handoff-relay: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

handoff-relay: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/index.jsView file

475// src/notifications.ts L476: import { spawn } from "child_process"; L477: import { platform as currentPlatform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L475

542if (platform === "win32") { L543: await run("powershell.exe", [ L544: "-NoProfile",

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L542

•matchType = previous_version_dangerous_delta matchedPackage = handoff-relay@0.1.5 matchedIdentity = npm:aGFuZG9mZi1yZWxheQ:0.1.5 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

dist/cli.jsView file

4591} L4592: if (process.env.HANDOFF_TEST_SKIP_SERVER === "1") { L4593: return { status: "skipped", serverUrl: "local-db" }; ... L4599: const port = await findAvailablePort({ host: input.host, preferredPort: input.port }); L4600: const serverUrl = `http://${input.host === "0.0.0.0" ? "127.0.0.1" : input.host}:${port}`; L4601: const logPath = join(input.home, "logs", `server-${port}.log`); ... L4604: const serverId = `srv_${randomUUID4()}`; L4605: const child = spawn( L4606: process.execPath,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L4591

9Detached bundled service listener: dist/cli.js launches a Node helper and exposes a broad-bound HTTP listener. L9: import { createInterface } from "readline/promises"; L10: import { stdin as defaultInput, stderr as defaultOutput } from "process"; L11: ... L33: async function confirmLocalApproval(input) { L34: if (process.env.AGENT_RELAY_ASSUME_HUMAN_APPROVAL === "1" && process.env.NODE_ENV === "test") { L35: return; ... L44: const phrase = `approve ${input.action} ${input.packetId}`; L45: defaultOutput.write( L46: `Handoff local approval required. ... L448: try { L449: response = await fetch(`${this.serverUrl}${path}`, { L450: method: options.method ?? "GET",

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/cli.jsView on unpkg · L9

Source & flagged code

5 flagged

dist/index.jsView file

Lines 455-495javascript

455 return `${prefix}_${randomUUID2()}`;

456}

457function createToken(prefix = "relay") {

458 return `${prefix}_${randomBytes(24).toString("base64url")}`;

459}

460function hashToken(token) {

461 return createHash2("sha256").update(token).digest("hex");

462}

463function normalizeHandle(handle) {

464 const trimmed = handle.trim().replace(/^@/, "").toLowerCase();

465 if (!/^[a-z0-9][a-z0-9_-]{1,31}$/.test(trimmed)) {

466 throw relayError(

467 "INVALID_INPUT",

468 "Handle must start with a letter or number and contain only letters, numbers, _, or -",

469 400

470 );

471 }

472 return trimmed;

473}

474

475// src/notifications.ts

476import { spawn } from "child_process";

477import { platform as currentPlatform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L475

478var notificationActions = {

479 ask: "is asking for help",

480 clarification: "requested clarification",

481 reply: "replied",

482 share: "shared context"

483};

484function formatNotification(summary) {

485 const sender = summary.sender_handle.startsWith("@") ? summary.sender_handle : `@${summary.sender_handle}`;

486 const action = notificationActions[summary.packet_type];

487 return `${sender} ${action} on ${summary.title} in ${summary.project}. Review packet?`;

488}

489function createNotificationDispatcher(input = {}) {

490 return async (message, summary) => {

491 input.writeTerminal?.(message, summary);

492 const deliveries = [];

493 const failures = [];

494 let outOfBandDelivered = false;

495 if (input.desktop) {

Lines 522-562javascript

522 };

523}

524async function sendDesktopNotification(summary, input = {}) {

525 const platform = input.platform ?? currentPlatform();

526 const

•matchType = previous_version_dangerous_delta matchedPackage = handoff-relay@0.1.5 matchedIdentity = npm:aGFuZG9mZi1yZWxheQ:0.1.5 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

dist/cli.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2

3// src/cli.ts

4import { realpathSync } from "fs";

5import { fileURLToPath as fileURLToPath3 } from "url";

6import { Command, CommanderError } from "commander"