first-tree-staging@0.5.17-staging.895.1: Suspicious npm security | LPM Firewall

Loading npm security reports…

first-tree-staging@0.5.17-staging.895.1: Suspicious npm security | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/prune-codex-runtime-binary.mjs && node scripts/prune-claude-runtime-binary.mjs && node scripts/prune-claude-sdk-deps.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/prune-codex-runtime-binary.mjs && node scripts/prune-claude-runtime-binary.mjs && node scripts/prune-claude-sdk-deps.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli/index.mjsView file

7import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs"; L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

dist/cli/index.mjsView on unpkg · L7

2566print.line(" If you need to restart the inline daemon:\n"); L2567: print.line(` stop the PowerShell running \`${channelConfig.binName} daemon start\` with Ctrl+C,\n`); L2568: print.line(` then run \`${channelConfig.binName} daemon start\` again.\n\n`);

High

Shell

Package source references shell execution.

dist/cli/index.mjsView on unpkg · L2566

1#!/usr/bin/env node L2: import { $ as planMarkdownImport, $n as discoverClaudeCodeSkills, $t as docCommentStatusSchema, An as defaultConfigDir, At as installClientService, B as MemberOrganizationResolutio... L3: import { createRequire } from "node:module"; ... L7: import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs"; L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url"; ... L16: //#region src/core/channel-env.ts L17: if (!process.env.FIRST_TREE_HOME) process.env.FIRST_TREE_HOME = channelConfig.defaultHome; L18: process.title = channelConfig.binName;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli/index.mjsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = first-tree-staging@0.5.17-staging.893.1 matchedIdentity = npm:Zmlyc3QtdHJlZS1zdGFnaW5n:0.5.17-staging.893.1 similarity = 0.833 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/index.mjsView on unpkg

dist/connect-token-2OxQmx2y.mjsView file

•path = dist/connect-token-2OxQmx2y.mjs kind = oversized_source_file sizeBytes = 2846003 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/connect-token-2OxQmx2y.mjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 28-68json

28 "files": [

29 "dist",

30 "skills",

31 "scripts/prune-codex-runtime-binary.mjs",

32 "scripts/prune-claude-runtime-binary.mjs",

33 "scripts/prune-claude-sdk-deps.mjs",

34 "README.md",

35 "LICENSE"

36 ],

37 "publishConfig": {

38 "access": "public"

39 },

40 "scripts": {

41 "dev": "tsx src/cli/index.ts",

42 "build": "tsdown src/cli/index.ts src/index.ts --format esm --no-dts --external @anthropic-ai/claude-agent-sdk --external @botiverse/kimi-code-sdk --external @openai/codex-sdk && node ../../scripts/copy-client-runtime-templates.mjs apps/cli && node ../../scripts/copy-cli-tree-templates.mjs",

43 "typecheck": "tsc --noEmit",

44 "test": "node scripts/run-vitest-batches.mjs",

45 "coverage": "pnpm run build && vitest run --coverage --passWithNoTests",

46 "prepack": "rm -rf skills && cp -R ../../skills .",

47 "postpack": "rm -rf skills",

48 "postinstall": "node scripts/prune-codex-runtime-binary.mjs && node scripts/prune-claude-runtime-binary.mjs && node scripts/prune-claude-sdk-deps.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 },

50 "license": "Apache-2.0",

51 "repository": {

52 "type": "git",

53 "url": "https://github.com/agent-team-foundation/first-tree.git",

54 "directory": "apps/cli"

55 },

56 "engines": {

57 "node": ">=22.13.0"

58 },

59 "dependencies": {

60 "@anthropic-ai/claude-agent-sdk": "^0.3.187",

61 "@botiverse/kimi-code-sdk": "0.26.0-botiverse.2",

62 "@inquirer/prompts": "^8.3.0",

63 "@openai/codex-sdk": "^0.144.1",

64 "commander": "^13.1.0",

65 "ejs": "^6.0.1",

66 "gray-matter": "^4.0.3",

67 "jose": "^6.0.0",

68 "mdast-util-from-markdown": "^2.0.3",

dist/cli/index.mjsView file

Lines 1-27javascript

1#!/usr/bin/env node

2import { $ as planMarkdownImport, $n as discoverClaudeCodeSkills, $t as docCommentStatusSchema, An as defaultConfigDir, At as installClientService, B as MemberOrganizationResolutionError, Bn as channelConfig, Bt as loadDaemonEnv, C as promptMissingFields, Ct as readRememberedLocalClientIdForAccount, Dt as stopClientRuntimeProcess, En as setJsonMode, Et as resolveClientRuntimeStopReason, F as

dist/connect-token-2OxQmx2y.mjsView file

•path = dist/connect-token-2OxQmx2y.mjs kind = oversized_source_file sizeBytes = 2846003 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/connect-token-2OxQmx2y.mjsView on unpkg

Lines 2546-2586javascript

2546 try {

2547 const info = refreshClientServiceUnitForUpdate();

2548 print.line(` refresh-unit: ${info.platform} supervisor definition rewritten at ${info.unitPath}\n`);

2549 } catch (err) {

2550 const msg = err instanceof Error ? err.message : String(err);

2551 print.line(` refresh-unit: failed to rewrite supervisor definition: ${msg}\n`);

2552 process.exit(1);

2553 }

2554 });

2555}

2556//#endregion

2557//#region src/commands/daemon/restart.ts

2558function registerDaemonRestartCommand(daemon) {

2559 daemon.command("restart").description("Restart the background service").action(() => {

2560 if (!isServiceSupported()) {

2561 if (process.platform === "win32") {

2562 print.line("\n Service control is not supported on Windows.\n");

2563 print.line(" First Tree runs inline on this platform.\n\n");

2564 print.line(" If you are onboarding and need to refresh detected agents:\n");

2565 print.line(` ${channelConfig.binName} daemon probe\n\n`);

2566 print.line(" If you need to restart the inline daemon:\n");

2567 print.line(` stop the PowerShell running \`${channelConfig.binName} daemon start\` with Ctrl+C,\n`);

2568 print.line(` then run \`${channelConfig.binName} daemon start\` again.\n\n`);

High

Shell

Package source references shell execution.

dist/cli/index.mjsView on unpkg · L2566

2569 } else {

2570 print.line(`\n Service control is not supported on ${process.platform}.\n`);

2571 print.line(" First Tree runs inline on this platform.\n\n");

2572 print.line(" If you are onboarding and need to refresh detected agents:\n");

2573 print.line(` ${channelConfig.binName} daemon probe\n\n`);

2574 print.line(" If you need to restart the inline daemon:\n");

2575 print.line(` stop the terminal running \`${channelConfig.binName} daemon start\` with Ctrl+C,\n`);

2576 print.line(` then run \`${channelConfig.binName} daemon start\` again.\n\n`);

2577 }

2578 return;

2579 }

2580 if (getClientServiceStatus().state === "not-installed") {

2581 print.line("\n No background service installed.\n");

2582 print.line(` Run \`${channelConfig.binName} login <code>\` first.\n\n`);

2583 process.exit(1);

2584 }

2585 const res = restartClientService();

2586 if (!res.ok) {