registry / fleetlens / 0.16.1

fleetlens@0.16.1

⚠ Under review

fleetlens — local-only dashboard and usage tracker for Claude Code sessions and agent fleets

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 211 file(s), 2.64 MB of source, external domains: api.anthropic.com, api.z.ai, auth.x.ai, cli-chat-proxy.grok.com, example.com, github.com, keepachangelog.com, registry.npmjs.org, team.example.com, www.apple.com, z.ai

Source & flagged code

8 flagged

app/apps/web/app/api/menubar/route.tsView file

Lines 1-21typescript

1import { execFile } from "node:child_process";

2import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

app/apps/web/app/api/menubar/route.tsView on unpkg · L1

3import { readMenubarState } from "@/lib/menubar-data";

5export const runtime = "nodejs";

6export const dynamic = "force-dynamic";

8const execFileAsync = promisify(execFile);

10type Action = "install" | "open" | "uninstall";

12function isValidAction(v: unknown): v is Action {

13 return v === "install" || v === "open" || v === "uninstall";

14}

16export async function GET(): Promise<Response> {

17 return Response.json(readMenubarState());

18}

20export async function POST(req: Request): Promise<Response> {

21 const bin = process.env.FLEETLENS_CLI_BIN;

app/apps/web/app/api/pdf/[key]/route.tsView file

Lines 63-103typescript

64 try {

65 await renderToPdf(chrome, targetUrl, tmpPath, profileDir);

66 const bytes = await fs.readFile(tmpPath);

67 const today = new Date().toISOString

dist/index.jsView file

5721const dataDir = join3(homedir2(), ".claude", "projects"); L5722: const child = spawn(process.execPath, [serverJs], { L5723: detached: true, ... L5725: env: { L5726: ...process.env, L5727: PORT: String(port), ... L5736: writePid(PID_FILE, pid, port, onDiskVersion()); L5737: await waitForHealth(`http://localhost:${port}`, 3e4); L5738: return { pid, port };

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L5721

13import { readFileSync, writeFileSync, mkdirSync, unlinkSync } from "node:fs"; L14: import { execFileSync } from "node:child_process"; L15: import { dirname } from "node:path"; ... L943: "<command-name>", L944: "<local-command-stdout>", L945: "<local-command-caveat>", ... L990: try { L991: const parsed = JSON.parse(body); L992: if (parsed.type === "idle_notification") ... L1512: function walkBoundary(start2) { L1513: const home = realpathOrSelf(homedir()); L1514: return start2 === home || start2.startsWith(`${home}/`) ? home : void 0;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L13

6038try { L6039: execSync(`npm install -g ${PACKAGE_NAME}@latest --prefer-online`, { L6040: stdio: "pipe",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.js

dist/daemon-worker.jsView file

875Cross-file remote execution chain: dist/daemon-worker.js spawns dist/index.js; helper contains network access plus dynamic code execution. L875: "<command-name>", L876: "<local-command-stdout>", L877: "<local-command-caveat>", ... L922: try { L923: const parsed = JSON.parse(body); L924: if (parsed.type === "idle_notification") ... L1488: const owner = segs.slice(0, -1).join("/"); L1489: return { host, owner, name, url, webUrl: `https://${host}/${owner}/${name}` }; L1490: } ... L1654: toTeammateId, L1655: body: msg.body, L1656: kind: "message"

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/daemon-worker.jsView on unpkg · L875

app/apps/web/lib/agent/run.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = fleetlens@0.15.4 matchedIdentity = npm:ZmxlZXRsZW5z:0.15.4 similarity = 0.858 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/apps/web/lib/agent/run.tsView on unpkg

Source & flagged code

8 flagged · loading source

app/apps/web/app/api/menubar/route.tsView file

1import { execFile } from "node:child_process"; L2: import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

app/apps/web/app/api/menubar/route.tsView on unpkg · L1

app/apps/web/app/api/pdf/[key]/route.tsView file

83L84: function digestExists(match: RegExpExecArray): boolean { L85: const monday = match[2];

High

Shell

Package source references shell execution.

app/apps/web/app/api/pdf/[key]/route.tsView on unpkg · L83

dist/index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L5721

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L13

6038try { L6039: execSync(`npm install -g ${PACKAGE_NAME}@latest --prefer-online`, { L6040: stdio: "pipe",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L6038

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L13

dist/daemon-worker.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/daemon-worker.jsView on unpkg · L875

app/apps/web/lib/agent/run.tsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/apps/web/lib/agent/run.tsView on unpkg

Findings

1 Critical6 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltaapp/apps/web/lib/agent/run.ts

HighChild Processapp/apps/web/app/api/menubar/route.ts

HighShellapp/apps/web/app/api/pdf/[key]/route.ts

HighSame File Env Network Executiondist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighCross File Remote Execution Contextdist/daemon-worker.js

HighRuntime Package Installdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

app/apps/web/app/api/menubar/route.tsView file

Lines 1-21typescript

1import { execFile } from "node:child_process";

2import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

app/apps/web/app/api/menubar/route.tsView on unpkg · L1

3import { readMenubarState } from "@/lib/menubar-data";

5export const runtime = "nodejs";

6export const dynamic = "force-dynamic";

8const execFileAsync = promisify(execFile);

10type Action = "install" | "open" | "uninstall";

12function isValidAction(v: unknown): v is Action {

13 return v === "install" || v === "open" || v === "uninstall";

14}

16export async function GET(): Promise<Response> {

17 return Response.json(readMenubarState());

18}

20export async function POST(req: Request): Promise<Response> {

21 const bin = process.env.FLEETLENS_CLI_BIN;

app/apps/web/app/api/pdf/[key]/route.tsView file

Lines 63-103typescript

64 try {

65 await renderToPdf(chrome, targetUrl, tmpPath, profileDir);

66 const bytes = await fs.readFile(tmpPath);

67 const today = new Date().toISOString

dist/index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L5721

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L13

6038try { L6039: execSync(`npm install -g ${PACKAGE_NAME}@latest --prefer-online`, { L6040: stdio: "pipe",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.js

dist/daemon-worker.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/daemon-worker.jsView on unpkg · L875

app/apps/web/lib/agent/run.tsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/apps/web/lib/agent/run.tsView on unpkg