llm-failover-proxy@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

llm-failover-proxy@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

8`),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr}}function tm(e){try{let{origin:A}=JSON.parse(nt.readFileSync($d(e),"utf8"));return typeof A=="string"&&!nt.existsSync(A)}catch{return!1}}function pf(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var vN=Object.create;var cf=Object.defineProperty;var NN=Object.getOwnPropertyDescriptor;var wN=Object.getOwnPropertyNames;var RN=Object.getPrototypeOf,xN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} ... L8: `),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

8`),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr}}function tm(e){try{let{origin:A}=JSON.parse(nt.readFileSync($d(e),"utf8"));return typeof A=="string"&&!nt.existsSync(A)}catch{return!1}}function pf(e){try{re... L11: `)}catch{}return i}function ou(e,A=process.pid){let i=Qf(e);if(i&&i.pid!==A)return!1;try{return nt.unlinkSync(au(e)),!0}catch{return!1}}function nm(e){if(!Number.isInteger(e)||e<=0... L12: `)}catch{return""}}async function su({con

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L8

8Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/index.js L8: `),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr}}function tm(e){try{let{origin:A}=JSON.parse(nt.readFileSync($d(e),"utf8"));return typeof A=="string"&&!nt.existsSync(A)}catch{return!1}}function pf(e){try{re... L11: `)}catch{}return i}function ou(e,A=process.pid){let i=Qf(e);if(i&&i.pid!==A)return!1;try{return nt.unlinkSync(au(e)),!0}catch{return!1}}function nm

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L8

4Trigger-reachable persistence chain: manifest.bin -> dist/index.js L4: var vN=Object.create;var cf=Object.defineProperty;var NN=Object.getOwnPropertyDescriptor;var wN=Object.getOwnPropertyNames;var RN=Object.getPrototypeOf,xN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),hr.renameSync(f,e);try{hr.chmodSync(e,384)}catch{}if(i)for(let[E,C]of o)process.env[E]=String(C),gf.add(E),ff[E]=String(C);return{file:e,written:c}}var MN,Jd,gf,ff,Ui... L8: `),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"n

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index.jsView on unpkg · L4

4var vN=Object.create;var cf=Object.defineProperty;var NN=Object.getOwnPropertyDescriptor;var wN=Object.getOwnPropertyNames;var RN=Object.getPrototypeOf,xN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),hr.renameSync(f,e);try{hr.chmodSync(e,384)}catch{}if(i)for(let[E,C]of o)process.env[E]=String(C),gf.add(E),ff[E]=String(C);return{file:e,written:c}}var MN,Jd,gf,ff,Ui... L8: `),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSyn

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

9Cross-file remote execution chain: scripts/postinstall.js spawns dist/index.js; helper contains network access plus dynamic code execution. L9: */ L10: import { spawnSync } from "node:child_process"; L11: import fs from "node:fs"; ... L17: L18: const say = (text) => process.stdout.write(`${text}\n`); L19: L20: const isGlobal = process.env.npm[redacted] === "true"; L21: const isNpx = process.env.npm_command === "exec" || packageDir.includes("_npx"); ... L25: const optedOut = Boolean(process.env.LLM_PROXY_NO_AUTOSTART); L26: const isCI = Boolean(process.env.CI); L27:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L9

Source & flagged code

9 flagged

package.jsonView file

Lines 40-71json

40 "llmfp": "dist/index.js"

41 },

42 "files": [

43 "dist",

44 "defaults",

45 "scripts/postinstall.js",

46 "scripts/preuninstall.js",

47 ".env.example",

48 "README.md",

49 "LICENSE"

50 ],

51 "scripts": {

52 "build": "node scripts/build.js",

53 "start": "node src/index.js start",

54 "ui": "node src/index.js",

55 "status": "node src/index.js status",

56 "env:example": "node scripts/gen-env-example.js",

57 "demo": "node examples/demo.js",

58 "test": "node --test",

59 "prepack": "node scripts/build.js",

60 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "preuninstall": "node scripts/preuninstall.js"

62 },

63 "dependencies": {},

64 "devDependencies": {

65 "esbuild": "^0.28.1",

66 "ink": "^7.1.1",

67 "ink-testing-library": "^4.0.0",

68 "react": "^19.2.8"

69 }

70}

71

dist/index.jsView file

8`),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr}}function tm(e){try{let{origin:A}=JSON.parse(nt.readFileSync($d(e),"utf8"));return typeof A=="string"&&!nt.existsSync(A)}catch{return!1}}function pf(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var vN=Object.create;var cf=Object.defineProperty;var NN=Object.getOwnPropertyDescriptor;var wN=Object.getOwnPropertyNames;var RN=Object.getPrototypeOf,xN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} ... L8: `),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

8`),Jd=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,gf=new Set,ff={}});import kN from"node:crypto";import Oi from"node:fs";import HN from"node:os";import Mn from"node:path"... L9: `,{mode:384}),Oi.renameSync(a,A);try{Oi.chmodSync(A,384)}catch{}return e.__file=A,A}function jd(e){return{id:e.id||Li("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Dr}}function tm(e){try{let{origin:A}=JSON.parse(nt.readFileSync($d(e),"utf8"));return typeof A=="string"&&!nt.existsSync(A)}catch{return!1}}function pf(e){try{re... L11: `)}catch{}return i}function ou(e,A=process.pid){let i=Qf(e);if(i&&i.pid!==A)return!1;try{return nt.unlinkSync(au(e)),!0}catch{return!1}}function nm(e){if(!Number.isInteger(e)||e<=0... L12: `)}catch{return""}}async function su({con

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Runs after `npm install`. Puts the proxy in the background so it is ready to

4 * answer right away, and, for a global install, brings it back at every login.

5 *

6 * Deliberately conservative: it does nothing at all for `npx`, for CI, or when

7 * the repository's own dependencies are being installed. It also never fails the

8 * install, whatever happens.

9 */

10import { spawnSync }