greprag@5.83.0: Suspicious npm security report (Warn)

Loading npm security reports…

greprag@5.83.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

22 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/deploy-gate.jsView file

63exports.evaluateDeployGate = evaluateDeployGate; L64: const fs = __importStar(require("fs")); L65: const path = __importStar(require("path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/deploy-gate.jsView on unpkg · L63

dist/commands/state-trigger.jsView file

84const TRIGRAM_MAX = 20; L85: const ERROR_RE = /\b(error|failed|exception|traceback|exit code [1-9]|not found|no such)\b/i; L86: // ---------- Transcript → turns ---------------------------------------------- ... L184: try { L185: rec = JSON.parse(trimmed); L186: } ... L451: // family (above) and names the flavor (below) — an invocation *mentioning* L452: // fnm/node_modules/package.json is not evidence that fnm/the workspace broke L453: // (`fnm exec … | grep -i error` classified as fnm-node-bootstrap off its own

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/state-trigger.jsView on unpkg · L84

dist/commands/grok-spawn.jsView file

5Trigger-reachable persistence chain: manifest.main -> dist/index.js -> dist/commands/grok-spawn.js L5: * children when the tool call returns. The surviving launch is a scheduled L6: * task (`schtasks /Create /IT` then `/Run`) that `start`s a new `cmd /k` L7: * window running grok.exe — a visible command-prompt bootloader outside the ... L50: const path = __importStar(require("path")); L51: const child_process_1 = require("child_process"); L52: function winQuote(value) { ... L55: function resolveGrokExe() { L56: const home = os.homedir(); L57: const named = process.platform === 'win32' ? 'grok.exe' : 'grok'; L58: const pinned = path.join(home, '.grok', 'bin', named); ... L136: console.error(` ${cmd.map(a => /\s/.test(a) ? JSON.stringify(a) : a).join(' ')}`); L137: process.exitCode = 1;

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/commands/grok-spawn.jsView on unpkg · L5

5* children when the tool call returns. The surviving launch is a scheduled L6: * task (`schtasks /Create /IT` then `/Run`) that `start`s a new `cmd /k` L7: * window running grok.exe — a visible command-prompt bootloader outside the ... L50: const path = __importStar(require("path")); L51: const child_process_1 = require("child_process"); L52: function winQuote(value) { ... L55: function resolveGrokExe() { L56: const home = os.homedir(); L57: const named = process.platform === 'win32' ? 'grok.exe' : 'grok'; L58: const pinned = path.join(home, '.grok', 'bin', named); ... L136: console.error(` ${cmd.map(a => /\s/.test(a) ? JSON.stringify(a) : a).join(' ')}`); L137: process.exitCode = 1;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/grok-spawn.jsView on unpkg · L5

scripts/postinstall.jsView file

10// L11: // The installed Claude chip-spawn doc (~/.claude/docs/chip-spawn.md) is retired: L12: // `greprag load chip-spawn` serves that doctrine from the package and cannot ... L27: name: 'Claude Code', L28: agentDir: path.join(home, '.claude'), L29: skillsTarget: path.join(home, '.claude', 'skills'), L30: }, ... L32: name: 'Codex', L33: agentDir: path.join(home, '.codex'), L34: skillsTarget: path.join(home, '.codex', 'skills'), L35: }, ... L38: function copyDir(src, dest) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L10

dist/opencode-plugin.bundle.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: } } return { refreshed, blocked }; } var debug_log_path = path13.join(os5.homedir(), ".greprag", "opencode-plugin-debug.log"); var _debuglogready = false; function dloginit() { if (_debuglogready) return; _debuglogready = true; try { fs12.writefilesync(debug_log_path, ""); } catch { } } function dlog(msg) { dloginit(); const line = `[${( new date()).toisostring()}] [greprag-memory] ${msg} `; try { fs12.appendfilesync(debug_log_path, line); } catch { } } dlog(`module top reached: pid=${process.pid} argv0=${process.argv[0]} distpath=${__filename}`); var api_url = "https://api.greprag.com"; function loadenvfile(filepath2) {

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/opencode-plugin.bundle.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/opencode-plugin.bundle.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/opencode-plugin.bundle.jsView on unpkg

dist/commands/init.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ) fs.mkdirsync(dir, { recursive: true }); const body = object.entries(existing) .map(([k, v]) => `${k}=${v}`) .join('\n') + '\n'; fs.writefilesync(file, body); } function readenvfile(file) { const out = {}; try { const raw = fs.readfilesync(file, 'utf-8'); for (const line of raw.split(/\r?\n/)) { const trimmed = line.trim(); if (!trimmed || trimmed.startswith('#')) continue; const idx = trimmed.indexof('='); if (idx < 1) continue; let value = trimmed.slice(idx + 1).trim(); if ((value.startswith('"') && value.endswith('"')

