flavor-code@1.3.16: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

flavor-code@1.3.16: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

dist/chunk-S525EOFQ.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = flavor-code@1.3.15 matchedIdentity = npm:Zmxhdm9yLWNvZGU:1.3.15 similarity = 0.957 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-S525EOFQ.jsView on unpkg

1860import { createHash, randomUUID } from "crypto"; L1861: import { execFile } from "child_process"; L1862: import { lstat as lstat2, mkdir as mkdir2, open, readFile as readFile2, readdir as readdir2, rename, rm, writeFile as writeFile2 } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-S525EOFQ.jsView on unpkg · L1860

339} L340: if (["powershell", "pwsh"].includes(name)) { L341: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase()));

High

Shell

Package source references shell execution.

dist/chunk-S525EOFQ.jsView on unpkg · L339

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-S525EOFQ.js: return text.replace(/\bsk-[A-Za-z0-9_-]+\b/g, "[redacted]").replace(/(authorization|api[_ -]?key|token)\s*[:=]\s*\S+/gi, "$1=[redacted]"); import { lstat, mkdir, readdir, readFile, realpath, writeFile } from "fs/promises"; await writeFile(path, `${existing}${separator}${append}${newline}`); authorizationUrl: "http://192.168.1.100:8091/authorize", await writeFile(configPath, JSON.stringify(example, null, 2) + "\n"); await writeFile(path, content); import { lstat as lstat2, mkdir as mkdir2, open, readFile as readFile2, readdir as readdir2, rename, rm, writeFile as writeFile2 } from "fs/promises"; await handle.writ

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-S525EOFQ.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-S525EOFQ.js: import { lstat, mkdir, readdir, readFile, realpath, writeFile } from "fs/promises"; import { copyFileSync, mkdirSync, readdirSync } from "fs"; ...facts.instructionFiles.map((file) => `Follow \`${file}\`.`), await writeFile(path, `${existing}${separator}${append}${newline}`); await writeFile(configPath, JSON.stringify(example, null, 2) + "\n"); else if (entry2.isFile()) copyFileSync(source, target); await writeFile(path, content); import { lstat as lstat2, mkdir as mkdir2, open, readFile as readFile2, readdir as readdir2, rename, rm, writeFile as writeFile2 } from "fs/promises";

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-S525EOFQ.jsView on unpkg

339} L340: if (["powershell", "pwsh"].includes(name)) { L341: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase())); ... L360: function pathStartsWith(root, input) { L361: const normalizeForComparison = (value) => process.platform === "win32" ? value.replaceAll("/", "\\").toLowerCase() : value; L362: const normalizedRoot = normalizeForComparison(root); ... L578: var JAVASCRIPT_LOCKFILES = [ L579: { name: "package-lock.json", manager: "npm" }, L580: { name: "npm[redacted]", manager: "npm" }, ... L767: try { L768: const parsed = JSON.parse(text); L769: if (!isRecord(parsed)) throw new Error("not an object");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-S525EOFQ.jsView on unpkg · L339

dist/astgraph/vendor/tree-sitter.jsView file

2977var func = `(${args}) => { ${body} };`; L2978: ASM_CONSTS[start] = eval(func); L2979: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/astgraph/vendor/tree-sitter.jsView on unpkg · L2977

dist/astgraph/index.jsView file

29async function mod(name) { L30: return import(new URL(`./${name}`, import.meta.url).href); L31: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/astgraph/index.jsView on unpkg · L29

dist/desktop/plugin-worker-entry.jsView file

28const signal = Object.freeze({ aborted: false, reason: undefined, addEventListener() {}, removeEventListener() {}, throwIfAborted() {} }); L29: const cloneJson = (value) => value === undefined ? undefined : JSON.parse(JSON.stringify(value)); L30: const deepFreeze = (value) => {

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/desktop/plugin-worker-entry.jsView on unpkg · L28

dist/desktop/main.jsView file

8819function runShellHandler(descriptor, event, signal) { L8820: return new Promise((resolve41, reject) => { L8821: const child = spawn(descriptor.command, [...descriptor.args ?? []], { L8822: env: { ...process.env, ...descriptor.env }, L8823: shell: false,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/desktop/main.jsView on unpkg · L8819

