mercury-agent@0.6.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

mercury-agent@0.6.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

resources/pi-extensions/subagent/index.tsView file

14L15: import { spawn } from "node:child_process"; L16: import * as fs from "node:fs";

High

Child Process

Package source references child process execution.

resources/pi-extensions/subagent/index.tsView on unpkg · L14

examples/extensions/pinchtab/index.tsView file

10install: L11: 'npm install -g pinchtab@0.13.2 playwright && npx playwright install --with-deps chromium && CHROMIUM=$(NODE_PATH="$(npm root -g)" node -e "try{process.stdout.write(require(\'playw... L12: });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

examples/extensions/pinchtab/index.tsView on unpkg · L10

src/cli/mercury.tsView file

2L3: import { spawn, spawnSync } from "node:child_process"; L4: import { ... L33: L34: const __dirname = dirname(fileURLToPath(import.meta.url)); L35: const PACKAGE_ROOT = join(__dirname, "../.."); ... L57: function isPortInUse(port: string): boolean { L58: if (process.platform === "win32") { L59: const result = spawnSync("netstat", ["-ano"], { ... L62: }); L63: return result.status === 0 && result.stdout.includes(`:${port} `); L64: }

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

src/cli/mercury.tsView on unpkg · L2

2Trigger-reachable chain: manifest.bin -> src/cli/mercury.ts L2: L3: import { spawn, spawnSync } from "node:child_process"; L4: import { ... L33: L34: const __dirname = dirname(fileURLToPath(import.meta.url)); L35: const PACKAGE_ROOT = join(__dirname, "../.."); ... L57: function isPortInUse(port: string): boolean { L58: if (process.platform === "win32") { L59: const result = spawnSync("netstat", ["-ano"], { ... L62: }); L63: return result.status === 0 && result.stdout.includes(`:${port} `); L64: }

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/cli/mercury.tsView on unpkg · L2

•matchType = previous_version_dangerous_delta matchedPackage = mercury-agent@0.5.14 matchedIdentity = npm:bWVyY3VyeS1hZ2VudA:0.5.14 similarity = 0.843 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli/mercury.tsView on unpkg

2Cross-file remote execution chain: src/cli/mercury.ts spawns [redacted].ts; helper contains network access plus dynamic code execution. L2: L3: import { spawn, spawnSync } from "node:child_process"; L4: import { ... L33: L34: const __dirname = dirname(fileURLToPath(import.meta.url)); L35: const PACKAGE_ROOT = join(__dirname, "../.."); ... L57: function isPortInUse(port: string): boolean { L58: if (process.platform === "win32") { L59: const result = spawnSync("netstat", ["-ano"], { ... L62: }); L63: return result.status === 0 && result.stdout.includes(`:${port} `); L64: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

src/cli/mercury.tsView on unpkg · L2

2L3: import { spawn, spawnSync } from "node:child_process"; L4: import { ... L33: L34: const __dirname = dirname(fileURLToPath(import.meta.url)); L35: const PACKAGE_ROOT = join(__dirname, "../.."); ... L57: function isPortInUse(port: string): boolean { L58: if (process.platform === "win32") { L59: const result = spawnSync("netstat", ["-ano"], { ... L62: }); L63: return result.status === 0 && result.stdout.includes(`:${port} `); L64: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/cli/mercury.tsView on unpkg · L2

container/build.shView file

•path = container/build.sh kind = build_helper sizeBytes = 623 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

container/build.shView on unpkg

examples/extensions/pdf/skill/SKILL.mdView file

442patternName = generic_password severity = medium line = 442 matchedText = user_pas...ss",

Medium

Secret Pattern

Hardcoded password in examples/extensions/pdf/skill/SKILL.md

examples/extensions/pdf/skill/SKILL.mdView on unpkg · L442

443patternName = generic_password severity = medium line = 443 matchedText = owner_pa...ss",

Medium

Secret Pattern

Hardcoded password in examples/extensions/pdf/skill/SKILL.md

examples/extensions/pdf/skill/SKILL.mdView on unpkg · L443