llm-failover-proxy@1.2.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

llm-failover-proxy@1.2.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

8`),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Ur}}function Qm(e){try{let{origin:A}=JSON.parse(je.readFileSync(pm(e),"utf8"));return typeof A=="string"&&!je.existsSync(A)}catch{return!1}}function kf(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var Zw=Object.create;var Rf=Object.defineProperty;var $w=Object.getOwnPropertyDescriptor;var eN=Object.getOwnPropertyNames;var tN=Object.getPrototypeOf,AN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} ... L8: `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Ur

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... `)),A}catch{return Ur}}function Qm(e){try{let{origin:A}=JSON.parse(je.readFileSync(pm(e),"utf8"))

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

8`),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Ur}}function Qm(e){try{let{origin:A}=JSON.parse(je.readFileSync(pm(e),"utf8"));return typeof A=="string"&&!je.existsSync(A)}catch{return!1}}function kf(e){try{re... L11: `)}catch{}return i}function Cu(e,A=process.pid){let i=Lf(e);if(i&&i.pid!==A)return!1;try{return je.unlinkSync(mu(e)),!0}catch{return!1}}function Sm(e){if(!Number.isInteger(e)||e<=0... L12: `)}catch{return""}}async function pu({con

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L8

8Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/index.js L8: `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Ur}}function Qm(e){try{let{origin:A}=JSON.parse(je.readFileSync(pm(e),"utf8"));return typeof A=="string"&&!je.existsSync(A)}catch{return!1}}function kf(e){try{re... L11: `)}catch{}return i}function Cu(e,A=process.pid){let i=Lf(e);if(i&&i.pid!==A)return!1;try{return je.unlinkSync(mu(e)),!0}catch{return!1}}function Sm

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L8

4Trigger-reachable persistence chain: manifest.bin -> dist/index.js L4: var Zw=Object.create;var Rf=Object.defineProperty;var $w=Object.getOwnPropertyDescriptor;var eN=Object.getOwnPropertyNames;var tN=Object.getPrototypeOf,AN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),br.renameSync(f,e);try{br.chmodSync(e,384)}catch{}if(i)for(let[E,I]of o)process.env[E]=String(I),xf.add(E),bf[E]=String(I);return{file:e,written:c}}var iN,um,xf,bf,Ki... L8: `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"n

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index.jsView on unpkg · L4

4var Zw=Object.create;var Rf=Object.defineProperty;var $w=Object.getOwnPropertyDescriptor;var eN=Object.getOwnPropertyNames;var tN=Object.getPrototypeOf,AN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),br.renameSync(f,e);try{br.chmodSync(e,384)}catch{}if(i)for(let[E,I]of o)process.env[E]=String(I),xf.add(E),bf[E]=String(I);return{file:e,written:c}}var iN,um,xf,bf,Ki... L8: `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSyn

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

9Cross-file remote execution chain: scripts/postinstall.js spawns dist/index.js; helper contains network access plus dynamic code execution. L9: */ L10: import { spawnSync } from "node:child_process"; L11: import fs from "node:fs"; ... L30: const terminal = (() => { L31: const target = process.platform === "win32" ? "CONOUT$" : "/dev/tty"; L32: let fd = null; ... L48: const line = `${text}\n`; L49: if (terminal === null) return void process.stdout.write(line); L50: try { ... L59: L60: const isGlobal = process.env.npm[redacted] === "true"; L61: const isNpx = process.env.npm_command === "exec" || packageDir.includes("_npx");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L9

Source & flagged code

10 flagged

package.jsonView file

Lines 40-71json

40 "llmfp": "dist/index.js"

41 },

42 "files": [

43 "dist",

44 "defaults",

45 "scripts/postinstall.js",

46 "scripts/preuninstall.js",

47 ".env.example",

48 "README.md",

49 "LICENSE"

50 ],

51 "scripts": {

52 "build": "node scripts/build.js",

53 "start": "node src/index.js start",

54 "ui": "node src/index.js",

55 "status": "node src/index.js status",

56 "env:example": "node scripts/gen-env-example.js",

57 "demo": "node examples/demo.js",

58 "test": "node --test",

59 "prepack": "node scripts/build.js",

60 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "preuninstall": "node scripts/preuninstall.js"

62 },

63 "dependencies": {},

64 "devDependencies": {

65 "esbuild": "^0.28.1",

66 "ink": "^7.1.1",

67 "ink-testing-library": "^4.0.0",

68 "react": "^19.2.8"

69 }

70}

71

dist/index.jsView file

8`),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Ur}}function Qm(e){try{let{origin:A}=JSON.parse(je.readFileSync(pm(e),"utf8"));return typeof A=="string"&&!je.existsSync(A)}catch{return!1}}function kf(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var Zw=Object.create;var Rf=Object.defineProperty;var $w=Object.getOwnPropertyDescriptor;var eN=Object.getOwnPropertyNames;var tN=Object.getPrototypeOf,AN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... L6: `).trimEnd()} ... L8: `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),A}catch{return Ur

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(A.length>=2&&A.startsWith("'")&&A.endsWith("'"))return A.slice(1,-1);let i=A.indexOf(" #");return(i===-1?... `),um=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,xf=new Set,bf={}});import cN from"node:crypto";import Ji from"node:fs";import gN from"node:os";import Gn from"node:path"... `,{mode:384}),Ji.renameSync(a,A);try{Ji.chmodSync(A,384)}catch{}return e.__file=A,A}function fm(e){return{id:e.id||Yi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... `)),A}catch{return Ur}}function Qm(e){try{let{origin:A}=JSON.parse(je.readFileSync(pm(e),"utf8"))

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Runs after `npm install`. Puts the proxy in the background so it is ready to

4 * answer right away, and, for a global install, brings it back at every login.

5 *

6 * Deliberately conservative: it does nothing at all for `npx`, for CI, or when

7 * the repository's own dependencies are being installed. It also never fails the

8 * install, whatever happens.

9 */

10import { spawnSync }