, GITHUB_TOKEN)

4// 2. File cache (~/.cli-jaw/auth/copilot-token) — no keychain popup

5// 3. `gh auth token` — cross-platform fallback

6// 4. macOS Keychain (one-shot, cached to file, suppress on failure)

7//

8// Source: https://docs.github.com/copilot — official credential order

9import { execFileSync } from

dist/bin/commands/skill.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { readdirsync, readfilesync, writefilesync, existssync, mkdirsync, rmsync, cpsync } from 'node:fs'; import { join } from 'node:path'; import { homedir } from 'node:os'; import { execsync } from 'node:child_process'; import { jaw_home, skills_dir } from '../../src/core/config.js'; import { isdiscoverableskilldirname } from '../../lib/mcp/sk[redacted]'; const codex_skills = join(homedir(), '.codex', 'skills'); const ref_dir = join(jaw_home, 'skills_ref'); const c = { reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m', red: '\x1b[31m', green:

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-BkEzO5cz.jsView file

142contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-BkEzO5cz.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

11* Package detection: L12: * npm: @scope/name or name → npm i -g <pkg> L13: * pypi: name (with --pypi flag) → uv tool install <pkg> / pip install <pkg> ... L15: */ L16: import { execSync, execFileSync } from 'node:child_process'; L17: import { readFileSync, existsSync, unlinkSync } from 'node:fs';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/src/browser/adaptive-fetch/vendor/defuddle.iife.min.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/browser/adaptive-fetch/vendor/defuddle.iife.min.jsView on unpkg

dist/scripts/fresh-install-smoke.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.2.18 matchedPath = dist/scripts/fresh-install-smoke.js matchedIdentity = npm:Y2xpLWphdw:2.2.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/fresh-install-smoke.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.2.18 matchedPath = dist/src/agent/pi-runtime.js matchedIdentity = npm:Y2xpLWphdw:2.2.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.2.18 matchedPath = dist/src/cli/capability-probe-worker.js matchedIdentity = npm:Y2xpLWphdw:2.2.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/bin/commands/chat.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.2.18 matchedPath = dist/bin/commands/chat.js matchedIdentity = npm:Y2xpLWphdw:2.2.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = cli-jaw@2.2.18 matchedPath = dist/bin/commands/dashboard.js matchedIdentity = npm:Y2xpLWphdw:2.2.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

Source & flagged code

20 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-guard.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/bin/postinstall.jsView file

24import os from 'os'; L25: import { execFileSync } from 'child_process'; L26: import { ensureSharedHomeSkillsLinks, initMcpConfig, copyDefaultSkills, propagateSkillsToInstances, loadUnifiedMcp, saveUnifiedMcp } from '../lib/mcp-sync.js';

High

Child Process

Package source references child process execution.

dist/bin/postinstall.jsView on unpkg · L24

180function persistWindowsUserPathDir(dir) { L181: const ps = process.env["SystemRoot"] ? path.join(process.env["SystemRoot"], 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe') : 'powershell'; L182: const script = `

High

Shell

Package source references shell execution.

dist/bin/postinstall.js

cli-jaw@2.2.25: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

20 flagged

package.jsonView file

Lines 35-75json

35 "node": ">=22.4.0"

36 },

37 "allowScripts": {

38 "better-sqlite3": false

39 },

40 "bin": {

41 "cli-jaw": "dist/bin/cli-jaw.js",

42 "jaw": "dist/bin/cli-jaw.js"

43 },

44 "files": [

45 "dist/",

46 "!dist/src/lib/native/*.node",

47 "public/",

48 "scripts/",

49 "package.json"

50 ],

51 "scripts": {

52 "dev": "tsx --env-file=.env server.ts",

53 "ensure:native": "node scripts/ensure-native-modules.cjs",

54 "rebuild:native": "npm rebuild better-sqlite3",

55 "postinstall": "node scripts/postinstall-guard.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

56 "clean:dist": "node -e \"const fs=require('fs');fs.rmSync('dist',{recursive:true,force:true});\"",

57 "build:claude-e": "cargo build --release --manifest-path native/claude-e/Cargo.toml",

