llm-failover-proxy@1.7.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

llm-failover-proxy@1.7.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

4var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSyn

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

4Trigger-reachable chain: manifest.bin -> dist/index.js L4: var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";impo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

•matchType = previous_version_dangerous_delta matchedPackage = llm-failover-proxy@1.5.0 matchedIdentity = npm:bGxtLWZhaWxvdmVyLXByb3h5:1.5.0 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

8`),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSync(o,t);try{ri.chmodSync(t,384)}catch{}return e.__file=t,t}function QC(e){let t=pC.warp,r=(u,g)=>{let E=Math.trunc(Number(u));return Number.isFinite(E)&&E>... L10: `)),t}catch{return Xo}}function LC(e){try{let{origin:t}=JSON.parse($e.readFileSync(GC(e),"utf8"));return typeof t=="string"&&!$e.existsSync(t)}catch{return!1}}function Gd(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} ... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSync(o,t);try{ri.chmodSync(t,384)}catch{}return e.__file=t,t}function QC(e){let t=pC.warp,r=(u,g)=>{let E=Math.trunc(Number(u));return Number.isFinite(E)&&E>... L10: `)),t}catch{return Xo

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... `,{mode:384}),ri.renameSync(o,t);try{ri.chmodSync(t,384)}catch{}return e.__file=t,t}function QC(e){let t=pC.warp,r=(u,g)=>{let E=Math.trunc(Number(u));return Number.isFinite(E)&&E>... `)),t}catch{return Xo}}function LC(e){try{let{origin:t}=JSON.parse($e.readFileSync(GC(e),"utf8"))

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

8`),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSync(o,t);try{ri.chmodSync(t,384)}catch{}return e.__file=t,t}function QC(e){let t=pC.warp,r=(u,g)=>{let E=Math.trunc(Number(u));return Number.isFinite(E)&&E>... L10: `)),t}catch{return Xo}}function LC(e){try{let{origin:t}=JSON.parse($e.readFileSync(GC(e),"utf8"));return typeof t=="string"&&!$e.existsSync(t)}catch{return!1}}function Gd(e){try{re... L11: `)}catch{}return r}function Xu(e,t=process.pid){let r=kd(e);if(r&&r.pid!==t)return!1;try{return $e.unlinkSync(Zu(e)),!0}catch{return!1}}function pr(e){if(!Number.isInteger(e)||e<=0... L12: `)}catch{return""}}async function $u({con

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L8

4Trigger-reachable credential exfiltration chain: manifest.bin -> dist/index.js L4: var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";impo

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L4

8Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/index.js L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSync(o,t);try{ri.chmodSync(t,384)}catch{}return e.__file=t,t}function QC(e){let t=pC.warp,r=(u,g)=>{let E=Math.trunc(Number(u));return Number.isFinite(E)&&E>... L10: `)),t}catch{return Xo}}function LC(e){try{let{origin:t}=JSON.parse($e.readFileSync(GC(e),"utf8"));return typeof t=="string"&&!$e.existsSync(t)}catch{return!1}}function Gd(e){try{re... L11: `)}catch{}return r}function Xu(e,t=process.pid){let r=kd(e);if(r&&r.pid!==t)return!1;try{return $e.unlinkSync(Zu(e)),!0}catch{return!1}}function pr

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L8

4Trigger-reachable persistence chain: manifest.bin -> dist/index.js L4: var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"n

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index.jsView on unpkg · L4

4var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSyn

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

9Cross-file remote execution chain: scripts/postinstall.js spawns dist/index.js; helper contains network access plus dynamic code execution. L9: */ L10: import { spawnSync } from "node:child_process"; L11: import fs from "node:fs"; ... L30: const terminal = (() => { L31: const target = process.platform === "win32" ? "CONOUT$" : "/dev/tty"; L32: let fd = null; ... L48: const line = `${text}\n`; L49: if (terminal === null) return void process.stdout.write(line); L50: try { ... L59: L60: const isGlobal = process.env.npm[redacted] === "true"; L61: const isNpx = process.env.npm_command === "exec" || packageDir.includes("_npx");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L9

•matchType = normalized_sha256 matchedPackage = llm-failover-proxy@1.3.0 matchedPath = scripts/postinstall.js matchedIdentity = npm:bGxtLWZhaWxvdmVyLXByb3h5:1.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

Source & flagged code

15 flagged

package.jsonView file

Lines 43-74json

43 "llmfp": "dist/index.js"

44 },

45 "files": [

46 "dist",

47 "defaults",

48 "scripts/postinstall.js",

49 "scripts/preuninstall.js",

50 ".env.example",

51 "README.md",

52 "LICENSE"

53 ],

54 "scripts": {

55 "build": "node scripts/build.js",

56 "start": "node src/index.js start",

57 "ui": "node src/index.js",

58 "status": "node src/index.js status",

59 "env:example": "node scripts/gen-env-example.js",

60 "demo": "node examples/demo.js",

61 "test": "node --test",

62 "prepack": "node scripts/build.js",

63 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L63

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L63

64 "preuninstall": "node scripts/preuninstall.js"

65 },

66 "dependencies": {},

67 "devDependencies": {

68 "esbuild": "^0.28.1",

69 "ink": "^7.1.1",

70 "ink-testing-library": "^4.0.0",

71 "react": "^19.2.8"

72 }

73}

74

dist/index.jsView file

4var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";import Yn from"node:path"... L9: `,{mode:384}),ri.renameSyn

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

4Trigger-reachable chain: manifest.bin -> dist/index.js L4: var zN=Object.create;var Qd=Object.defineProperty;var qN=Object.getOwnPropertyDescriptor;var PN=Object.getOwnPropertyNames;var jN=Object.getPrototypeOf,WN=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),Po.renameSync(g,e);try{Po.chmodSync(e,384)}catch{}if(r)for(let[E,d]of i)process.env[E]=String(d),yd.add(E),Sd[E]=String(d);return{file:e,written:u}}var XN,IC,yd,Sd,mr... L8: `),IC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,yd=new Set,Sd={}});import rR from"node:crypto";import ri from"node:fs";import iR from"node:os";impo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Runs after `npm install`. Puts the proxy in the background so it is ready to

4 * answer right away, and, for a global install, brings it back at every login.

5 *

6 * Deliberately conservative: it does nothing at all for `npx`, for CI, or when

7 * the repository's own dependencies are being installed. It also never fails the

8 * install, whatever happens.

9 */

10import { spawnSync }