flavor-code@1.3.15: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

flavor-code@1.3.15: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

dist/chunk-F2HMO5Q2.jsView file

27059function wrapAnsi(string, columns, options) { L27060: return String(string).normalize().replaceAll("\r\n", "\n").split("\n").map((line) => exec(expandTabs2(line), columns, options)).join("\n"); L27061: }

High

Child Process

Package source references child process execution.

dist/chunk-F2HMO5Q2.jsView on unpkg · L27059

dist/desktop/main.jsView file

7314} L7315: if (["powershell", "pwsh"].includes(name)) { L7316: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase()));

High

Shell

Package source references shell execution.

dist/desktop/main.jsView on unpkg · L7314

8734function runShellHandler(descriptor, event, signal) { L8735: return new Promise((resolve41, reject) => { L8736: const child = spawn(descriptor.command, [...descriptor.args ?? []], { L8737: env: { ...process.env, ...descriptor.env }, L8738: shell: false,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/desktop/main.jsView on unpkg · L8734

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/desktop/main.js: import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; baseURL: z.string().trim().url().max(2048).refine((value) => { baseURL: z2.string().url().optional(), authorizationUrl: z2.string().url().optional(), await handle.writeFile(data2); baseURL: HttpUrlInput, async function runInteractionManifest(manifest, baseUrl, createDriver) { if (!isLoopbackPreviewUrl(baseUrl)) throw new Error("D2C interaction preview must use a loopback HTTP URL");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/desktop/main.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/desktop/main.js: import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; await handle.writeFile(data2); var DesktopMessageDeliverySchema = z3.enum(["prompt", "steer", "followUp"]); import { copyFile, mkdir as mkdir2, open as open2, readFile, rename as rename2, rm as rm2, stat, unlink } from "fs/promises"; var defaultFileOperations = { rename: rename2, copyFile, unlink }; await handle.writeFile(token, "utf8"); await handle.writeFile(content, "utf8"); await operations.copyFile(temporary, path);

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/desktop/main.jsView on unpkg

8773if (code !== 0) { L8774: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8775: return; ... L8777: try { L8778: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8779: } catch (error) { ... L8782: }); L8783: child.stdin.end(JSON.stringify(event)); L8784: }); ... L8788: if (process.platform === "win32") { L8789: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8790: stdio: "ignore",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/desktop/main.jsView on unpkg · L8773

8773Trigger-reachable command-output exfiltration chain: manifest.main -> dist/desktop/main.js L8773: if (code !== 0) { L8774: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8775: return; ... L8777: try { L8778: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8779: } catch (error) { ... L8782: }); L8783: child.stdin.end(JSON.stringify(event)); L8784: }); ... L8788: if (process.platform === "win32") { L8789: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8790: stdio: "ignore",

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/desktop/main.jsView on unpkg · L8773

4import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; L5: import { basename as basename11, dirname as dirname24, join as join47, resolve as resolve40 } from "path"; L6: import { fileURLToPath as fileURLToPath4 } from "url"; ... L46: try { L47: parsed = JSON.parse(unfenced); L48: } catch { ... L408: } L409: return { ...input, data: data2 }; L410: } ... L1140: const onRenderProcessGone = (_event, details) => { L1141: recordRendererDiagnostic(`renderer process ${details.reason} (exit ${details.exitCode})`); L1142: };

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/desktop/main.jsView on unpkg · L4

dist/astgraph/vendor/tree-sitter.jsView file

2977var func = `(${args}) => { ${body} };`; L2978: ASM_CONSTS[start] = eval(func); L2979: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/astgraph/vendor/tree-sitter.jsView on unpkg · L2977

dist/astgraph/index.jsView file

29async function mod(name) { L30: return import(new URL(`./${name}`, import.meta.url).href); L31: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/astgraph/index.jsView on unpkg · L29

dist/desktop/plugin-worker-entry.jsView file

28const signal = Object.freeze({ aborted: false, reason: undefined, addEventListener() {}, removeEventListener() {}, throwIfAborted() {} }); L29: const cloneJson = (value) => value === undefined ? undefined : JSON.parse(JSON.stringify(value)); L30: const deepFreeze = (value) => {

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/desktop/plugin-worker-entry.jsView on unpkg · L28

dist/cli.jsView file

5Cross-file remote execution chain: dist/cli.js spawns dist/desktop/main.js; helper contains network access plus dynamic code execution. L5: // src/launcher.ts L6: import { spawn } from "child_process"; L7: import { realpathSync } from "fs"; ... L26: const runtime = { L27: platform: process.platform, L28: osRelease: release(), ... L48: child.once("error", reject); L49: child.once("exit", (exitCode) => resolvePromise(exitCode ?? 1)); L50: }); ... L62: } catch (error) { L63: process.stderr.write(`flavor launcher: ${error instanceof Error ? error.message : String(error)} L64: `);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.jsView on unpkg · L5

dist/astgraph/vendor/tree-sitter.wasmView file

•path = dist/astgraph/vendor/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/astgraph/vendor/tree-sitter.wasmView on unpkg

dist/chunk-WB4IJXFT.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = flavor-code@1.2.15 matchedIdentity = npm:Zmxhdm9yLWNvZGU:1.2.15 similarity = 0.921 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-WB4IJXFT.jsView on unpkg

