emp-code@0.4.5: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

emp-code@0.4.5: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/emp.jsView file

4try { L5: const exeName = process.platform === 'win32' ? 'emp-win.exe' : process.platform === 'darwin' ? 'emp-macos' : 'emp-linux'; L6: const exePath = require('path').join(__dirname, '..', 'dist', exeName); L7: if (require('fs').existsSync(exePath)) { L8: const { spawn } = require('child_process'); L9: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' }); ... L31: L32: const VERSION = require('../package.json').version; L33: const versionMod = require('../lib/version'); ... L39: const msg = err && err.stack || err && err.message || String(err); L40: try { process.stderr.write(`\n[emp: uncaught] ${msg}\n`); } catch {} L41:

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

bin/emp.jsView on unpkg · L4

4Trigger-reachable chain: scripts.start -> bin/emp.js L4: try { L5: const exeName = process.platform === 'win32' ? 'emp-win.exe' : process.platform === 'darwin' ? 'emp-macos' : 'emp-linux'; L6: const exePath = require('path').join(__dirname, '..', 'dist', exeName); L7: if (require('fs').existsSync(exePath)) { L8: const { spawn } = require('child_process'); L9: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' }); ... L31: L32: const VERSION = require('../package.json').version; L33: const versionMod = require('../lib/version'); ... L39: const msg = err && err.stack || err && err.message || String(err); L40: try { process.stderr.write(`\n[emp: uncaught] ${msg}\n`); } catch {} L41:

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/emp.jsView on unpkg · L4

7if (require('fs').existsSync(exePath)) { L8: const { spawn } = require('child_process'); L9: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' });

High

Child Process

Package source references child process execution.

bin/emp.jsView on unpkg · L7

4try { L5: const exeName = process.platform === 'win32' ? 'emp-win.exe' : process.platform === 'darwin' ? 'emp-macos' : 'emp-linux'; L6: const exePath = require('path').join(__dirname, '..', 'dist', exeName); L7: if (require('fs').existsSync(exePath)) { L8: const { spawn } = require('child_process'); L9: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' }); ... L31: L32: const VERSION = require('../package.json').version; L33: const versionMod = require('../lib/version'); ... L39: const msg = err && err.stack || err && err.message || String(err); L40: try { process.stderr.write(`\n[emp: uncaught] ${msg}\n`); } catch {} L41:

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/emp.jsView on unpkg · L4

7if (require('fs').existsSync(exePath)) { L8: const { spawn } = require('child_process'); L9: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' }); ... L1037: if (!id) { console.log(' cancelled'); return defaultId; } L1038: const baseUrl = (await lifecycle.ask(' baseUrl (e.g. https://api.example.com): ')).trim(); L1039: if (!/^https?:\/\//i.test(baseUrl)) { console.log(C.red + ' baseUrl must start with http(s)://' + C.r); return defaultId; } ... L1673: const schemas = tools.getSchemas(); L1674: console.log('Available tools:'); L1675: for (const t of schemas) { ... L1887: if (!fs.existsSync(abs)) { console.log(`File not found: ${abs}`); return; } L1888: const data = fs.readFileSync(abs); L1889: if (data.length > 8*1024*1024) { console.log(`Image too large ${(data.

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

bin/emp.jsView on unpkg · L7

4Trigger-reachable persistence chain: scripts.start -> bin/emp.js L4: try { L5: const exeName = process.platform === 'win32' ? 'emp-win.exe' : process.platform === 'darwin' ? 'emp-macos' : 'emp-linux'; L6: const exePath = require('path').join(__dirname, '..', 'dist', exeName); L7: if (require('fs').existsSync(exePath)) { L8: const { spawn } = require('child_process'); L9: const child = spawn(exePath, process.argv.slice(2), { stdio: 'inherit' }); ... L31: L32: const VERSION = require('../package.json').version; L33: const versionMod = require('../lib/version'); ... L39: const msg = err && err.stack || err && err.message || String(err); L40: try { process.stderr.write(`\n[emp: uncaught] ${msg}\n`); } catch {} L41:

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

bin/emp.jsView on unpkg · L4

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/emp.jsView on unpkg

5const exeName = process.platform === 'win32' ? 'emp-win.exe' : process.platform === 'darwin' ? 'emp-macos' : 'emp-linux'; L6: const exePath = require('path').join(__dirname, '..', 'dist', exeName); L7: if (require('fs').existsSync(exePath)) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/emp.jsView on unpkg · L5

lib/tools.jsView file

4const path = require('path'); L5: const { spawn } = require('child_process'); L6: const bg = require('./bg'); L7: let workspace; L8: try { workspace = require('./workspace'); } catch { workspace = { getWorkspace: () => process.cwd() }; } L9: ... L15: L16: function unrestricted() { return process.env.EMP_UNRESTRICTED === '1'; } L17: ... L62: function hasUnresolvedShortName(abs) { L63: if (process.platform !== 'win32') return false; L64: return String(abs || '').split(/[\\/]+/).some((seg) => /~\d+$/.test(seg));

Critical

Download Execute

Source downloads or fetches remote code and executes it.

lib/tools.jsView on unpkg · L4

296L297: const OBFUSCATED_COMMAND_RE = /(?:base64\s+(?:-d|--decode|-D)[\s\S]*\|[\s\S]*\b(?:sh|bash|zsh|dash|powershell|pwsh|cmd)\b|\b(?:sh|bash|zsh|dash)\b[^\n|]*<<<|powershell[^\n]*\s-(?:e... L298:

