makecoder@5.0.3: Suspicious npm security report (Warn)

Loading npm security reports…

makecoder@5.0.3: Suspicious npm security report (Warn) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 498 file(s), 23.3 MB of source, external domains: 127.0.0.1, accounts.feishu.cn, accounts.larksuite.com, ai.google.dev, aistudio.google.com, api-docs.deepseek.com, api.anthropic.com, api.deepseek.com, api.github.com, api.makecoder.com, api.minimaxi.com, api.moonshot.cn, api.z.ai, ark.cn-beijing.volces.com, asdf.c, asdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdfasdf.com, bigmodel.cn, bugs.chromium.org, bun.sh, cdn.makecoder.com, chromestatus.com, chromewebstore.google.com, chromium.googlesource.com, chromiumdash.appspot.com, cloud.google.com, code.claude.com, console.volcengine.com, datatracker.ietf.org, developer.chrome.com, developer.mozilla.org, developers.google.com, docs.bigmodel.cn, docs.stripe.com, docs.z.ai, dotenvx.com, elevenlabs.io, empty.invalid, example.com, example.net.il, example.org, examples.com, fb.me, fburl.com, fedidcg.github.io, feross.org, ffmpeg.org, flow.makecoder.com, geminicli.com, github.com, goo.gle

Oversized source lightweight scan

dist/darwin-arm64/cc.js26.6 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsHighEntropyStringsMinifiedUrlStringsapi.anthropic.comcode.claude.comgithub.com

dist/darwin-x64/cc.js26.6 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsHighEntropyStringsMinifiedUrlStringsapi.anthropic.comcode.claude.comgithub.com

dist/gemini/bundled/chrome-devtools-mcp.mjs11.1 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsShellHighEntropyStringsUrlStringschromewebstore.google.comgithub.comlodash.comnodejs.orgopenjsf.orgunderscorejs.orgwww.apache.org

dist/gemini/bundled/third_party/index.js7.62 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoShellHighEntropyStringsUrlStringsbugs.chromium.orgchromestatus.comchromium.googlesource.comchromiumdash.appspot.comdatatracker.ietf.orgdeveloper.chrome.comdeveloper.mozilla.orgdevelopers.google.comfedidcg.github.iogithub.comgoo.glehtml.spec.whatwg.orgprivacycg.github.ioprivacysandbox.comweb.devwicg.github.iowww.chromium.orgwww.ietf.orgwww.rfc-editor.org

dist/gemini/chunk-GYTCBA2A.js7.61 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsEvalCryptoHighEntropyStringsMinifiedUrlStringsfeross.orggithub.comhuggingface.cojimmy.warting.sewww.apache.org

dist/gemini/chunk-PE6GLDYB.js7.58 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsEvalCryptoHighEntropyStringsMinifiedUrlStringsfeross.orggithub.comhuggingface.cojimmy.warting.sewww.apache.org

dist/linux-arm64/cc.js26.6 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsHighEntropyStringsMinifiedUrlStringsapi.anthropic.comcode.claude.comgithub.com

dist/linux-x64/cc.js26.6 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsHighEntropyStringsMinifiedUrlStringsapi.anthropic.comcode.claude.comgithub.com

dist/win32-x64/cc.js26.6 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsHighEntropyStringsMinifiedUrlStringsapi.anthropic.comcode.claude.comgithub.com

Source & flagged code

37 flagged

package.jsonView file

Lines 1-36json

2 "name": "makecoder",

3 "version": "5.0.3",

4 "description": "MakeCoder Coder: AI Agent Runtime OS that runs and orchestrates Claude Code, Codex, Gemini and more across CLI, API, Web and chat",

5 "main": "./dist/coder.js",

6 "bin": {

7 "coder": "./dist/coder.js",

8 "cowork": "./dist/cowork.js"

9 },

10 "scripts": {

11 "test": "node --test test/*.test.js",

12 "start": "node ./src/coder.js",

13 "build": "node scripts/build.js",

14 "build:clean": "node scripts/build.js --clean",

15 "build:dev": "node scripts/build.js --no-minify --sourcemap",

16 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 },

18 "keywords": [

19 "ai-agent-runtime",

20 "agent-os",

21 "ai",

22 "cli",

23 "claude",

24 "gemini",

25 "codex",

26 "agent",

27 "orchestration",

28 "llm"

