coder-config@0.54.7: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

coder-config@0.54.7: AI-agent control-surface risk | LPM Firewall

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

ui/server.cjsView file

12const os = require('os'); L13: const { spawn } = require('child_process'); L14: const TerminalServer = require('./terminal-server.cjs');

High

Child Process

Package source references child process execution.

ui/server.cjsView on unpkg · L12

ui/dist/assets/index-B5XhwJiF.jsView file

47} L48: `),()=>{document.head.removeChild(m)}},[r]),t.jsx(qP,{isPresent:r,childRef:n,sizeRef:o,children:_.cloneElement(e,{ref:n})})}const YP=({children:e,initial:r,isPresent:s,onExitComple... L49: * @license lucide-react v0.475.0 - ISC

Medium

Dynamic Require

Package source references dynamic require/import behavior.

ui/dist/assets/index-B5XhwJiF.jsView on unpkg · L47

ui/routes/file-explorer.jsView file

13function scanFolderForExplorer(dir, manager, label = null) { L14: const home = os.homedir(); L15: const claudeDir = path.join(dir, '.claude'); ... L362: try { L363: return { path: filePath, content, parsed: JSON.parse(content) }; L364: } catch (e) { ... L726: // Check for Node MCP L727: const packagePath = path.join(projectPath, 'package.json'); L728: if (fs.existsSync(packagePath)) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

ui/routes/file-explorer.jsView on unpkg · L13

scripts/preuninstall.jsView file

8const os = require('os'); L9: const { execSync } = require('child_process'); L10: L11: const home = os.homedir(); L12: ... L25: try { L26: execSync(`launchctl unload "${launchAgentPath}" 2>/dev/null || true`); L27: fs.unlinkSync(launchAgentPath);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/preuninstall.jsView on unpkg · L8

cli.jsView file

12const os = require('os'); L13: const { spawn, execSync } = require('child_process'); L14: ... L18: // PID file for daemon mode L19: const PID_FILE = path.join(os.homedir(), '.coder-config', 'ui.pid'); L20: ... L54: // Check for LaunchAgent first (macOS) L55: if (process.platform === 'darwin' && fs.existsSync(LAUNCH_AGENT_PATH)) { L56: try { L57: const { spawnSync } = require('child_process'); L58: const result = spawnSync('launchctl', ['list', LAUNCH_AGENT_LABEL], { encoding: 'utf8' }); L59: if (result.status === 0 && result.stdout) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli.jsView on unpkg · L12

12Trigger-reachable persistence chain: scripts.start -> cli.js L12: const os = require('os'); L13: const { spawn, execSync } = require('child_process'); L14: ... L18: // PID file for daemon mode L19: const PID_FILE = path.join(os.homedir(), '.coder-config', 'ui.pid'); L20: ... L54: // Check for LaunchAgent first (macOS) L55: if (process.platform === 'darwin' && fs.existsSync(LAUNCH_AGENT_PATH)) { L56: try { L57: const { spawnSync } = require('child_process'); L58: const result = spawnSync('launchctl', ['list', LAUNCH_AGENT_LABEL], { encoding: 'utf8' }); L59: if (result.status === 0 && result.stdout) {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

cli.jsView on unpkg · L12

scripts/postinstall.jsView file

12const home = os.homedir(); L13: const claudeDir = path.join(home, '.claude'); L14: const configPath = path.join(claudeDir, 'config.json'); ... L25: L26: // Create ~/.claude if it doesn't exist L27: if (!fs.existsSync(claudeDir)) { L28: fs.mkdirSync(claudeDir, { recursive: true }); L29: console.log('Created ~/.claude directory'); L30: } ... L33: if (!fs.existsSync(configPath)) { L34: fs.writeFileSync(configPath, JSON.stringify(defaultConfig, null, 2) + '\n'); L35: console.log('Created ~/.claude/config.json with defaults');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L12

ui/routes/updates.jsView file

294// Use npm install with appropriate tag (tag is validated above) L295: execSync(`npm install -g coder-config@${tag}`, { L296: stdio: 'pipe',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

ui/routes/updates.jsView on unpkg · L294

shell/coder-config.zshView file

•path = shell/coder-config.zsh kind = build_helper sizeBytes = 13898 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

shell/coder-config.zshView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 3-43json

3 "version": "0.54.7",

4 "description": "Configuration manager for AI coding tools - Claude Code, Gemini CLI, Codex CLI, Antigravity. Manage MCPs, rules, permissions, memory, and workstreams.",

5 "author": "regression.io",

6 "main": "config-loader.js",

7 "type": "commonjs",

8 "bin": {

9 "coder-config": "cli.js",

10 "claude-config": "cli.js"

11 },

12 "scripts": {

13 "start": "node cli.js ui",

14 "display": "node cli.js display",

15 "ui": "node cli.js ui",

16 "ui:dev": "cd ui && npm run dev",

17 "ui:build": "cd ui && npm run build",

18 "version:sync": "node scripts/sync-version.js",

19 "version:bump": "node scripts/sync-version.js --bump",

20 "build": "cd ui && npm install && npm run build",

21 "build:ci": "cd ui && npm install && npm run build",

22 "prepublishOnly": "npm run build",

23 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L23

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L23

24 "preuninstall": "node scripts/preuninstall.js",

25 "test": "node --test test/*.test.js",

26 "release": "./scripts/release.sh"

27 },

28 "keywords": [

29 "claude",

30 "claude-code",

31 "anthropic",

32 "gemini",

33 "codex",

34 "openai",

35 "antigravity",

36 "ai",

37 "coding-assistant",

38 "configuration",

39 "mcp",

40 "model-context-protocol",

41 "cli"

42 ],

43 "license": "MIT",

ui/server.cjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3/**

4 * Coder Config Web UI Server

5 * Thin wrapper that delegates to route modules

6 */

7

8const http = require('http');

9const

ui/dist/assets/index-B5XhwJiF.jsView file

47} L48: `),()=>{document.head.removeChild(m)}},[r]),t.jsx(qP,{isPresent:r,childRef:n,sizeRef:o,children:_.cloneElement(e,{ref:n})})}const YP=({children:e,initial:r,isPresent:s,onExitComple... L49: * @license lucide-react v0.475.0 - ISC

Medium

Dynamic Require

Package source references dynamic require/import behavior.

ui/dist/assets/index-B5XhwJiF.jsView on unpkg · L47

ui/routes/file-explorer.jsView file

Lines 1-33javascript

1/**

2 * File Explorer Routes

3 */

4

5const fs = require('fs');

6const path = require('path'

scripts/preuninstall.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * Preuninstall script - cleans up system files on npm uninstall

4 */

5

6const fs = require('fs');

7const path =

cli.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3/**

4 * Coder Config CLI

5 *

6 * Configuration management for Claude Code

7 * CLI-first with optional Web UI

8 */

9

10const path = require(

scripts/postinstall.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3/**

4 * Post-install script for coder-config

5 * Sets up default configuration if not present

6 */

7

8const fs = require('fs');

9const

ui/routes/updates.jsView file

294// Use npm install with appropriate tag (tag is validated above) L295: execSync(`npm install -g coder-config@${tag}`, { L296: stdio: 'pipe',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

ui/routes/updates.jsView on unpkg · L294

shell/coder-config.zshView file

•path = shell/coder-config.zsh kind = build_helper sizeBytes = 13898 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

shell/coder-config.zshView on unpkg