Loading npm security reports…

create-cedar-app@6.0.2: Malicious npm security report (Block) | LPM Firewall

registry / create-cedar-app / 6.0.2

create-cedar-app@6.0.2

<p align="center"> <img src="https://avatars.githubusercontent.com/u/211931789?s=200&v=4" width="200" /> <h1 align="center">CedarJS</h1> <p align="center"> <a href="https://cedarjs.com/discord"> <img src="https://img.shields.io/badge/Disco

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Invoking the CLI starts telemetry by default and transmits host and development-environment metadata to an unrelated hard-coded endpoint.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Running the create-cedar-app command without telemetry-disabling environment variables.

Impact

A user's local development environment details are disclosed to a third-party host without an opt-in prompt.

Mechanism

Default system fingerprinting followed by OTLP telemetry export.

Attack narrative

When a user runs the CLI, its default telemetry setting invokes the telemetry setup routine. That routine gathers operating-system, shell, runtime, package-manager, installed Cedar-package, and editor metadata, then configures an exporter to send traces to quark.quantumparticle.io. The command-line option describes Cedar telemetry using a different URL, making the hard-coded receiver misleading and unaligned with the stated service.

AI rationale

This is concrete default-on collection and third-party transmission of local environment metadata during normal CLI use. The absence of an install hook limits the trigger but does not remove the exfiltration behavior.

Evidence

dist/create-cedar-app.js

Network endpoints1

quark.quantumparticle.io/v1/traces

Decision evidence

public snapshot

Source & flagged code

10 flagged · loading source

dist/create-cedar-app.jsView file

4Source sends the broad process environment to a literal external destination. L4: const __filename = (await import("node:url")).fileURLToPath(import.meta.url); L5: const __dirname = (await import("node:path")).dirname(__filename); L6: L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/create-cedar-app.jsView on unpkg · L4

•matchType = previous_version_dangerous_delta matchedPackage = create-cedar-app@6.0.0 matchedIdentity = npm:Y3JlYXRlLWNlZGFyLWFwcA:6.0.0 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/create-cedar-app.jsView on unpkg

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p...

High

Child Process

Package source references child process execution.

dist/create-cedar-app.jsView on unpkg · L6

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p...

High

Shell

Package source references shell execution.

dist/create-cedar-app.jsView on unpkg · L6

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of c.entries()){if(o+=l,Mp.has(l)){let{groups:f}=new RegExp(`(?:\\${RR}(?<code>\\d+)m|\\${eS}(?<uri>.*)${Zm})`).exec(c.slice(u).join(""))||{groups:{}};if(f.

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/create-cedar-app.jsView on unpkg · L6

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of c.entries()){if(o+=l,Mp.has(l)){let{groups:f}=new RegExp(`(?:\\${RR}(?<code>\\d+)m|\\${eS}(?<uri>.*)${Zm})`).exec(c.slice(u).join(""))||{groups:{}};if(f.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/create-cedar-app.jsView on unpkg · L6

4const __filename = (await import("node:url")).fileURLToPath(import.meta.url); L5: const __dirname = (await import("node:path")).dirname(__filename); L6: L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/create-cedar-app.jsView on unpkg · L4

6Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/create-cedar-app.js L6: L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of c.entries()){if(o+=l,Mp.has(l)){let{groups:f}=new RegExp(`(

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/create-cedar-app.jsView on unpkg · L6

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/create-cedar-app.jsView on unpkg

2L3: const require = (await import("node:module")).createRequire(import.meta.url); L4: const __filename = (await import("node:url")).fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/create-cedar-app.jsView on unpkg · L2

Source & flagged code

10 flagged

dist/create-cedar-app.jsView file

4Source sends the broad process environment to a literal external destination. L4: const __filename = (await import("node:url")).fileURLToPath(import.meta.url); L5: const __dirname = (await import("node:path")).dirname(__filename); L6: L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/create-cedar-app.jsView on unpkg · L4

•matchType = previous_version_dangerous_delta matchedPackage = create-cedar-app@6.0.0 matchedIdentity = npm:Y3JlYXRlLWNlZGFyLWFwcA:6.0.0 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/create-cedar-app.jsView on unpkg

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p...

High

Child Process

Package source references child process execution.

dist/create-cedar-app.jsView on unpkg · L6

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p...

High

Shell

Package source references shell execution.

dist/create-cedar-app.jsView on unpkg · L6

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of c.entries()){if(o+=l,Mp.has(l)){let{groups:f}=new RegExp(`(?:\\${RR}(?<code>\\d+)m|\\${eS}(?<uri>.*)${Zm})`).exec(c.slice(u).join(""))||{groups:{}};if(f.

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/create-cedar-app.jsView on unpkg · L6

6L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of c.entries()){if(o+=l,Mp.has(l)){let{groups:f}=new RegExp(`(?:\\${RR}(?<code>\\d+)m|\\${eS}(?<uri>.*)${Zm})`).exec(c.slice(u).join(""))||{groups:{}};if(f.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/create-cedar-app.jsView on unpkg · L6

4const __filename = (await import("node:url")).fileURLToPath(import.meta.url); L5: const __dirname = (await import("node:path")).dirname(__filename); L6: L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/create-cedar-app.jsView on unpkg · L4

6Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/create-cedar-app.js L6: L7: var oee=Object.create;var Bl=Object.defineProperty;var see=Object.getOwnPropertyDescriptor;var aee=Object.getOwnPropertyNames;var cee=Object.getPrototypeOf,uee=Object.prototype.has... L8: `:10,t=typeof i=="string"?"\r":13;return i[i.length-1]===e&&(i=i.slice(0,i.length-1)),i[i.length-1]===t&&(i=i.slice(0,i.length-1)),i}});var Ex=b((Y9e,$c)=>{"use strict";var Wc=J("p... L9: ${o.message}`:_,g=[m,e,i].filter(Boolean).join(` L10: `);return d?(o.originalMessage=o.message,o.message=g):o=new Error(g),o.shortMessage=m,o.command=n,o.escapedCommand=r,o.exitCode=s,o.signal=a,o.signalDescription=f,o.stdout=i,o.stde... L11: `)];for(let[u,l]of c.entries()){if(o+=l,Mp.has(l)){let{groups:f}=new RegExp(`(

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/create-cedar-app.jsView on unpkg · L6

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/create-cedar-app.jsView on unpkg

2L3: const require = (await import("node:module")).createRequire(import.meta.url); L4: const __filename = (await import("node:url")).fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/create-cedar-app.jsView on unpkg · L2