29 ],

30 "author": "makecoder",

31 "license": "MIT",

32 "repository": {

33 "type": "git",

34 "url": "https://github.com/makecoderai/coder.git"

35 },

36 "homepage": "https://github.com/makecoderai/coder",

dist/coder.jsView file

1Source sends the broad process environment to a literal external destination. L1: #!/usr/bin/env node L2: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... L3: `);return}typeof t=="string"?process.stdout.write(t+` ... L7: `),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME||process.env.CODER_DA... L10: `;try{s.write(c),wr&&(wr

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/coder.jsView on unpkg · L1

39\u671F\u671B ${r.sha256} L40: \u5B9E\u9645 ${s}`),!1)}_readInstalledAppVersion(){let t=ut.join(Hs,"Contents","Info.plist");if(!Re.existsSync(t))return null;try{return ty("plutil",["-extract","CFBundleShortVersi... L41: entry=${a} ... L44: `;Re.writeFileSync(`${u}.conf`,c),Re.writeFileSync(ut.join(this.userData,"claude-code",t,".verified"),""),process.env.CODER_DEBUG&&console.log(`[claude app] shim \u5B89\u88C5 -> ${... L45: [debug]`),console.log(` claude.app: ${Hs}`),console.log(` requiredVersion: ${t||"(\u63A2\u6D4B\u5931\u8D25)"}`),console.log(` deploymentMode: ${r||"(\u672A\u8BBE\u7F6E)"}`... L46: \u671F\u671B ${r.sha256} ... L54: \u5B9E\u9645 ${d}`),1;process.env.CODER_DEBUG&&console.error("[coder app] sha256 \u6821\u9A8C\u901A\u8FC7")}let c=bn("hdiutil",["attach",n,"-nob

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/coder.jsView on unpkg · L39

dist/zod/v4-mini/index.cjsView file

Lines 1-18javascript

1"use strict";

2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {

dist/linux-arm64/image-processor.nodeView file

•path = dist/linux-arm64/image-processor.node kind = native_binary sizeBytes = 1275037 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/linux-arm64/image-processor.nodeView on unpkg

dist/linux-arm64/template.html-29543a01.txt.zstView file

•path = dist/linux-arm64/template.html-29543a01.txt.zst kind = compressed_blob sizeBytes = 18373 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/linux-arm64/template.html-29543a01.txt.zstView on unpkg

dist/gemini/chunk-GYTCBA2A.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/gemini/chunk-GYTCBA2A.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-GYTCBA2A.jsView on unpkg

•path = dist/gemini/chunk-GYTCBA2A.js kind = oversized_source_file sizeBytes = 7983738 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/gemini/chunk-GYTCBA2A.jsView on unpkg

dist/gemini/bundled/chrome-devtools-mcp.mjsView file

•path = dist/gemini/bundled/chrome-devtools-mcp.mjs kind = oversized_cli_entrypoint sizeBytes = 11625049 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/gemini/bundled/chrome-devtools-mcp.mjsView on unpkg

dist/cowork.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/coder.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cowork.jsView on unpkg

dist/gemini/bundled/third_party/index.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/gemini/bundled/third_party/index.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/bundled/third_party/index.jsView on unpkg

dist/gemini/chunk-3G5WCY2I.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/gemini/chunk-3G5WCY2I.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-3G5WCY2I.jsView on unpkg

dist/gemini/chunk-7LN472KC.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/gemini/chunk-7LN472KC.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-7LN472KC.jsView on unpkg

dist/gemini/chunk-PE6GLDYB.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-PE6GLDYB.jsView on unpkg

scripts/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = scripts/postinstall.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

dist/codex.mjsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/codex.mjs matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/codex.mjsView on unpkg

dist/gemini/chunk-2RNP2FS2.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/gemini/chunk-2RNP2FS2.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-2RNP2FS2.jsView on unpkg

dist/gemini/chunk-ITDN6TZ7.jsView file

•matchType = normalized_sha256 matchedPackage = makecoder@4.1.97 matchedPath = dist/gemini/chunk-ITDN6TZ7.js matchedIdentity = npm:bWFrZWNvZGVy:4.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-ITDN6TZ7.jsView on unpkg

dist/gemini/chunk-UABHUQM5.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-UABHUQM5.jsView on unpkg

Source & flagged code

37 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/coder.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/coder.jsView on unpkg · L1

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/coder.jsView on unpkg · L39

1Trigger-reachable chain: manifest.main -> dist/coder.js L1: #!/usr/bin/env node L2: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... L3: `);return}typeof t=="string"?process.stdout.write(t+` ... L7: `),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME||process.env.CODER_DA...

