llm-failover-proxy@1.4.1: Suspicious npm security report (Warn)

Loading npm security reports…

llm-failover-proxy@1.4.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged

package.jsonView file

Lines 40-71json

40 "llmfp": "dist/index.js"

41 },

42 "files": [

43 "dist",

44 "defaults",

45 "scripts/postinstall.js",

46 "scripts/preuninstall.js",

47 ".env.example",

48 "README.md",

49 "LICENSE"

50 ],

51 "scripts": {

52 "build": "node scripts/build.js",

53 "start": "node src/index.js start",

54 "ui": "node src/index.js",

55 "status": "node src/index.js status",

56 "env:example": "node scripts/gen-env-example.js",

57 "demo": "node examples/demo.js",

58 "test": "node --test",

59 "prepack": "node scripts/build.js",

60 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "preuninstall": "node scripts/preuninstall.js"

62 },

63 "dependencies": {},

64 "devDependencies": {

65 "esbuild": "^0.28.1",

66 "ink": "^7.1.1",

67 "ink-testing-library": "^4.0.0",

68 "react": "^19.2.8"

69 }

70}

dist/index.jsView file

4var aN=Object.create;var Tf=Object.defineProperty;var sN=Object.getOwnPropertyDescriptor;var lN=Object.getOwnPropertyNames;var uN=Object.getPrototypeOf,cN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let i=t.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Rr.renameSync(f,e);try{Rr.chmodSync(e,384)}catch{}if(i)for(let[E,d]of o)process.env[E]=String(d),Uf.add(E),Gf[E]=String(d);return{file:e,written:c}}var fN,pm,Uf,Gf,ri... L8: `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSyn

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

4Trigger-reachable chain: manifest.bin -> dist/index.js L4: var aN=Object.create;var Tf=Object.defineProperty;var sN=Object.getOwnPropertyDescriptor;var lN=Object.getOwnPropertyNames;var uN=Object.getPrototypeOf,cN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let i=t.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Rr.renameSync(f,e);try{Rr.chmodSync(e,384)}catch{}if(i)for(let[E,d]of o)process.env[E]=String(d),Uf.add(E),Gf[E]=String(d);return{file:e,written:c}}var fN,pm,Uf,Gf,ri... L8: `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"node:os";impo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Runs after `npm install`. Puts the proxy in the background so it is ready to

4 * answer right away, and, for a global install, brings it back at every login.

5 *

6 * Deliberately conservative: it does nothing at all for `npx`, for CI, or when

7 * the repository's own dependencies are being installed. It also never fails the

8 * install, whatever happens.

9 */

10import { spawnSync }

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

8`),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,t);try{Ji.chmodSync(t,384)}catch{}return e.__file=t,t}function ym(e){return{id:e.id||zi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),t}catch{return Tr}}function bm(e){try{let{origin:t}=JSON.parse(je.readFileSync(xm(e),"utf8"));return typeof t=="string"&&!je.existsSync(t)}catch{return!1}}function Yf(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var aN=Object.create;var Tf=Object.defineProperty;var sN=Object.getOwnPropertyDescriptor;var lN=Object.getOwnPropertyNames;var uN=Object.getPrototypeOf,cN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let i=t.indexOf(" #");return(i===-1?... L6: `).trimEnd()} ... L8: `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,t);try{Ji.chmodSync(t,384)}catch{}return e.__file=t,t}function ym(e){return{id:e.id||zi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),t}catch{return Tr

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let i=t.indexOf(" #");return(i===-1?... `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"node:os";import Gn from"node:path"... `,{mode:384}),Ji.renameSync(a,t);try{Ji.chmodSync(t,384)}catch{}return e.__file=t,t}function ym(e){return{id:e.id||zi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... `)),t}catch{return Tr}}function bm(e){try{let{origin:t}=JSON.parse(je.readFileSync(xm(e),"utf8"))

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L8

4Trigger-reachable credential exfiltration chain: manifest.bin -> dist/index.js L4: var aN=Object.create;var Tf=Object.defineProperty;var sN=Object.getOwnPropertyDescriptor;var lN=Object.getOwnPropertyNames;var uN=Object.getPrototypeOf,cN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let i=t.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Rr.renameSync(f,e);try{Rr.chmodSync(e,384)}catch{}if(i)for(let[E,d]of o)process.env[E]=String(d),Uf.add(E),Gf[E]=String(d);return{file:e,written:c}}var fN,pm,Uf,Gf,ri... L8: `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";impo

