Loading npm security reports…

haansi@0.1.44: Suspicious npm security report (Warn) | LPM Firewall

registry / haansi / 0.1.44

haansi@0.1.44

Haansi CLI - Session collector and MCP server for Claude Code & OpenAI Codex

AI Security Review

scanned 11d ago · by lpm-firewall-ai

No automatic attack was identified. The explicit collector can send agent-session content and its bearer token to an operator-configured endpoint.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A user runs the collect command, or a user-configured daemon runs collection.

Impact

An unrestricted endpoint override could receive the token and collected session data.

Mechanism

The collector obtains HAANSI_API_URL and a stored or environment token, reads session files, and posts compressed content with that token.

AI rationale

The configurable destination combined with forwarding an existing bearer token and collected sessions is a conditional credential-exposure capability. There is no evidence of covert install-time execution or a hidden default recipient.

Evidence

dist/haansi.js~/.haansi/credentials.json

Network endpoints1

api.haansi.co/api/v1/capture/sessions/raw

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest exposes a CLI and has only build and prepublish scripts; it has no install lifecycle hook.

Source & flagged code

10 flagged · loading source

dist/haansi.jsView file

41SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/haansi.jsView on unpkg · L41

•Trigger-reachable chain: manifest.bin -> dist/haansi.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/haansi.jsView on unpkg

70try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

High

Child Process

Package source references child process execution.

dist/haansi.jsView on unpkg · L70

11779if (error2) { L11780: if (command2.name === "exec" && error2.message === "EXECABORT Transaction discarded because of previous errors.") { L11781: continue;

High

Shell

Package source references shell execution.

dist/haansi.jsView on unpkg · L11779

55714site.name = fn.name; L55715: var deprecatedfn = new Function( L55716: "fn",

High

Eval

Package source references dynamic code evaluation.

dist/haansi.jsView on unpkg · L55714

41Detached bundled service listener: dist/haansi.js launches a Node helper and exposes a broad-bound HTTP listener. L41: SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/haansi.jsView on unpkg · L41

41Trigger-reachable persistence chain: manifest.bin -> dist/haansi.js L41: SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/haansi.jsView on unpkg · L41

11}; L12: var __commonJS = (cb, mod) => function __require() { L13: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/haansi.jsView on unpkg · L11

41SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/haansi.jsView on unpkg · L41

41SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/haansi.jsView on unpkg · L41

Source & flagged code

10 flagged

dist/haansi.jsView file

41SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/haansi.jsView on unpkg · L41

•Trigger-reachable chain: manifest.bin -> dist/haansi.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/haansi.jsView on unpkg

70try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

High

Child Process

Package source references child process execution.

dist/haansi.jsView on unpkg · L70

11779if (error2) { L11780: if (command2.name === "exec" && error2.message === "EXECABORT Transaction discarded because of previous errors.") { L11781: continue;

High

Shell

Package source references shell execution.

dist/haansi.jsView on unpkg · L11779

55714site.name = fn.name; L55715: var deprecatedfn = new Function( L55716: "fn",

High

Eval

Package source references dynamic code evaluation.

dist/haansi.jsView on unpkg · L55714

41Detached bundled service listener: dist/haansi.js launches a Node helper and exposes a broad-bound HTTP listener. L41: SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/haansi.jsView on unpkg · L41

41Trigger-reachable persistence chain: manifest.bin -> dist/haansi.js L41: SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/haansi.jsView on unpkg · L41

11}; L12: var __commonJS = (cb, mod) => function __require() { L13: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/haansi.jsView on unpkg · L11

41SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/haansi.jsView on unpkg · L41

41SERVICE_URL_DEFAULTS = Object.freeze({ L42: haansiApiBaseUrl: "https://api.haansi.co", L43: localApiBaseUrl: "http://localhost:3000", ... L55: function apiUrl() { L56: return process.env.HAANSI_API_URL ?? DEFAULT_API_URL; L57: } ... L61: try { L62: const creds = JSON.parse((0, import_node_fs.readFileSync)(CREDENTIALS_FILE, "utf-8")); L63: if (typeof creds.token === "string" && creds.token) return creds.token; ... L70: try { L71: const binPath = (0, import_node_child_process.execSync)("which haansi", { encoding: "utf-8" }).trim(); L72: if (binPath) return binPath;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/haansi.jsView on unpkg · L41