grix-connector@4.3.2: Suspicious npm security report (Warn)

Loading npm security reports…

grix-connector@4.3.2: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged

package.jsonView file

Lines 6-46json

6 "main": "dist/index.js",

7 "bin": {

8 "grix-connector": "dist/grix.js"

9 },

10 "files": [

11 "NOTICE",

12 "LICENSE",

13 "dist",

14 "!dist/**/*.map",

15 "!dist/**/*.d.ts",

16 "!dist/**/*.ts",

17 "openclaw-plugin",

18 "scripts/install-guardian.mjs",

19 "scripts/upgrade-guardian.mjs",

20 "scripts/analyze-audit-replays.mjs",

21 "scripts/install-guardian.sh",

22 "scripts/upgrade-guardian.sh",

23 "openclaw.plugin.json"

24 ],

25 "scripts": {

26 "postinstall": "node scripts/install-guardian.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L26

27 "prepublishOnly": "npm run build:all",

28 "build": "npm run check:isolation && node -e \"const fs=require('fs'); for(const dir of ['dist/default-skills','dist/kimi-plugins']) fs.rmSync(dir,{recursive:true,force:true})\" && tsc && node -e \"const fs=require('fs'); for(const dir of ['default-skills','kimi-plugins']) fs.cpSync('src/'+dir,'dist/'+dir,{recursive:true,filter:s=>!s.endsWith('.ts')}); fs.cpSync('src/adapter/deepseek-harness/grix-jsonrpc.cordis.yml','dist/adapter/deepseek-harness/grix-jsonrpc.cordis.yml')\" && node scripts/build-dsh-bridge.mjs && node -e \"require('fs').cpSync('src/core/proxy/hermes-profile-relay.py','dist ...

29 "check:isolation": "node scripts/check-adapter-isolation.mjs",

30 "build:plugin": "node scripts/build-plugin.mjs",

31 "build:all": "npm run build && node scripts/minify-dist.mjs && npm run build:plugin",

32 "dev": "npm run build && node dist/grix.js",

33 "test": "node --experimental-vm-modules node_modules/vitest/vitest.mjs run",

34 "test:watch": "node --experimental-vm-modules node_modules/vitest/vitest.mjs",

35 "test:e2e": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e",

36 "test:e2e:smoke": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/smoke.test.ts",

37 "test:e2e:direct-relay": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/direct-relay-live.test.ts",

38 "test:e2e:relay": "node scripts/relay-e2e.mjs",

39 "test:e2e:codex-developer-instructions": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/codex-developer-instructions-protocol.test.ts",

40 "test:e2e:claude-audit": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/claude-audit-replay.test.ts",

41 "test:e2e:codex-audit": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/codex-audit-replay.test.ts",

42 "test:e2e:native-audit": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/native-event-audit-replay.test.ts",

43 "test:e2e:kimi-audit": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/native-event-audit-replay.test.ts -t \"kimi:\"",

44 "test:e2e:kimi-question": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/kimi-acp-features.test.ts -t \"问答卡文本回执\"",

45 "test:e2e:pi-audit": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/pi-audit-replay.test.ts",

46 "test:e2e:reasonix-audit": "RUN_REAL_AGENT_E2E=1 node --experimental-vm-modules node_modules/vitest/vitest.mjs run tests/e2e/reasonix-audit-replay.test.ts",

Long lines were clipped for display.

openclaw-plugin/index.jsView file

Lines 2292-2332javascript

2292 warn(tag, msg, ...args) {

2293 if (!shouldLog(tag, "warn")) return;

2294 const line = formatLine("warn"

dist/core/mcp/internal-api-server.jsView file

Lines 1-2javascript

1import B from"node:http";import{randomBytes as M}from"node:crypto";import{log as h}from"../log/index.js";import{PHASE1_INVOKE_ACTIONS as C,TOOLS as O,toolCallToInvoke as P}from

dist/core/proxy/crypto/certificate.jsView file

Lines 1-6javascript

1import{createHash as x,createPrivateKey as G,createPublicKey as V,generateKeyPairSync as I,sign as z}from"node:crypto";import{existsSync as b}from"node:fs";import{mkdir as J,readFile as

dist/core/upgrade/upgrade-checker.jsView file

Lines 1-2javascript

1import{closeSync as U,existsSync as y,mkdirSync as N,openSync as Q,readFileSync as A,realpathSync as ee,renameSync as te,writeFileSync as ae}from"node:fs";import{join as f,dirname as re}from

dist/core/provider-quota/kiro.jsView file

Lines 1-2javascript

1import{readFile as _}from"node:fs/promises";import{existsSync as m}from"node:fs";import{homedir as h}from"node:os";import{join as u}from"node:path";

dist/core/installer/npm-registry.jsView file

Lines 1-5javascript

1import{execFile as w,execFileSync as $}from"node:child_process";import{existsSync as O}from"node:fs";import{dirname as T,join as y}from"node:path";import{promisify as

dist/adapter/claude/claude-adapter.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = grix-connector@4.1.0 matchedIdentity = npm:Z3JpeC1jb25uZWN0b3I:4.1.0 similarity = 0.775 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/adapter/claude/claude-adapter.jsView on unpkg