8858if (code !== 0) { L8859: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8860: return; ... L8862: try { L8863: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8864: } catch (error) { ... L8867: }); L8868: child.stdin.end(JSON.stringify(event)); L8869: }); ... L8873: if (process.platform === "win32") { L8874: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8875: stdio: "ignore",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/desktop/main.jsView on unpkg · L8858

8858Trigger-reachable command-output exfiltration chain: manifest.main -> dist/desktop/main.js L8858: if (code !== 0) { L8859: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8860: return; ... L8862: try { L8863: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8864: } catch (error) { ... L8867: }); L8868: child.stdin.end(JSON.stringify(event)); L8869: }); ... L8873: if (process.platform === "win32") { L8874: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8875: stdio: "ignore",

dist/cli.jsView file

11Cross-file remote execution chain: dist/cli.js spawns dist/desktop/main.js; helper contains network access plus dynamic code execution. L11: // src/launcher.ts L12: import { spawn } from "child_process"; L13: import { realpathSync, readFileSync } from "fs"; ... L46: const runtime = { L47: platform: process.platform, L48: osRelease: release(), ... L63: try { L64: marker = parseMemoryRestartMarker(readFileSync(memoryRestartMarkerPath(process.cwd()), "utf8")); L65: } catch { ... L69: if (resumed !== void 0) { L70: process.stderr.write(`flavor launcher: heap watermark restart, resuming session ${marker.sessionId} L71: `);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.jsView on unpkg · L11

dist/astgraph/vendor/tree-sitter.wasmView file

•path = dist/astgraph/vendor/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/astgraph/vendor/tree-sitter.wasmView on unpkg

Source & flagged code

14 flagged

dist/chunk-S525EOFQ.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = flavor-code@1.3.15 matchedIdentity = npm:Zmxhdm9yLWNvZGU:1.3.15 similarity = 0.957 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-S525EOFQ.jsView on unpkg

1860import { createHash, randomUUID } from "crypto"; L1861: import { execFile } from "child_process"; L1862: import { lstat as lstat2, mkdir as mkdir2, open, readFile as readFile2, readdir as readdir2, rename, rm, writeFile as writeFile2 } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-S525EOFQ.jsView on unpkg · L1860

339} L340: if (["powershell", "pwsh"].includes(name)) { L341: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase()));

High

Shell

Package source references shell execution.

dist/chunk-S525EOFQ.jsView on unpkg · L339

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/chunk-S525EOFQ.js: return text.replace(/\bsk-[A-Za-z0-9_-]+\b/g, "[redacted]").replace(/(authorization|api[_ -]?key|token)\s*[:=]\s*\S+/gi, "$1=[redacted]"); import { lstat, mkdir, readdir, readFile, realpath, writeFile } from "fs/promises"; await writeFile(path, `${existing}${separator}${append}${newline}`); authorizationUrl: "http://192.168.1.100:8091/authorize", await writeFile(configPath, JSON.stringify(example, null, 2) + "\n"); await writeFile(path, content); import { lstat as lstat2, mkdir as mkdir2, open, readFile as readFile2, readdir as readdir2, rename, rm, writeFile as writeFile2 } from "fs/promises"; await handle.writ

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/chunk-S525EOFQ.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-S525EOFQ.js: import { lstat, mkdir, readdir, readFile, realpath, writeFile } from "fs/promises"; import { copyFileSync, mkdirSync, readdirSync } from "fs"; ...facts.instructionFiles.map((file) => `Follow \`${file}\`.`), await writeFile(path, `${existing}${separator}${append}${newline}`); await writeFile(configPath, JSON.stringify(example, null, 2) + "\n"); else if (entry2.isFile()) copyFileSync(source, target); await writeFile(path, content); import { lstat as lstat2, mkdir as mkdir2, open, readFile as readFile2, readdir as readdir2, rename, rm, writeFile as writeFile2 } from "fs/promises";