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/coder.jsView on unpkg · L1

7`),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME||process.env.CODER_DA...

High

Child Process

Package source references child process execution.

dist/coder.jsView on unpkg · L7

370`),t.push("**Use `--format json` for structured data.**\n"),t.push("The default brief includes the commands needed for the core agent loop. For everything else, run `coder flow --h... L371: `),KX.platform()==="win32"?t.push("On Windows, **always write the comment body to a UTF-8 file with your file-write tool first, then post it with `--content-file <path>`** \u2014 d... L372: `),t.push("The following code repositories are available in this workspace."),t.push("Use `coder flow repo checkout <url>` to check out a repository into your working directory. Ad...

High

Shell

Package source references shell execution.

dist/coder.jsView on unpkg · L370

1#!/usr/bin/env node L2: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... L3: `);return}typeof t=="string"?process.stdout.write(t+` ... L7: `),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME||process.env.CODER_DA...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/coder.jsView on unpkg · L1

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

dist/coder.jsView on unpkg · L1

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/coder.js: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... `))}_getBunPlatformPackage(){let t=process.platform,r=process.arch;return{"darwin-arm64":"@oven-sh/bun-darwin-aarch64","darwin-x64":"@oven-sh/bun-darwin-x64","linux-arm64":"@oven-s... \u8BF7\u68C0\u67E5\u7F51\u7EDC\uFF1A${tu}`),1;let u=this._ensureClaudeAppIns

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/coder.jsView on unpkg

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/coder.jsView on unpkg · L1

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/coder.jsView on unpkg · L1

2014package = makecoder; repositoryIdentity = coder; dependency = commander L2014: `).map(b=>b.replace(/^\s*[-*]\s*/,"").trim()).filter(b=>b.length>=4),v=0,_=0;for(let b of y){let w=jh.insertCandidate({sessionId:r,workspacePath:a,content:b,sourceFromSequence:u,so... L2015: ${y.replace(v,"").trim()}`,{marker:v}).status==="saved"&&d++}}for(let g of u)ET.markPromoted(g);for(let g of c)ET.markDiscarded(g);return REe.info(jEe,`promoted ${d}, deduped ${c.l... L2016: `)),i.option("--format <fmt>","\u8F93\u51FA\u683C\u5F0F\uFF1Atext\uFF08\u9ED8\u8BA4\uFF09| json"),i.option("--apikey <key>","\u4E34\u65F6\u63D0\u4F9B API Key"),i.option("--install-...

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/coder.jsView on unpkg · L2014

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: top_reason==="max_tokens"?"max_turns":"completed";default:break}return o.stop_reason==="max_tokens"?"max_turns":"completed"}function wre(){return process.env.coder_claude_stub?{cmd:process.execpath,args:[process.env.coder_claude_stub]}:{cmd:process.execpath,args:[process.argv[1]]}}async function*sre({sessionid:o,text:t,model:r,workspace:a,permissionmode:s,systemprompt:i,env:n={},resumeclisessionid:e,onclisessionid:u,onpermissionrequest:c,oninitcapabilities:h,mcpconfig:d,adddirs:g,allowedtools:y,providerenv:v,signal:_}){let b=wre();if(!b){yield xr("error","\u627e\u4e0d\u5230 coder \u53ef\u6267\u884c\u6587\u4ef6\uff0c\u8bf7\u786e\u8ba4\u5df2\u5b89\u88c5");return}let w=typeof c=="function",t=["claude","

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/coder.jsView on unpkg

1Cross-file remote execution chain: dist/coder.js spawns dist/cowork.js; helper contains network access plus dynamic code execution. L1: #!/usr/bin/env node L2: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... L3: `);return}typeof t=="string"?process.stdout.write(t+` ... L7: `),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME|

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/coder.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/coder.js L1: #!/usr/bin/env node L2: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... L3: `);return}typeof t=="string"?process.stdout.write(t+` ... L7: `),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME||process.env.CODER_DA...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/coder.jsView on unpkg · L1

