engine7@7.1.83: Suspicious npm security report (Warn)

Loading npm security reports…

engine7@7.1.83: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

17 flagged

dist/engine-startup.mjsView file

265Source sends the broad process environment to a literal external destination. L265: try { L266: const raw = JSON.parse(fs.readFileSync(filePath, "utf-8")); L267: loadHooksFromConfig(raw); ... L386: // src/hooks/executor.ts L387: import { spawn } from "child_process"; L388: import { randomUUID } from "node:crypto"; L389: function parseHookOutput(stdout) { L390: const trimmed = stdout.trim(); ... L467: const envVars = { L468: ...process.env, L469: CLAUDE_PROJECT_DIR: ctx.workspace ... L471: const command = hook.command;

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/engine-startup.mjsView on unpkg · L265

265try { L266: const raw = JSON.parse(fs.readFileSync(filePath, "utf-8")); L267: loadHooksFromConfig(raw); ... L386: // src/hooks/executor.ts L387: import { spawn } from "child_process"; L388: import { randomUUID } from "node:crypto"; L389: function parseHookOutput(stdout) { L390: const trimmed = stdout.trim(); ... L467: const envVars = { L468: ...process.env, L469: CLAUDE_PROJECT_DIR: ctx.workspace ... L471: const command = hook.command;

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/engine-startup.mjsView on unpkg · L265

•matchType = previous_version_dangerous_delta matchedPackage = engine7@7.1.68 matchedIdentity = npm:ZW5naW5lNw:7.1.68 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/engine-startup.mjsView on unpkg

386// src/hooks/executor.ts L387: import { spawn } from "child_process"; L388: import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/engine-startup.mjsView on unpkg · L386

2962} L2963: cachedShell = { shell: "powershell.exe", args: ["-NoProfile", "-Command"] }; L2964: return cachedShell;

High

Shell

Package source references shell execution.

dist/engine-startup.mjsView on unpkg · L2962

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/engine-startup.mjsView on unpkg · L265

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine-startup.mjsView on unpkg · L265

dist/cli.mjsView file

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/cli.mjs: feishu: "https://accounts.feishu.cn", lark: "https://accounts.larksuite.com" fs.writeFileSync(fp, JSON.stringify({ sync_buf: buf })); if (redirectHost) currentBaseUrl = `https://${redirectHost}`; fs.writeFileSync(credFile, JSON.stringify({ accountId, token, baseUrl, userId }, null, 2), "utf8"); ILINK_BASE_URL = "https://ilinkai.weixin.qq.com"; WEIXIN_CDN_BASE_URL = "https://novac2c.cdn.weixin.qq.com/c2c"; fs.writeFileSync(this.filePath, JSON.stringify(obj));

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli.mjsView on unpkg

48Cross-file remote execution chain: dist/cli.mjs spawns dist/main.mjs; helper contains network access plus dynamic code execution. L48: const url = `${ACCOUNTS_URL[domain]}${REGISTRATION_PATH}`; L49: const res = await fetch(url, { L50: method: "POST", L51: headers: { "Content-Type": "application/x-www-form-urlencoded" }, L52: body: new URLSearchParams(body).toString(), L53: signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) ... L55: if (!res.ok) { L56: throw new Error(`\u98DE\u4E66\u6CE8\u518C\u63A5\u53E3\u8FD4\u56DE ${res.status}: ${await res.text()}`); L57: } ... L201: import * as os from "os"; L202: import { promises as dns } from "dns"; L203: function sleep2(ms) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L48

48Trigger-reachable persistence chain: manifest.bin -> bin/engine7 -> dist/cli.mjs L48: const url = `${ACCOUNTS_URL[domain]}${REGISTRATION_PATH}`; L49: const res = await fetch(url, { L50: method: "POST", L51: headers: { "Content-Type": "application/x-www-form-urlencoded" }, L52: body: new URLSearchParams(body).toString(), L53: signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) ... L55: if (!res.ok) { L56: throw new Error(`\u98DE\u4E66\u6CE8\u518C\u63A5\u53E3\u8FD4\u56DE ${res.status}: ${await res.text()}`); L57: } ... L201: import * as os from "os"; L202: import { promises as dns } from "dns"; L203: function sleep2(ms) {

dist/main.mjsView file

105Trigger-reachable chain: scripts.start -> dist/main.mjs L105: try { L106: const raw = JSON.parse(fs55.readFileSync(cfgPath, "utf-8")); L107: const keys = dotPath.split("."); ... L142: filesystem: true, L143: shell: true, L144: memory: true, ... L519: import { randomUUID } from "node:crypto"; L520: function parseHookOutput(stdout) { L521: const trimmed = stdout.trim(); ... L598: const envVars = { L599: ...process.env, L600: CLAUDE_PROJECT_DIR: ctx.workspace

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/main.mjsView on unpkg · L105

