llm-failover-proxy@1.8.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

llm-failover-proxy@1.8.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

4var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSyn

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

4Trigger-reachable chain: manifest.bin -> dist/index.js L4: var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";impo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

•matchType = previous_version_dangerous_delta matchedPackage = llm-failover-proxy@1.7.0 matchedIdentity = npm:bGxtLWZhaWxvdmVyLXByb3h5:1.7.0 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

8`),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSync(o,t);try{si.chmodSync(t,384)}catch{}return e.__file=t,t}function qC(e){let t=KC.warp,r=(m,Q)=>{let h=Math.trunc(Number(m));return Number.isFinite(h)&&h>... L10: `)),t}catch{return na}}function sh(e){try{let{origin:t}=JSON.parse(tt.readFileSync(oh(e),"utf8"));return typeof t=="string"&&!tt.existsSync(t)}catch{return!1}}function Xd(e){try{re...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L8

4var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} ... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSync(o,t);try{si.chmodSync(t,384)}catch{}return e.__file=t,t}function qC(e){let t=KC.warp,r=(m,Q)=>{let h=Math.trunc(Number(m));return Number.isFinite(h)&&h>... L10: `)),t}catch{return na

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/index.js: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... `,{mode:384}),si.renameSync(o,t);try{si.chmodSync(t,384)}catch{}return e.__file=t,t}function qC(e){let t=KC.warp,r=(m,Q)=>{let h=Math.trunc(Number(m));return Number.isFinite(h)&&h>... `)),t}catch{return na}}function sh(e){try{let{origin:t}=JSON.parse(tt.readFileSync(oh(e),"utf8"))

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/index.jsView on unpkg

8`),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSync(o,t);try{si.chmodSync(t,384)}catch{}return e.__file=t,t}function qC(e){let t=KC.warp,r=(m,Q)=>{let h=Math.trunc(Number(m));return Number.isFinite(h)&&h>... L10: `)),t}catch{return na}}function sh(e){try{let{origin:t}=JSON.parse(tt.readFileSync(oh(e),"utf8"));return typeof t=="string"&&!tt.existsSync(t)}catch{return!1}}function Xd(e){try{re... L11: `)}catch{}return r}function ac(e,t=process.pid){let r=Zd(e);if(r&&r.pid!==t)return!1;try{return tt.unlinkSync(sc(e)),!0}catch{return!1}}function Vn(e){if(!Number.isInteger(e)||e<=0... L12: `)}catch{return""}}async function lc({con

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L8

4Trigger-reachable credential exfiltration chain: manifest.bin -> dist/index.js L4: var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";impo

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L4

8Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/index.js L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSync(o,t);try{si.chmodSync(t,384)}catch{}return e.__file=t,t}function qC(e){let t=KC.warp,r=(m,Q)=>{let h=Math.trunc(Number(m));return Number.isFinite(h)&&h>... L10: `)),t}catch{return na}}function sh(e){try{let{origin:t}=JSON.parse(tt.readFileSync(oh(e),"utf8"));return typeof t=="string"&&!tt.existsSync(t)}catch{return!1}}function Xd(e){try{re... L11: `)}catch{}return r}function ac(e,t=process.pid){let r=Zd(e);if(r&&r.pid!==t)return!1;try{return tt.unlinkSync(sc(e)),!0}catch{return!1}}function Vn

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L8

4Trigger-reachable persistence chain: manifest.bin -> dist/index.js L4: var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"n

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/index.jsView on unpkg · L4

4var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSyn

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

9Cross-file remote execution chain: scripts/postinstall.js spawns dist/index.js; helper contains network access plus dynamic code execution. L9: */ L10: import { spawnSync } from "node:child_process"; L11: import fs from "node:fs"; ... L30: const terminal = (() => { L31: const target = process.platform === "win32" ? "CONOUT$" : "/dev/tty"; L32: let fd = null; ... L48: const line = `${text}\n`; L49: if (terminal === null) return void process.stdout.write(line); L50: try { ... L59: L60: const isGlobal = process.env.npm[redacted] === "true"; L61: const isNpx = process.env.npm_command === "exec" || packageDir.includes("_npx");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.jsView on unpkg · L9

•matchType = normalized_sha256 matchedPackage = llm-failover-proxy@1.3.0 matchedPath = scripts/postinstall.js matchedIdentity = npm:bGxtLWZhaWxvdmVyLXByb3h5:1.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

Source & flagged code

15 flagged

package.jsonView file

Lines 43-74json

43 "llmfp": "dist/index.js"

44 },

45 "files": [

46 "dist",

47 "defaults",

48 "scripts/postinstall.js",

49 "scripts/preuninstall.js",

50 ".env.example",

51 "README.md",

52 "LICENSE"

53 ],

54 "scripts": {

55 "build": "node scripts/build.js",

56 "start": "node src/index.js start",

57 "ui": "node src/index.js",

58 "status": "node src/index.js status",

59 "env:example": "node scripts/gen-env-example.js",

60 "demo": "node examples/demo.js",

61 "test": "node --test",

62 "prepack": "node scripts/build.js",

63 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L63

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L63

64 "preuninstall": "node scripts/preuninstall.js"

65 },

66 "dependencies": {},

67 "devDependencies": {

68 "esbuild": "^0.28.1",

69 "ink": "^7.1.1",

70 "ink-testing-library": "^4.0.0",

71 "react": "^19.2.8"

72 }

73}

74

dist/index.jsView file

4var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";import Pn from"node:path"... L9: `,{mode:384}),si.renameSyn

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L4

4Trigger-reachable chain: manifest.bin -> dist/index.js L4: var BR=Object.create;var Gd=Object.defineProperty;var CR=Object.getOwnPropertyDescriptor;var hR=Object.getOwnPropertyNames;var QR=Object.getPrototypeOf,yR=Object.prototype.hasOwnPr... L5: `).replace(/\\r/g,"\r").replace(/\\t/g," ").replace(/\\(["'\\])/g,"$1");if(t.length>=2&&t.startsWith("'")&&t.endsWith("'"))return t.slice(1,-1);let r=t.indexOf(" #");return(r===-1?... L6: `).trimEnd()} L7: `,{mode:384}),$o.renameSync(g,e);try{$o.chmodSync(e,384)}catch{}if(r)for(let[d,E]of i)process.env[d]=String(E),Ld.add(d),Od[d]=String(E);return{file:e,written:u}}var wR,FC,Ld,Od,yr... L8: `),FC=/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=(.*)$/,Ld=new Set,Od={}});import MR from"node:crypto";import si from"node:fs";import TR from"node:os";impo

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L4

scripts/postinstall.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * Runs after `npm install`. Puts the proxy in the background so it is ready to

4 * answer right away, and, for a global install, brings it back at every login.

5 *

6 * Deliberately conservative: it does nothing at all for `npx`, for CI, or when

7 * the repository's own dependencies are being installed. It also never fails the

8 * install, whatever happens.

9 */

10import { spawnSync }