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/init.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = greprag@5.78.6 matchedPath = dist/commands/init.js matchedIdentity = npm:Z3JlcHJhZw:5.78.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/init.jsView on unpkg

dist/archive/page-renderer.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/archive/page-renderer.js#virtual:normalized:round1View on unpkg

dist/commands/app.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/app.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/app.jsView on unpkg

dist/commands/opencode-watch.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/opencode-watch.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/opencode-watch.jsView on unpkg

dist/commands/watcher-registry.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/watcher-registry.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/watcher-registry.jsView on unpkg

dist/ccr-store.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/ccr-store.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/ccr-store.jsView on unpkg

dist/commands/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/doctor.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/doctor.jsView on unpkg

dist/commands/fix.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/fix.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/fix.jsView on unpkg

dist/commands/inbox-watch-supervisor.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/inbox-watch-supervisor.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/inbox-watch-supervisor.jsView on unpkg

dist/commands/inbox-watch.jsView file

•matchType = token_shingles matchedPackage = greprag@5.78.3 matchedPath = dist/commands/inbox-watch.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/inbox-watch.jsView on unpkg

dist/commands/mechanic.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/mechanic.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/mechanic.jsView on unpkg

dist/commands/opencode-relay.jsView file

•matchType = normalized_sha256 matchedPackage = greprag@5.78.3 matchedPath = dist/commands/opencode-relay.js matchedIdentity = npm:Z3JlcHJhZw:5.78.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/opencode-relay.jsView on unpkg

Source & flagged code

22 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/deploy-gate.jsView file

63exports.evaluateDeployGate = evaluateDeployGate; L64: const fs = __importStar(require("fs")); L65: const path = __importStar(require("path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/deploy-gate.jsView on unpkg · L63

dist/commands/state-trigger.jsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/state-trigger.jsView on unpkg · L84

dist/commands/grok-spawn.jsView file

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/commands/grok-spawn.jsView on unpkg · L5

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/grok-spawn.jsView on unpkg · L5

scripts/postinstall.jsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L10

dist/opencode-plugin.bundle.jsView file

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/opencode-plugin.bundle.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/opencode-plugin.bundle.jsView on unpkg

dist/commands/init.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/init.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/init.jsView on unpkg

dist/archive/page-renderer.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/archive/page-renderer.js#virtual:normalized:round1View on unpkg

dist/commands/app.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/app.jsView on unpkg

dist/commands/opencode-watch.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/opencode-watch.jsView on unpkg

dist/commands/watcher-registry.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/watcher-registry.jsView on unpkg

dist/ccr-store.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/ccr-store.jsView on unpkg

dist/commands/doctor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/doctor.jsView on unpkg

dist/commands/fix.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/fix.jsView on unpkg

dist/commands/inbox-watch-supervisor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/inbox-watch-supervisor.jsView on unpkg

dist/commands/inbox-watch.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/inbox-watch.jsView on unpkg

dist/commands/mechanic.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/mechanic.jsView on unpkg

dist/commands/opencode-relay.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/opencode-relay.jsView on unpkg

Source & flagged code

22 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/deploy-gate.jsView file

63exports.evaluateDeployGate = evaluateDeployGate; L64: const fs = __importStar(require("fs")); L65: const path = __importStar(require("path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/deploy-gate.jsView on unpkg · L63

dist/commands/state-trigger.jsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/state-trigger.jsView on unpkg · L84

dist/commands/grok-spawn.jsView file

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/commands/grok-spawn.jsView on unpkg · L5

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/grok-spawn.jsView on unpkg · L5

scripts/postinstall.jsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L10

dist/opencode-plugin.bundle.jsView file

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/opencode-plugin.bundle.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/opencode-plugin.bundle.jsView on unpkg

dist/commands/init.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/init.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/init.jsView on unpkg

dist/archive/page-renderer.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 28

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/archive/page-renderer.js#virtual:normalized:round1View on unpkg

dist/commands/app.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/app.jsView on unpkg

dist/commands/opencode-watch.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/opencode-watch.jsView on unpkg

dist/commands/watcher-registry.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/watcher-registry.jsView on unpkg

dist/ccr-store.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/ccr-store.jsView on unpkg

dist/commands/doctor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/doctor.jsView on unpkg

dist/commands/fix.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/fix.jsView on unpkg

dist/commands/inbox-watch-supervisor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/inbox-watch-supervisor.jsView on unpkg

dist/commands/inbox-watch.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/inbox-watch.jsView on unpkg

dist/commands/mechanic.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/mechanic.jsView on unpkg

dist/commands/opencode-relay.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/commands/opencode-relay.jsView on unpkg

greprag@5.83.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code