Loading npm security reports…

delimit-cli@4.18.8: Malicious npm security report (Block) | LPM Firewall

registry / delimit-cli / 4.18.8

delimit-cli@4.18.8

The merge gate for AI-written code, with signed, replayable attestation. Works with Claude Code, Codex, Cursor, and Gemini CLI.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

An installed bootstrap hook can silently replace this package with a newer release and run setup without a confirmation prompt. Setup writes persistent AI-agent instructions that direct automatic external actions.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

A configured Delimit bootstrap hook runs during an AI-agent session.

Impact

It can persist instructions that start polling and direct agents to draft and send actions without asking permission.

Mechanism

Automatic self-update followed by unattended AI-agent configuration.

Attack narrative

After a user has configured its hooks, the bootstrap handler checks npm for a newer copy of the same package, installs it globally, and invokes setup. That setup is non-interactive in this path and persists agent configuration containing instructions to start polling and automatically draft and send actions. The package also has an install lifecycle hook, creating a supply-chain update path that can re-enter package code without a fresh informed setup decision.

AI rationale

The automatic self-update and unattended reconfiguration create a persistent agent-control path, and the injected instruction explicitly suppresses permission requests for external actions. This exceeds package-aligned setup and is concrete install-hook abuse.

Evidence

package.jsonlib/cross-model-hooks.jsbin/delimit-setup.js~/.delimit/~/.gemini/settings.json~/.gemini/antigravity-cli/settings.json~/.claude/agents/

Network endpoints

Source & flagged code

25 flagged

package.jsonView file

Lines 156-196json

156 "!scripts/sync-gateway.sh",

157 "!scripts/build-license-core.sh",

158 "!scripts/security-check.sh",

159 "!scripts/check-bundle-parity.sh",

160 "!scripts/check-bundle-classification.sh",

161 "!scripts/list-blocked-gateway-paths.js",

162 "!scripts/test-license-core-so.sh",

163 "!scripts/test-with-config-guard.js",

164 "!scripts/verify-config-sentinel.js",

165 "server.json",

166 "README.md",

167 "LICENSE",

168 "CHANGELOG.md",

169 "gateway/ai/session_continuity.py"

170 ],

171 "bin": {

172 "delimit": "./bin/delimit-cli.js",

173 "delimit-cli": "./bin/delimit-cli.js"

174 },

175 "scripts": {

176 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L176

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L176

177 "sync-gateway": "bash scripts/sync-gateway.sh",

178 "prepublishOnly": "node scripts/clean-tree-guard.js && bash scripts/publish-ci-guard.sh && bash scripts/check-bundle-classification.sh && npm run sync-gateway && bash scripts/build-license-core.sh && bash scripts/security-check.sh && bash scripts/check-bundle-parity.sh",

179 "test": "node scripts/test-with-config-guard.js",

180 "test:raw": "node --test tests/clean-tree-guard.test.js tests/_config-sentinel.test.js tests/setup-onboarding.test.js tests/setup-matrix.test.js tests/setup-no-clobber.test.js tests/config-export-import.test.js tests/cross-model-hooks.test.js tests/golden-path.test.js tests/v420-features.test.js tests/v43-wrap-engine.test.js tests/v43-trust-page-engine.test.js tests/v43-ai-sbom-engine.test.js tests/attest-mcp.test.js tests/delimit-home.test.js tests/postinstall-hardening.test.js tests/auth-signin.test.js tests/auth-signout.test.js tests/migration-2092-banner.test.js tests/control-browser.t ...

181 },

182 "keywords": [

183 "openapi",

184 "swagger",

185 "api",

186 "breaking-changes",

187 "semver",

188 "lint",

189 "linter",

190 "api-governance",

191 "api-contracts",

192 "ci-cd",

193 "github-actions",

194 "migration",

195 "diff",

196 "schema-validation",

Long lines were clipped for display.

bin/delimit-setup.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * delimit setup — Install Delimit MCP governance tools into Claude Code.

4 *

5 * What it does:

6 * 1. Creates ~/.delimit/ directory with the MCP server + core engine

7 * 2. Adds "delimit" to Claude Code's MCP config (~/.mcp.json or .mcp.json)

8 * 3. Installs default agents into ~/.claude/agents/

9 * 4. Prints next steps

10 */

11const

lib/proxy-handler.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3/**

4 * Delimit Proxy Handler - Intercepts AI tool commands

5 * This module wraps AI tools (claude, gemini, codex) with governance

6 */

8const { spawn } = require('child_process');

9const

bin/delimit-cli.jsView file

Lines 43-83javascript

43 try { return require('../package.json').version; } catch { return 'unknown'; }

44})();

46const continuityContext = resolveContinuityContext();

lib/cross-model-hooks.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ion migratetonestedformat(hookgroup) { if (hookgroup.hooks && array.isarray(hookgroup.hooks)) { return hookgroup; } const nested = { matcher: hookgroup.matcher || '' }; if (hookgroup.if) nested.if = hookgroup.if; nested.hooks = [{ type: hookgroup.type || 'command', command: hookgroup.command }]; return nested; }