1Cross-file remote execution chain: dist/adapter/claude/claude-adapter.js spawns openclaw-plugin/index.js; helper contains network access plus dynamic code execution. L1: import{spawn as ee,spawnSync as te,execSync as ie,execFile as Qe}from"node:child_process";import{promisify as Ye}from"node:util";import{randomUUID as G}from"node:crypto";import{kil... L2: `):"No skills found",data:n}}catch(n){return{status:"failed",message:`Failed to scan skills: ${n instanceof Error?n.message:n}`}}if(!this.claudeProcess&&!this.claudePty)if(e==="com... L3: `)}finally{nt(r)}}else this.claudeProcess?.stdin?.write(`${s} ... L5: `)}extractSingleTurnDelta(e){const t=e.trim();if(!t)return null;let i;try{i=JSON.parse(t)}catch{return o.warn("claude-adapter",`Single-turn fallback: dropping non-JSON stdout noise...

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/adapter/claude/claude-adapter.jsView on unpkg · L1

dist/adapter/codex/codex-bridge.jsView file

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js -> dist/adapter/codex/index.js -> dist/adapter/codex/codex-bridge.js L1: import{execFileSync as fe}from"node:child_process";import{createInterface as me}from"node:readline";import{EventEmitter as K}from"node:events";import{stat as Z}from"node:fs/promise... L2: \u2026(truncated)`,re=80,tt=120*1e3,it=60*1e3,st=300*1e3,nt=H("GRIX_CODEX_DELTA_COALESCE_MS",1e3),rt=H("GRIX_CODEX_DELTA_COALESCE_CHARS",4096),ot=[{id:"gpt-5.3-codex",displayName:"... L3: `)})}catch{return!1}}getStatus(){return{alive:this.alive,busy:this.currentTurnId!==null||this.compacting,sessions:this.threadId?1:0}}getActiveEventIds(){return this.activeEventId?[...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/adapter/codex/codex-bridge.jsView on unpkg · L1

dist/core/proxy/hermes-profile-relay.pyView file

•path = dist/core/proxy/hermes-profile-relay.py kind = build_helper sizeBytes = 21893 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/core/proxy/hermes-profile-relay.pyView on unpkg

dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgzView file

•path = dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgz kind = high_entropy_blob sizeBytes = 22532 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgzView on unpkg

•path = dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgz kind = compressed_blob sizeBytes = 22532 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgzView on unpkg

•path = dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgz kind = nested_archive_needs_inspection sizeBytes = 22532 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

dist/assets/dsh-bridge/grix-dsh-bridge-4.3.2.tgzView on unpkg

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-guardian.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

openclaw-plugin/index.jsView file

2312// src/audit/producer/ipc-audit-producer.ts L2313: import { fork } from "node:child_process"; L2314: import { randomUUID as randomUUID2 } from "node:crypto";

High

Child Process

Package source references child process execution.

openclaw-plugin/index.jsView on unpkg · L2312

3081} L3082: function buildExecApprovalResolveArgv(params) { L3083: const cliArgvPrefix = params.cliArgvPrefix && params.cliArgvPrefix.length > 0 ? params.cliArgvPrefix : resolveOpenClawCliArgvPrefix();

High

Shell

Package source references shell execution.

openclaw-plugin/index.jsView on unpkg · L3081

dist/core/mcp/internal-api-server.jsView file

1import B from"node:http";import{randomBytes as M}from"node:crypto";import{log as h}from"../log/index.js";import{PHASE1_INVOKE_ACTIONS as C,TOOLS as O,toolCallToInvoke as P}from"./t...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/mcp/internal-api-server.jsView on unpkg · L1

dist/core/proxy/crypto/certificate.jsView file

1import{createHash as x,createPrivateKey as G,createPublicKey as V,generateKeyPairSync as I,sign as z}from"node:crypto";import{existsSync as b}from"node:fs";import{mkdir as J,readFi... L2: `)??"";return`-----BEGIN ${e}-----

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/proxy/crypto/certificate.jsView on unpkg · L1

dist/core/upgrade/upgrade-checker.jsView file

1import{closeSync as U,existsSync as y,mkdirSync as N,openSync as Q,readFileSync as A,realpathSync as ee,renameSync as te,writeFileSync as ae}from"node:fs";import{join as f,dirname ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/core/upgrade/upgrade-checker.jsView on unpkg · L1

dist/core/provider-quota/kiro.jsView file

1import{readFile as _}from"node:fs/promises";import{existsSync as m}from"node:fs";import{homedir as h}from"node:os";import{join as u}from"node:path";import{execFile as I}from"node:c...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/core/provider-quota/kiro.jsView on unpkg · L1

dist/core/installer/npm-registry.jsView file

1import{execFile as w,execFileSync as $}from"node:child_process";import{existsSync as O}from"node:fs";import{dirname as T,join as y}from"node:path";import{promisify as k}from"node:u... L2: [${n.label}] ${c}

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/core/installer/npm-registry.jsView on unpkg · L1