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/main.mjs: fs55.writeFileSync(cfgPath, JSON.stringify(raw, null, 2) + "\n", "utf-8"); fs3.writeFileSync(dumpPath, [systemStable, systemDynamic].join("\n\n"), "utf-8"); fs3.writeFileSync(path2.join(opts.workspace, ".context-debug.txt"), lines.join("\n") + "\n", "utf-8"); fs7.writeFileSync(outputPath, "", "utf-8"); fs7.writeFileSync(tmp, JSON.stringify(next, null, 2)); fs7.writeFileSync(tmp, JSON.stringify(pendingNotifications, null, 2), "utf8"); if (process.env.CLAUDE_CODE_MAX_RETRIES) { return parseInt(process.env.CLAUDE_CODE_MAX_RETRIES, 10);

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/main.mjsView on unpkg

105Trigger-reachable credential exfiltration chain: scripts.start -> dist/main.mjs L105: try { L106: const raw = JSON.parse(fs55.readFileSync(cfgPath, "utf-8")); L107: const keys = dotPath.split("."); ... L142: filesystem: true, L143: shell: true, L144: memory: true, ... L519: import { randomUUID } from "node:crypto"; L520: function parseHookOutput(stdout) { L521: const trimmed = stdout.trim(); ... L598: const envVars = { L599: ...process.env, L600: CLAUDE_PROJECT_DIR: ctx.workspace

bin/engine7.cmdView file

•path = bin/engine7.cmd kind = build_helper sizeBytes = 42 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/engine7.cmdView on unpkg

templates/skills/superpowers/brainstorming/scripts/server.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

templates/skills/superpowers/brainstorming/scripts/server.cjs#virtual:normalized:round1View on unpkg

templates/skills/superpowers/writing-skills/render-graphs.jsView file

•matchType = normalized_sha256 matchedPackage = @cliphijack/santaclaude@1.0.122 matchedPath = bundled-superpowers/skills/writing-skills/render-graphs.js matchedIdentity = npm:QGNsaXBoaWphY2svc2FudGFjbGF1ZGU:1.0.122 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

templates/skills/superpowers/writing-skills/render-graphs.jsView on unpkg

Source & flagged code

17 flagged · loading source

dist/engine-startup.mjsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/engine-startup.mjsView on unpkg · L265

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/engine-startup.mjsView on unpkg · L265

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/engine-startup.mjsView on unpkg

386// src/hooks/executor.ts L387: import { spawn } from "child_process"; L388: import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/engine-startup.mjsView on unpkg · L386

2962} L2963: cachedShell = { shell: "powershell.exe", args: ["-NoProfile", "-Command"] }; L2964: return cachedShell;

High

Shell

Package source references shell execution.

dist/engine-startup.mjsView on unpkg · L2962

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/engine-startup.mjsView on unpkg · L265

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine-startup.mjsView on unpkg · L265

dist/cli.mjsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L48

dist/main.mjsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/main.mjsView on unpkg · L105

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/main.mjsView on unpkg

bin/engine7.cmdView file

•path = bin/engine7.cmd kind = build_helper sizeBytes = 42 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/engine7.cmdView on unpkg

templates/skills/superpowers/brainstorming/scripts/server.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

templates/skills/superpowers/brainstorming/scripts/server.cjs#virtual:normalized:round1View on unpkg

templates/skills/superpowers/writing-skills/render-graphs.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

templates/skills/superpowers/writing-skills/render-graphs.jsView on unpkg

Source & flagged code

17 flagged

dist/engine-startup.mjsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/engine-startup.mjsView on unpkg · L265

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/engine-startup.mjsView on unpkg · L265

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/engine-startup.mjsView on unpkg

386// src/hooks/executor.ts L387: import { spawn } from "child_process"; L388: import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/engine-startup.mjsView on unpkg · L386

2962} L2963: cachedShell = { shell: "powershell.exe", args: ["-NoProfile", "-Command"] }; L2964: return cachedShell;

High

Shell

Package source references shell execution.

dist/engine-startup.mjsView on unpkg · L2962

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/engine-startup.mjsView on unpkg · L265

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine-startup.mjsView on unpkg · L265

dist/cli.mjsView file

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/cli.mjsView on unpkg

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.mjsView on unpkg · L48

dist/main.mjsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/main.mjsView on unpkg · L105

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/main.mjsView on unpkg

bin/engine7.cmdView file

•path = bin/engine7.cmd kind = build_helper sizeBytes = 42 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/engine7.cmdView on unpkg

templates/skills/superpowers/brainstorming/scripts/server.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

templates/skills/superpowers/brainstorming/scripts/server.cjs#virtual:normalized:round1View on unpkg

templates/skills/superpowers/writing-skills/render-graphs.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

templates/skills/superpowers/writing-skills/render-graphs.jsView on unpkg

engine7@7.1.83

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code