1Trigger-reachable persistence chain: manifest.main -> dist/coder.js L1: #!/usr/bin/env node L2: var TH=Object.create;var DT=Object.defineProperty;var xH=Object.getOwnPropertyDescriptor;var EH=Object.getOwnPropertyNames;var PH=Object.getPrototypeOf,qH=Object.prototype.hasOwnPr... L3: `);return}typeof t=="string"?process.stdout.write(t+` ... L7: `),r&&process.stderr.write(`Hint: ${r} L8: `)}};UT.exports={CoderContext:Dg,DEFAULT_BASE_URL:NT}});var Lg=q((KPe,GT)=>{"use strict";function AH(o,t){return Object.prototype.hasOwnProperty.call(o||{},t)}function CH({defaults... L9: `);HT.exports={CODER_RUNTIME_PROMPT:zH}});var Rr=q((XPe,VT)=>{"use strict";var DH=require("os"),Cr=require("path");function yn(){let o=process.env.COWORK_HOME||process.env.CODER_DA... L10: `;try{s.write(c),wr&&(wr.bytes+=Bu

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/coder.jsView on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/coder.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/coder.jsView on unpkg

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/coder.jsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/coder.jsView on unpkg · L1

dist/zod/v4-mini/index.cjsView file

16Object.defineProperty(exports, "__esModule", { value: true }); L17: __exportStar(require("../v4/mini/index.cjs"), exports);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/zod/v4-mini/index.cjsView on unpkg · L16

dist/linux-arm64/image-processor.nodeView file

•path = dist/linux-arm64/image-processor.node kind = native_binary sizeBytes = 1275037 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/linux-arm64/image-processor.nodeView on unpkg

dist/linux-arm64/template.html-29543a01.txt.zstView file

•path = dist/linux-arm64/template.html-29543a01.txt.zst kind = compressed_blob sizeBytes = 18373 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/linux-arm64/template.html-29543a01.txt.zstView on unpkg

dist/gemini/chunk-GYTCBA2A.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-GYTCBA2A.jsView on unpkg

•path = dist/gemini/chunk-GYTCBA2A.js kind = oversized_source_file sizeBytes = 7983738 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/gemini/chunk-GYTCBA2A.jsView on unpkg

dist/gemini/bundled/chrome-devtools-mcp.mjsView file

•path = dist/gemini/bundled/chrome-devtools-mcp.mjs kind = oversized_cli_entrypoint sizeBytes = 11625049 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/gemini/bundled/chrome-devtools-mcp.mjsView on unpkg

dist/cowork.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cowork.jsView on unpkg

dist/gemini/bundled/third_party/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/bundled/third_party/index.jsView on unpkg

dist/gemini/chunk-3G5WCY2I.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-3G5WCY2I.jsView on unpkg

dist/gemini/chunk-7LN472KC.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-7LN472KC.jsView on unpkg

dist/gemini/chunk-PE6GLDYB.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-PE6GLDYB.jsView on unpkg

scripts/postinstall.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

dist/codex.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/codex.mjsView on unpkg

dist/gemini/chunk-2RNP2FS2.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-2RNP2FS2.jsView on unpkg

dist/gemini/chunk-ITDN6TZ7.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-ITDN6TZ7.jsView on unpkg

dist/gemini/chunk-UABHUQM5.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-UABHUQM5.jsView on unpkg

Findings

3 Critical26 High10 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationdist/coder.js

CriticalRemote Asset Decode Executedist/coder.js

CriticalTrigger Reachable Dangerous Capabilitydist/coder.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/coder.js