High

Shell

Package source references shell execution.

lib/tools.jsView on unpkg · L296

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1217 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

emp-web/server.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = emp-code@0.4.3 matchedIdentity = npm:ZW1wLWNvZGU:0.4.3 similarity = 0.931 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

emp-web/server.cjsView on unpkg

Source & flagged code

14 flagged

package.jsonView file

Lines 1-37json

1{

2 "name": "emp-code",

3 "version": "0.4.5",

4 "description": "EMP CLI - coding agent with full-screen TUI (ink, clickable tool output, mouse, plan mode, markdown, vision) and 18 providers. Runs great on any light PC / weak CPU / old motherboard. Sessions, context, effort, web search, background tasks, revert.",

5 "type": "commonjs",

6 "bin": {

7 "emp": "bin/emp.js"

8 },

9 "engines": {

10 "node": ">=14"

11 },

12 "scripts": {

13 "start": "node bin/emp.js",

14 "test": "node -e \"console.log('no tests')\"",

15 "build": "node scripts/build-exe.js",

16 "build:win": "pkg . --target node22-win-x64 --output dist/emp-win.exe",

17 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L17

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L17

18 "prepublishOnly": "node scripts/prepare-publish.js",

19 "postpublish": "node scripts/restore-after-publish.js"

20 },

21 "keywords": [

22 "cli",

23 "ai",

24 "coding-agent",

25 "nvidia-nim",

26 "opencode-zen",

27 "no-avx",

28 "windows"

29 ],

30 "author": "",

31 "license": "UNLICENSED",

32 "repository": {

33 "type": "git",

34 "url": "git+https://github.com/saintdevzz/emp-cli.git"

35 },

36 "homepage": "https://github.com/saintdevzz/emp-cli#readme",

37 "bugs": {

bin/emp.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

3if (!process.pkg) {

4 try {

5 const exeName = process.platform === 'win32' ? 'emp-win.exe'

lib/tools.jsView file

Lines 1-24javascript

1'use strict';

2

3const fs = require('fs');

4const path = require('path');

5const {

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1217 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

emp-web/server.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = emp-code@0.4.3 matchedIdentity = npm:ZW1wLWNvZGU:0.4.3 similarity = 0.931 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

emp-web/server.cjsView on unpkg

Lines 276-316javascript

276 if (base) {

277 alts.push(String.raw`users[\\/]` + base + String.raw`[\\/]` + special);

278 alts.push(String.raw`home[\\/]` + base + String.raw`[\\/]` + special);

279 }

280 return new RegExp('(?:' + alts.join('|') + ')', 'i');

281})();

282

283const EXPANDED_USER_DIR_RE = (() => {

284 const dirs = [];

285 const home = process.platform === 'win32' ? (process.env.USERPROFILE || '') : (process.env.HOME || '');

286 if (home) {

287 for (const n of ['', 'Desktop', 'Documents', 'Downloads', 'Pictures', 'Music', 'Videos', 'OneDrive']) {

288 const full = n ? path.join(home, n) : home;

289 for (const v of pathVariantsOf(full)) dirs.push(v.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));

290 }

291 }

292 if (!dirs.length) return null;

293 dirs.sort((a, b) => b.length - a.length);

294 return new RegExp('(?:' + dirs.join('|') + `)(?:["'\\s;&|)]|[\\\\/]\\s*\\*|[\\\\/]?\\s*$|\\\\?\\s*$)`, 'i'

295})();

296

297const OBFUSCATED_COMMAND_RE = /(?:base64\s+(?:-d|--decode|-D)[\s\S]*\|[\s\S]*\b(?:sh|bash|zsh|dash|powershell|pwsh|cmd)\b|\b(?:sh|bash|zsh|dash)\b[^\n|]*<<<|

298

High

Shell

Package source references shell execution.

lib/tools.jsView on unpkg · L296

299const INLINE_INTERPRETER_RE = /(?:^|[\s;&|(])(?:node|nodejs|deno|bun|python[\d.]*|py|python3|perl|ruby|php|lua|Rscript|osascript|powershell(?:\.exe)?|pwsh|wscript|cscript|mshta)

300

301const DESTRUCTIVE_FS_API_RE = new RegExp([

302 String.raw`\.\s*(?:rmSync|rmdirSync|unlinkSync|truncateSync|rm|rmdir|unlink|truncate)\s*\(`,

303 String.raw`\brmSync\b|\brmdirSync\b|\bunlinkSync\b`,

304 String.raw`shutil\s*\.\s*(?:rmtree|move)`,

305 String.raw`os\s*\.\s*(?:remove|unlink|rmdir|removedirs|truncate)\b`,

306 String.raw`pathlib[^\n]*\.unlink`,

307 String.raw`Path\s*\([^\n]*\)\s*\.\s*unlink`,

308 String.raw`File\.Delete|Directory\.Delete|File\.WriteAllText`,

309 String.raw`FileUtils\.rm_rf|FileUtils\.rm\b`,

310 String.raw`Remove-Item|Clear-Content|Clear-Item|Remove-ItemProperty`,

311 String.raw`Set-Content\s+[^\n]*-Value\s*''`,

312 String.raw`\bunlink\s*\(`,

313 String.raw`\brmtree\b`,

314 String.raw`fs::remove_(?:file|dir_all)`,

315 String.raw`os\.RemoveAll|os\.Remove\b`,

316 String.raw`recursive\s*:\s*true`,