keyring-agent-core@0.2.58: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

keyring-agent-core@0.2.58: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/index.native.jsView file

667L668: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th... L669:

High

Child Process

Package source references child process execution.

dist/index.native.jsView on unpkg · L667

667L668: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th... L669:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.native.jsView on unpkg · L667

1if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol... L2: "use strict";var pre=Object.create;var Ug=Object.defineProperty;var fre=Object.getOwnPropertyDescriptor;var hre=Object.getOwnPropertyNames;var mre=Object.getPrototypeOf,gre=Object.... L3: L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/ L5: `);super(n);h(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},BO=class extends qo{get is_bubble_up(){return!0}},Cce=class extends qo{constructor(t,e){super(t,e),this.na... L6: L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/ L8: `,t}var Qy=Qde.ns.sub("error"),QS=class extends Qy.brand(Err

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/index.native.jsView on unpkg · L1

1if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol... L2: "use strict";var pre=Object.create;var Ug=Object.defineProperty;var fre=Object.getOwnPropertyDescriptor;var hre=Object.getOwnPropertyNames;var mre=Object.getPrototypeOf,gre=Object.... L3: L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/ L5: `);super(n);h(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},BO=class extends qo{get is_bubble_up(){return!0}},Cce=class extends qo{constructor(t,e){super(t,e),this.na... L6: L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/ L8: `,t}var Qy=Qde.ns.sub("error"),QS=class extends Qy.brand(Err

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.native.jsView on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.native.jsView on unpkg

Source & flagged code

5 flagged

dist/index.native.jsView file

667L668: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th... L669:

High

Child Process

Package source references child process execution.

dist/index.native.jsView on unpkg · L667

667L668: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th... L669:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.native.jsView on unpkg · L667

1if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol... L2: "use strict";var pre=Object.create;var Ug=Object.defineProperty;var fre=Object.getOwnPropertyDescriptor;var hre=Object.getOwnPropertyNames;var mre=Object.getPrototypeOf,gre=Object.... L3: L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/ L5: `);super(n);h(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},BO=class extends qo{get is_bubble_up(){return!0}},Cce=class extends qo{constructor(t,e){super(t,e),this.na... L6: L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/ L8: `,t}var Qy=Qde.ns.sub("error"),QS=class extends Qy.brand(Err

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/index.native.jsView on unpkg · L1

1if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol... L2: "use strict";var pre=Object.create;var Ug=Object.defineProperty;var fre=Object.getOwnPropertyDescriptor;var hre=Object.getOwnPropertyNames;var mre=Object.getPrototypeOf,gre=Object.... L3: L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/ L5: `);super(n);h(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},BO=class extends qo{get is_bubble_up(){return!0}},Cce=class extends qo{constructor(t,e){super(t,e),this.na... L6: L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/ L8: `,t}var Qy=Qde.ns.sub("error"),QS=class extends Qy.brand(Err

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.native.jsView on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index.native.jsView on unpkg