HighShelldist/coder.js

HighSame File Env Network Executiondist/coder.js

HighHost Fingerprint Exfiltrationdist/coder.js

HighCredential Redirect Persistencedist/coder.js

HighCommand Output Exfiltrationdist/coder.js

HighSandbox Evasion Gated Capabilitydist/coder.js

HighCopied Package Dependency Bridgedist/coder.js

HighExternal Ai Agent Control Surface Mutationdist/coder.js

HighCross File Remote Execution Contextdist/coder.js

HighTrigger Reachable Command Output Exfiltrationdist/coder.js

HighTrigger Reachable Persistencedist/coder.js

HighSemantic Analysis Limiteddist/coder.js

HighKnown Malware Source Similaritydist/coder.js

HighKnown Malware Source Similaritydist/cowork.js

HighKnown Malware Source Similaritydist/gemini/bundled/third_party/index.js

HighKnown Malware Source Similaritydist/gemini/chunk-3G5WCY2I.js

HighKnown Malware Source Similaritydist/gemini/chunk-7LN472KC.js

HighKnown Malware Source Similaritydist/gemini/chunk-GYTCBA2A.js

HighKnown Malware Source Similaritydist/gemini/chunk-PE6GLDYB.js

HighKnown Malware Source Similarityscripts/postinstall.js

HighKnown Malware Source Similaritydist/codex.mjs

HighKnown Malware Source Similaritydist/gemini/chunk-2RNP2FS2.js

HighKnown Malware Source Similaritydist/gemini/chunk-ITDN6TZ7.js

HighKnown Malware Source Similaritydist/gemini/chunk-UABHUQM5.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/zod/v4-mini/index.cjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/coder.js

MediumShips Native Binarydist/linux-arm64/image-processor.node

MediumShips Compressed Blobdist/linux-arm64/template.html-29543a01.txt.zst

MediumOversized Source Filedist/gemini/chunk-GYTCBA2A.js

MediumOversized Cli Entrypointdist/gemini/bundled/chrome-devtools-mcp.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowWeak Cryptodist/coder.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

37 flagged

package.jsonView file

Lines 1-36json

2 "name": "makecoder",

3 "version": "5.0.3",

4 "description": "MakeCoder Coder: AI Agent Runtime OS that runs and orchestrates Claude Code, Codex, Gemini and more across CLI, API, Web and chat",

5 "main": "./dist/coder.js",

6 "bin": {

7 "coder": "./dist/coder.js",

8 "cowork": "./dist/cowork.js"

9 },

10 "scripts": {

11 "test": "node --test test/*.test.js",

12 "start": "node ./src/coder.js",

13 "build": "node scripts/build.js",

14 "build:clean": "node scripts/build.js --clean",

15 "build:dev": "node scripts/build.js --no-minify --sourcemap",

16 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 },

18 "keywords": [

19 "ai-agent-runtime",

20 "agent-os",

21 "ai",

22 "cli",

23 "claude",

24 "gemini",

25 "codex",

26 "agent",

27 "orchestration",

28 "llm"

29 ],

30 "author": "makecoder",

31 "license": "MIT",

32 "repository": {

33 "type": "git",

34 "url": "https://github.com/makecoderai/coder.git"

35 },

36 "homepage": "https://github.com/makecoderai/coder",

dist/coder.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/coder.jsView on unpkg · L1

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/coder.jsView on unpkg · L39

dist/zod/v4-mini/index.cjsView file

Lines 1-18javascript

1"use strict";

2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {

dist/linux-arm64/image-processor.nodeView file

•path = dist/linux-arm64/image-processor.node kind = native_binary sizeBytes = 1275037 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/linux-arm64/image-processor.nodeView on unpkg

dist/linux-arm64/template.html-29543a01.txt.zstView file

•path = dist/linux-arm64/template.html-29543a01.txt.zst kind = compressed_blob sizeBytes = 18373 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/linux-arm64/template.html-29543a01.txt.zstView on unpkg

dist/gemini/chunk-GYTCBA2A.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-GYTCBA2A.jsView on unpkg

•path = dist/gemini/chunk-GYTCBA2A.js kind = oversized_source_file sizeBytes = 7983738 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/gemini/chunk-GYTCBA2A.jsView on unpkg

dist/gemini/bundled/chrome-devtools-mcp.mjsView file

•path = dist/gemini/bundled/chrome-devtools-mcp.mjs kind = oversized_cli_entrypoint sizeBytes = 11625049 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/gemini/bundled/chrome-devtools-mcp.mjsView on unpkg

dist/cowork.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cowork.jsView on unpkg

dist/gemini/bundled/third_party/index.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/bundled/third_party/index.jsView on unpkg

dist/gemini/chunk-3G5WCY2I.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-3G5WCY2I.jsView on unpkg

dist/gemini/chunk-7LN472KC.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-7LN472KC.jsView on unpkg

dist/gemini/chunk-PE6GLDYB.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-PE6GLDYB.jsView on unpkg

scripts/postinstall.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

dist/codex.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/codex.mjsView on unpkg

dist/gemini/chunk-2RNP2FS2.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-2RNP2FS2.jsView on unpkg

dist/gemini/chunk-ITDN6TZ7.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-ITDN6TZ7.jsView on unpkg

dist/gemini/chunk-UABHUQM5.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/gemini/chunk-UABHUQM5.jsView on unpkg

makecoder@5.0.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code