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-S525EOFQ.jsView on unpkg

339} L340: if (["powershell", "pwsh"].includes(name)) { L341: const flag = args.findIndex((arg) => ["-command", "-c"].includes(arg.toLowerCase())); ... L360: function pathStartsWith(root, input) { L361: const normalizeForComparison = (value) => process.platform === "win32" ? value.replaceAll("/", "\\").toLowerCase() : value; L362: const normalizedRoot = normalizeForComparison(root); ... L578: var JAVASCRIPT_LOCKFILES = [ L579: { name: "package-lock.json", manager: "npm" }, L580: { name: "npm[redacted]", manager: "npm" }, ... L767: try { L768: const parsed = JSON.parse(text); L769: if (!isRecord(parsed)) throw new Error("not an object");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-S525EOFQ.jsView on unpkg · L339

dist/astgraph/vendor/tree-sitter.jsView file

Lines 2957-2997javascript

2957 "env": proxy,

2958 "wasi_snapshot_preview1": proxy

2959 };

2960 function postInstantiation(module, instance) {

2961 updateTableMap(tableBase, metadata.tableSize);

2962

dist/astgraph/index.jsView file

Lines 9-49javascript

9// inside the host's activation timeout; WASM grammars and the database load on

10// first use.

11

12import { existsSync } from "node:fs";

13import { isAbsolute, join, relative } from "node:path";

14

15import { z } from "./vendor/zod/index.js"

dist/desktop/plugin-worker-entry.jsView file

Lines 8-48javascript

8var CONTRIBUTION_NAME_SOURCE = "^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$";

9var data = workerData;

10var port = parentPort;

11if (port === null) throw

dist/desktop/main.jsView file

8819function runShellHandler(descriptor, event, signal) { L8820: return new Promise((resolve41, reject) => { L8821: const child = spawn(descriptor.command, [...descriptor.args ?? []], { L8822: env: { ...process.env, ...descriptor.env }, L8823: shell: false,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/desktop/main.jsView on unpkg · L8819

8858if (code !== 0) { L8859: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8860: return; ... L8862: try { L8863: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8864: } catch (error) { ... L8867: }); L8868: child.stdin.end(JSON.stringify(event)); L8869: }); ... L8873: if (process.platform === "win32") { L8874: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8875: stdio: "ignore",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/desktop/main.jsView on unpkg · L8858

8858Trigger-reachable command-output exfiltration chain: manifest.main -> dist/desktop/main.js L8858: if (code !== 0) { L8859: reject(new Error(`Shell hook exited with code ${code}: ${stderr.trim()}`)); L8860: return; ... L8862: try { L8863: resolve41(HookDecisionSchema.parse(JSON.parse(stdout))); L8864: } catch (error) { ... L8867: }); L8868: child.stdin.end(JSON.stringify(event)); L8869: }); ... L8873: if (process.platform === "win32") { L8874: const killer = spawn("taskkill", ["/pid", String(child.pid), "/t", "/f"], { L8875: stdio: "ignore",

dist/cli.jsView file

11Cross-file remote execution chain: dist/cli.js spawns dist/desktop/main.js; helper contains network access plus dynamic code execution. L11: // src/launcher.ts L12: import { spawn } from "child_process"; L13: import { realpathSync, readFileSync } from "fs"; ... L46: const runtime = { L47: platform: process.platform, L48: osRelease: release(), ... L63: try { L64: marker = parseMemoryRestartMarker(readFileSync(memoryRestartMarkerPath(process.cwd()), "utf8")); L65: } catch { ... L69: if (resumed !== void 0) { L70: process.stderr.write(`flavor launcher: heap watermark restart, resuming session ${marker.sessionId} L71: `);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.jsView on unpkg · L11

dist/astgraph/vendor/tree-sitter.wasmView file

•path = dist/astgraph/vendor/tree-sitter.wasm kind = wasm_module sizeBytes = 205488 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/astgraph/vendor/tree-sitter.wasmView on unpkg