Source & flagged code

14 flagged

dist/chunk-F2HMO5Q2.jsView file

27059function wrapAnsi(string, columns, options) { L27060: return String(string).normalize().replaceAll("\r\n", "\n").split("\n").map((line) => exec(expandTabs2(line), columns, options)).join("\n"); L27061: }

High

Child Process

Package source references child process execution.

dist/chunk-F2HMO5Q2.jsView on unpkg · L27059

dist/desktop/main.jsView file

7314} L7315: if (["powershell", "pwsh"].includes(name)) { L7316: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase()));

High

Shell

Package source references shell execution.

dist/desktop/main.jsView on unpkg · L7314

8734function runShellHandler(descriptor, event, signal) { L8735: return new Promise((resolve41, reject) => { L8736: const child = spawn(descriptor.command, [...descriptor.args ?? []], { L8737: env: { ...process.env, ...descriptor.env }, L8738: shell: false,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/desktop/main.jsView on unpkg · L8734

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/desktop/main.js: import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; baseURL: z.string().trim().url().max(2048).refine((value) => { baseURL: z2.string().url().optional(), authorizationUrl: z2.string().url().optional(), await handle.writeFile(data2); baseURL: HttpUrlInput, async function runInteractionManifest(manifest, baseUrl, createDriver) { if (!isLoopbackPreviewUrl(baseUrl)) throw new Error("D2C interaction preview must use a loopback HTTP URL");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/desktop/main.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/desktop/main.js: import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; await handle.writeFile(data2); var DesktopMessageDeliverySchema = z3.enum(["prompt", "steer", "followUp"]); import { copyFile, mkdir as mkdir2, open as open2, readFile, rename as rename2, rm as rm2, stat, unlink } from "fs/promises"; var defaultFileOperations = { rename: rename2, copyFile, unlink }; await handle.writeFile(token, "utf8"); await handle.writeFile(content, "utf8"); await operations.copyFile(temporary, path);

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/desktop/main.jsView on unpkg

8773if (code !== 0) { L8774: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8775: return; ... L8777: try { L8778: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8779: } catch (error) { ... L8782: }); L8783: child.stdin.end(JSON.stringify(event)); L8784: }); ... L8788: if (process.platform === "win32") { L8789: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8790: stdio: "ignore",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/desktop/main.jsView on unpkg · L8773

8773Trigger-reachable command-output exfiltration chain: manifest.main -> dist/desktop/main.js L8773: if (code !== 0) { L8774: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8775: return; ... L8777: try { L8778: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8779: } catch (error) { ... L8782: }); L8783: child.stdin.end(JSON.stringify(event)); L8784: }); ... L8788: if (process.platform === "win32") { L8789: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8790: stdio: "ignore",

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/desktop/main.jsView on unpkg · L8773

4import { readFile as readFile39, stat as stat18, writeFile as writeFile19 } from "fs/promises"; L5: import { basename as basename11, dirname as dirname24, join as join47, resolve as resolve40 } from "path"; L6: import { fileURLToPath as fileURLToPath4 } from "url"; ... L46: try { L47: parsed = JSON.parse(unfenced); L48: } catch { ... L408: } L409: return { ...input, data: data2 }; L410: } ... L1140: const onRenderProcessGone = (_event, details) => { L1141: recordRendererDiagnostic(`renderer process ${details.reason} (exit ${details.exitCode})`); L1142: };

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/desktop/main.jsView on unpkg · L4

dist/astgraph/vendor/tree-sitter.jsView file

Lines 2957-2997javascript

2957 "env": proxy,

2958 "wasi_snapshot_preview1": proxy

2959 };

2960 function postInstantiation(module, instance) {

2961 updateTableMap(tableBase, metadata.tableSize);

2962

dist/astgraph/index.jsView file

Lines 9-49javascript

9// inside the host's activation timeout; WASM grammars and the database load on

10// first use.

11

12import { existsSync } from "node:fs";

13import { isAbsolute, join, relative } from "node:path";

14

15import { z } from "./vendor/zod/index.js"

dist/desktop/plugin-worker-entry.jsView file

Lines 8-48javascript

8var CONTRIBUTION_NAME_SOURCE = "^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$";

9var data = workerData;

10var port = parentPort;

11if (port === null) throw

dist/cli.jsView file

5Cross-file remote execution chain: dist/cli.js spawns dist/desktop/main.js; helper contains network access plus dynamic code execution. L5: // src/launcher.ts L6: import { spawn } from "child_process"; L7: import { realpathSync } from "fs"; ... L26: const runtime = { L27: platform: process.platform, L28: osRelease: release(), ... L48: child.once("error", reject); L49: child.once("exit", (exitCode) => resolvePromise(exitCode ?? 1)); L50: }); ... L62: } catch (error) { L63: process.stderr.write(`flavor launcher: ${error instanceof Error ? error.message : String(error)} L64: `);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.jsView on unpkg · L5

dist/astgraph/vendor/tree-sitter.wasmView file

•path = dist/astgraph/vendor/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/astgraph/vendor/tree-sitter.wasmView on unpkg

dist/chunk-WB4IJXFT.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = flavor-code@1.2.15 matchedIdentity = npm:Zmxhdm9yLWNvZGU:1.2.15 similarity = 0.921 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-WB4IJXFT.jsView on unpkg