58 "test:claude-e": "cargo test --manifest-path native/claude-e/Cargo.toml",

59 "build:claude-exec": "npm run build:claude-e",

60 "test:claude-exec": "npm run test:claude-e",

61 "check:copilot-gap": "tsx scripts/check-copilot-gap.ts",

62 "check:deps": "tsx scripts/check-deps-offline.ts",

63 "check:strict-baseline": "node scripts/check-strict-baseline.mjs",

64 "docs:check": "tsx scripts/docs/check-docs.mts",

65 "check:frontend-build-output": "tsx scripts/check-web-ui-build-output.ts",

66 "i18n:registry": "tsx scripts/i18n-registry.ts",

67 "check:deps:online": "bash scripts/check-deps-online.sh",

68 "prebuild": "npm run ensure:native",

69 "pretest": "npm run ensure:native",

70 "pretest:all": "npm run ensure:native",

71 "pretest:integration": "npm run ensure:native",

72 "pretest:smoke": "npm run ensure:native",

73 "test": "tsx --experimental-test-module-mocks tests/run.mts",

74 "test:all": "tsx --experimental-test-module-mocks tests/run.mts --all",

75 "test:integration": "tsx --experimental-test-module-mocks --test tests/integration/*.test.ts",

dist/bin/postinstall.jsView file

Lines 4-44javascript

4if (major < 22) {

5 console.error(`[jaw:init] ❌ Node.js >= 22 required (current: ${process.version})`);

6 console.error(`[jaw:init] Install: https://nodejs.org or nvm install 22`);

7 process.exit(1

dist/src/browser/adaptive-fetch/defuddle-extractor.jsView file

Lines 78-114javascript

78}

79async function injectBundle(page, source) {

80 const alreadyInjected = await page

81 // @strict-allow-any(in-page global probe)

dist/src/agent/jwc-runtime.jsView file

Lines 11-51javascript

11// session.subscribe(listener) → unsubscribe ; session.isStreaming ; session.dispose()

12//

13// The engine is loaded lazily by dynamic import so this module compiles before

14// the jwc package is linked (100 in flight). Resolution order:

15// 1. JWC_SDK_PATH env (absolute path to dist-node/sdk.js — dev/CI)

16// 2. "jawcode/sdk" package export (separately installed package path)

17import { homedir } from 'node:os';

18import { join }

dist/src/ide/diff.jsView file

Lines 1-27javascript

1/**

2 * src/ide/diff.ts — IDE Diff View Module

3 * Git diff 감지 + IDE (Antigravity/VS Code) 연동

4 * 서버 변경 0줄 — jaw chat (TUI) 전용

5 *

6 * 접근법: before/after "dirty file set" 비교 (서브모듈 재귀 지원)

7 */

8import { execFileSync, execFile } from 'node:child_process';

9import { writeFileSync, mkdtempSync, mkdirSync, statSync, realpathSync, rmSync, readFileSync }

dist/bin/commands/launchd.jsView file

Lines 1-29javascript

1/**

2 * cli-jaw launchd — macOS LaunchAgent 관리

3 * Usage:

4 * jaw launchd — plist 확인 → 없으면 생성 → 시작 (원스텝)

5 * jaw launchd --port 3458 — 커스텀 포트로 등록

6 * jaw launchd unset — plist 제거 + 해제

7 * jaw launchd status — 현재 상태 확인

8 * jaw launchd cleanup — legacy plist 정리

9 */

10import { execSync } from

dist/lib/quota-copilot.jsView file

Lines 1-27javascript

1// ─── Copilot Quota: copilot_internal/user API ───────────────────

2// Token resolution order:

3// 1. ENV vars (COPILOT_GITHUB_TOKEN, GH_TOKEN, GITHUB_TOKEN)

4// 2. File cache (~/.cli-jaw/auth/copilot-token) — no keychain popup

5// 3. `gh auth token` — cross-platform fallback

6// 4. macOS Keychain (one-shot, cached to file, suppress on failure)

7//

8// Source: https://docs.github.com/copilot — official credential order

9import { execFileSync } from

dist/bin/commands/skill.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/bin/commands/skill.jsView on unpkg

public/dist/assets/MilkdownWysiwygEditor-BkEzO5cz.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

public/dist/assets/MilkdownWysiwygEditor-BkEzO5cz.jsView on unpkg · L142

dist/bin/commands/mcp.jsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/commands/mcp.jsView on unpkg · L11

scripts/check-deps-online.shView file

•path = scripts/check-deps-online.sh kind = build_helper sizeBytes = 912 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-deps-online.shView on unpkg

dist/src/browser/adaptive-fetch/vendor/defuddle.iife.min.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/browser/adaptive-fetch/vendor/defuddle.iife.min.jsView on unpkg

dist/scripts/fresh-install-smoke.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/fresh-install-smoke.jsView on unpkg

dist/src/agent/pi-runtime.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/agent/pi-runtime.jsView on unpkg

dist/src/cli/capability-probe-worker.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/capability-probe-worker.jsView on unpkg

dist/bin/commands/chat.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/chat.jsView on unpkg

dist/bin/commands/dashboard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin/commands/dashboard.jsView on unpkg

cli-jaw@2.2.25

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Runtime surface

Behavioral surface

Source & flagged code