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L4

8Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/index.js L8: `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"node:os";import Gn from"node:path"... L9: `,{mode:384}),Ji.renameSync(a,t);try{Ji.chmodSync(t,384)}catch{}return e.__file=t,t}function ym(e){return{id:e.id||zi("prov"),name:String(e.name||"provider").trim(),type:e.type==="... L10: `)),t}catch{return Tr}}function bm(e){try{let{origin:t}=JSON.parse(je.readFileSync(xm(e),"utf8"));return typeof t=="string"&&!je.existsSync(t)}catch{return!1}}function Yf(e){try{re... L11: `)}catch{}return i}function Cu(e,t=process.pid){let i=zf(e);if(i&&i.pid!==t)return!1;try{return je.unlinkSync(mu(e)),!0}catch{return!1}}function _m

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L8

4Trigger-reachable persistence chain: manifest.bin -> dist/index.js L4: var aN=Object.create;var Tf=Object.defineProperty;var sN=Object.getOwnPropertyDescriptor;var lN=Object.getOwnPropertyNames;var uN=Object.getPrototypeOf,cN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let i=t.indexOf(" #");return(i===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Rr.renameSync(f,e);try{Rr.chmodSync(e,384)}catch{}if(i)for(let[E,d]of o)process.env[E]=String(d),Uf.add(E),Gf[E]=String(d);return{file:e,written:c}}var fN,pm,Uf,Gf,ri... L8: `),pm=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Uf=new Set,Gf={}});import pN from"node:crypto";import Ji from"node:fs";import hN from"n

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index.jsView on unpkg · L4

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

9Cross-file remote execution chain: scripts/postinstall.js spawns dist/index.js; helper contains network access plus dynamic code execution. L9: */ L10: import { spawnSync } from "node:child_process"; L11: import fs from "node:fs"; ... L30: const terminal = (() => { L31: const target = process.platform === "win32" ? "CONOUT$" : "/dev/tty"; L32: let fd = null; ... L48: const line = `${text}\n`; L49: if (terminal === null) return void process.stdout.write(line); L50: try { ... L59: L60: const isGlobal = process.env.npm[redacted] === "true"; L61: const isNpx = process.env.npm_command === "exec" || packageDir.includes("_npx");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L9

•matchType = normalized_sha256 matchedPackage = llm-failover-proxy@1.3.0 matchedPath = scripts/postinstall.js matchedIdentity = npm:bGxtLWZhaWxvdmVyLXByb3h5:1.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

Source & flagged code

14 flagged

package.jsonView file

Lines 40-71json

40 "llmfp": "dist/index.js"

41 },

42 "files": [

43 "dist",

44 "defaults",

45 "scripts/postinstall.js",

46 "scripts/preuninstall.js",

47 ".env.example",

48 "README.md",

49 "LICENSE"

50 ],

51 "scripts": {

52 "build": "node scripts/build.js",

53 "start": "node src/index.js start",

54 "ui": "node src/index.js",

55 "status": "node src/index.js status",

56 "env:example": "node scripts/gen-env-example.js",

57 "demo": "node examples/demo.js",

58 "test": "node --test",

59 "prepack": "node scripts/build.js",

60 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "preuninstall": "node scripts/preuninstall.js"

62 },

63 "dependencies": {},

64 "devDependencies": {

65 "esbuild": "^0.28.1",

66 "ink": "^7.1.1",

67 "ink-testing-library": "^4.0.0",

68 "react": "^19.2.8"

69 }

70}

dist/index.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Runs after `npm install`. Puts the proxy in the background so it is ready to

4 * answer right away, and, for a global install, brings it back at every login.

5 *

6 * Deliberately conservative: it does nothing at all for `npx`, for CI, or when

7 * the repository's own dependencies are being installed. It also never fails the

8 * install, whatever happens.

9 */

10import { spawnSync }

llm-failover-proxy@1.4.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code