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/cross-model-hooks.jsView on unpkg

lib/auth-setup.jsView file

11Trigger-reachable persistence chain: manifest.bin -> bin/delimit-cli.js -> lib/auth-setup.js L11: const crypto = require('crypto'); L12: const { execSync } = require('child_process'); L13: const chalk = require('chalk'); ... L16: constructor() { L17: this.configDir = path.join(process.env.HOME, '.delimit'); L18: this.credentialsFile = path.join(this.configDir, 'credentials.enc'); ... L183: console.log(chalk.gray('\n Required scopes for full functionality:')); L184: console.log(chalk.gray(' • repo (Full control of private repositories)')); L185: console.log(chalk.gray(' • workflow (Update GitHub Action workflows)')); ... L281: L282: mcp[server].endpoint = await this.prompt(' Endpoint URL (http://localhost:8080): ', 'http://localhost:8080'); L283: }

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

lib/auth-setup.jsView on unpkg · L11

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/auth-setup.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/auth-setup.jsView on unpkg

gateway/ai/license_core.cpython-310-x86_64-linux-gnu.soView file

•path = gateway/ai/license_core.cpython-310-x86_64-linux-gnu.so kind = native_binary sizeBytes = 880904 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

gateway/ai/license_core.cpython-310-x86_64-linux-gnu.soView on unpkg

bin/delimit-os.shView file

•path = bin/delimit-os.sh kind = build_helper sizeBytes = 3481 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/delimit-os.shView on unpkg

lib/agent.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/agent.js#virtual:normalized:round1View on unpkg

lib/hooks-installer.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/hooks-installer.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/hooks-installer.jsView on unpkg

lib/agent.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/agent.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/agent.jsView on unpkg

lib/attest-mcp.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/attest-mcp.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/attest-mcp.jsView on unpkg

bin/delimit.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = bin/delimit.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/delimit.jsView on unpkg

lib/session-shell.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/session-shell.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/session-shell.jsView on unpkg

scripts/clean-tree-guard.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = scripts/clean-tree-guard.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/clean-tree-guard.jsView on unpkg

lib/delimit-template.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/delimit-template.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/delimit-template.jsView on unpkg

lib/platform-adapters.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/platform-adapters.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/platform-adapters.jsView on unpkg

lib/trust-page-engine.jsView file

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/trust-page-engine.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/trust-page-engine.jsView on unpkg

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/delimit-setup.jsView file

12const path = require('path'); L13: const { execSync } = require('child_process'); L14: const os = require('os');

High

Child Process

Package source references child process execution.

bin/delimit-setup.jsView on unpkg · L12

12const path = require('path'); L13: const { execSync } = require('child_process'); L14: const os = require('os'); L15: // Shared prompt gate: false when stdin/stdout is not a TTY, CI is set, L16: // DELIMIT_NON_INTERACTIVE is set, or the user passed --yes. Every prompt ... L19: const SETUP_INTERACTIVE = isInteractive({ yes: process.argv.includes('--yes') || process.argv.includes('-y') }); L20: const DELIMIT_HOME = path.join(os.homedir(), '.delimit'); L21: const MCP_CONFIG = path.join(os.homedir(), '.mcp.json'); ... L107: // Self-update check: ensure we're running the latest version (skip if already re-execed) L108: const _pkg = JSON.parse(fs.readFileSync(path.join(__dirname, '..', 'package.json'), 'utf-8')); L109: if (!process.env.DELIMIT_SETUP_UPDATED) { L110: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/delimit-setup.jsView on unpkg · L12

113log(dim(` Updating delimit-cli ${_pkg.version} -> ${latest}...`)); L114: execSync('npm install -g delimit-cli@latest 2>/dev/null', { stdio: 'pipe', timeout: 30000 }); L115: execSync('delimit-cli setup', { stdio: 'inherit', env: { ...process.env, DELIMIT_SETUP_UPDATED: '1' } });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/delimit-setup.jsView on unpkg · L113

10*/ L11: const fs = require('fs'); L12: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/delimit-setup.jsView on unpkg · L10

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/delimit-setup.jsView on unpkg · L12

lib/proxy-handler.jsView file

7L8: const { spawn } = require('child_process'); L9: const axios = require('axios'); L10: const path = require('path'); ... L12: L13: const AGENT_URL = `http://127.0.0.1:${process.env.DELIMIT_AGENT_PORT || 7823}`; L14:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/proxy-handler.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = delimit-cli@4.17.0 matchedPath = lib/proxy-handler.js matchedIdentity = npm:ZGVsaW1pdC1jbGk:4.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/proxy-handler.jsView on unpkg

bin/delimit-cli.jsView file

63} L64: if (!config.mcpServers) config.mcpServers = {}; L65: if (!config.mcpServers.delimit) { L66: const python = process.platform === 'win32' ? 'python.exe' : 'python3'; ... L71: L72: config.mcpServers.delimit = { L73: command: python, ... L84: } L85: fs.writeFileSync(antigravityConfig, JSON.stringify(config, null, 2)); L86: } ... L476: // --- MCP --- L477: const mcpConfigPath = path.join(homedir, '.mcp.json');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/delimit-cli.jsView on unpkg · L63

lib/cross-model-hooks.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/cross-model-hooks.jsView on unpkg

lib/auth-setup.jsView file

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

lib/auth-setup.jsView on unpkg · L11

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/auth-setup.jsView on unpkg

gateway/ai/license_core.cpython-310-x86_64-linux-gnu.soView file

•path = gateway/ai/license_core.cpython-310-x86_64-linux-gnu.so kind = native_binary sizeBytes = 880904 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

gateway/ai/license_core.cpython-310-x86_64-linux-gnu.soView on unpkg

bin/delimit-os.shView file

•path = bin/delimit-os.sh kind = build_helper sizeBytes = 3481 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/delimit-os.shView on unpkg

lib/agent.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/agent.js#virtual:normalized:round1View on unpkg

lib/hooks-installer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/hooks-installer.jsView on unpkg

lib/agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/agent.jsView on unpkg

lib/attest-mcp.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/attest-mcp.jsView on unpkg

bin/delimit.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/delimit.jsView on unpkg

lib/session-shell.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/session-shell.jsView on unpkg

scripts/clean-tree-guard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/clean-tree-guard.jsView on unpkg

lib/delimit-template.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/delimit-template.jsView on unpkg

lib/platform-adapters.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/platform-adapters.jsView on unpkg

lib/trust-page-engine.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/trust-page-engine.jsView on unpkg

Source & flagged code

25 flagged

package.jsonView file

Lines 156-196json

156 "!scripts/sync-gateway.sh",

157 "!scripts/build-license-core.sh",

158 "!scripts/security-check.sh",

159 "!scripts/check-bundle-parity.sh",

160 "!scripts/check-bundle-classification.sh",

161 "!scripts/list-blocked-gateway-paths.js",

162 "!scripts/test-license-core-so.sh",

163 "!scripts/test-with-config-guard.js",

164 "!scripts/verify-config-sentinel.js",

165 "server.json",

166 "README.md",

167 "LICENSE",

168 "CHANGELOG.md",

169 "gateway/ai/session_continuity.py"

170 ],

171 "bin": {

172 "delimit": "./bin/delimit-cli.js",

173 "delimit-cli": "./bin/delimit-cli.js"

174 },

175 "scripts": {

176 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L176

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L176

177 "sync-gateway": "bash scripts/sync-gateway.sh",

179 "test": "node scripts/test-with-config-guard.js",

181 },

182 "keywords": [

183 "openapi",

184 "swagger",

185 "api",

186 "breaking-changes",

187 "semver",

188 "lint",

189 "linter",

190 "api-governance",

191 "api-contracts",

192 "ci-cd",

193 "github-actions",

194 "migration",

195 "diff",

196 "schema-validation",

Long lines were clipped for display.

bin/delimit-setup.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * delimit setup — Install Delimit MCP governance tools into Claude Code.

4 *

5 * What it does:

6 * 1. Creates ~/.delimit/ directory with the MCP server + core engine

7 * 2. Adds "delimit" to Claude Code's MCP config (~/.mcp.json or .mcp.json)

8 * 3. Installs default agents into ~/.claude/agents/

9 * 4. Prints next steps

10 */

11const

lib/proxy-handler.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3/**

4 * Delimit Proxy Handler - Intercepts AI tool commands

5 * This module wraps AI tools (claude, gemini, codex) with governance

6 */

8const { spawn } = require('child_process');

9const

bin/delimit-cli.jsView file

Lines 43-83javascript

43 try { return require('../package.json').version; } catch { return 'unknown'; }

44})();

46const continuityContext = resolveContinuityContext();

lib/cross-model-hooks.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/cross-model-hooks.jsView on unpkg

lib/auth-setup.jsView file

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

lib/auth-setup.jsView on unpkg · L11

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/auth-setup.jsView on unpkg

gateway/ai/license_core.cpython-310-x86_64-linux-gnu.soView file

•path = gateway/ai/license_core.cpython-310-x86_64-linux-gnu.so kind = native_binary sizeBytes = 880904 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

gateway/ai/license_core.cpython-310-x86_64-linux-gnu.soView on unpkg

bin/delimit-os.shView file

•path = bin/delimit-os.sh kind = build_helper sizeBytes = 3481 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/delimit-os.shView on unpkg

lib/agent.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/agent.js#virtual:normalized:round1View on unpkg

lib/hooks-installer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/hooks-installer.jsView on unpkg

lib/agent.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/agent.jsView on unpkg

lib/attest-mcp.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/attest-mcp.jsView on unpkg

bin/delimit.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/delimit.jsView on unpkg

lib/session-shell.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/session-shell.jsView on unpkg

scripts/clean-tree-guard.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/clean-tree-guard.jsView on unpkg

lib/delimit-template.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/delimit-template.jsView on unpkg

lib/platform-adapters.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/platform-adapters.jsView on unpkg

lib/trust-page-engine.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/trust-page-engine.jsView on unpkg

delimit-cli@4.18.8

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code