min-agent@0.7.9: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

min-agent@0.7.9: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

6 flagged · loading source

dist/cli.jsView file

1Source sends the broad process environment to a literal external destination. L1: import{createRequire as Z9}from"node:module";var $9=Object.create;var{getPrototypeOf:W9,defineProperty:ab,getOwnPropertyNames:J9}=Object;var K9=Object.prototype.hasOwnProperty;func... L2: `)}displayWidth(e){return i_(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map((t)=>{if(t==="[options]")return this.styleOptionText(t);if(t==="[command]")retur... ... L12: (Did you mean one of ${r.join(", ")}?)`;if(r.length===1)return` L13: (Did you mean ${r[0]}?)`;return""}CY.suggestSimilar=EY});var d_=Zt(function(DY){var IY=Cn("node:events").EventEmitter,Ab=Cn("node:child_process"),Qa=Cn("node:path"),$m=Cn("node:fs"... L14: - specify the name in Command constructor or using .name()`);if(t=t||{},t.isDef

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli.jsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = min-agent@0.7.1 matchedIdentity = npm:bWluLWFnZW50:0.7.1 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

25Expecting one of '${n.join("', '")}'`);let r=`${e}Help`;return this.on(r,(o)=>{let a;if(typeof t==="function")a=t({error:o.error,command:o.command});else a=t;if(a)o.write(`${a} L26: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();if(t&&e.find((r)=>t.is(r)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function f_(e){... L27: `),n=__().map((o)=>`(subpath ${w_(hn.resolve(o))})`).join(` ... L39: `}function P_(){if(EA("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function U_(e,t,n){let r=["--die-with-parent","--ro-bind","/","/","--dev","/dev","--proc... L40: ${S_}`:D_,u}function Gd(e){return e==="off"?"off":e==="strict"?"strict":"workspace"}function G_(e){return e==="deny"?"network denied":"network allowed"}function Hd(e=

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L25

24`),this._exit(0,"commander.version",e)}),this}description(e,t){if(e===void 0&&t===void 0)return this._description;if(this._description=e,t)this._argsDescription=t;return this}summa... L25: Expecting one of '${n.join("', '")}'`);let r=`${e}Help`;return this.on(r,(o)=>{let a;if(typeof t==="function")a=t({error:o.error,command:o.command});else a=t;if(a)o.write(`${a} L26: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();if(t&&e.find((r)=>t.is(r)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function f_(e){... L27: `),n=__().map((o)=>`(subpath ${w_(hn.resolve(o))})`).join(` ... L39: `}function P_(){if(EA("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function U_(e,t,n){let r=["--die-with-parent","--ro-bind","/","/","--dev",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L24

24Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/min-agent.js -> dist/cli.js L24: `),this._exit(0,"commander.version",e)}),this}description(e,t){if(e===void 0&&t===void 0)return this._description;if(this._description=e,t)this._argsDescription=t;return this}summa... L25: Expecting one of '${n.join("', '")}'`);let r=`${e}Help`;return this.on(r,(o)=>{let a;if(typeof t==="function")a=t({error:o.error,command:o.command});else a=t;if(a)o.write(`${a} L26: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();if(t&&e.find((r)=>t.is(r)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function f_(e){... L27: `),n=__().map((o)=>`(subpath ${w_(hn.resolve(o))})`).join(` ... L39: `}function P_(){if(EA("/usr/bin/bwrap"))return"/usr/bin/bwrap";re

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L24

93`)});var J1={};en(J1,{runWriteConfig:()=>t5});async function t5(e){let t=[],n=!0;if(e.sandbox!==void 0||e.network!==void 0){let r=kE({positionals:[],flagMode:e.sandbox,flagNetwork:... L94: `)),!n)process.exitCode=1}var K1=U(()=>{kx();Tx();Rx();Mx()});function OE(e,t,n){let r=e==="openai"?"openai":e==="ollama"?"ollama":n5(t)??"provider";return r5(r,n)}function LE(e){l... L95:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L93

Source & flagged code

6 flagged

dist/cli.jsView file

1Source sends the broad process environment to a literal external destination. L1: import{createRequire as Z9}from"node:module";var $9=Object.create;var{getPrototypeOf:W9,defineProperty:ab,getOwnPropertyNames:J9}=Object;var K9=Object.prototype.hasOwnProperty;func... L2: `)}displayWidth(e){return i_(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map((t)=>{if(t==="[options]")return this.styleOptionText(t);if(t==="[command]")retur... ... L12: (Did you mean one of ${r.join(", ")}?)`;if(r.length===1)return` L13: (Did you mean ${r[0]}?)`;return""}CY.suggestSimilar=EY});var d_=Zt(function(DY){var IY=Cn("node:events").EventEmitter,Ab=Cn("node:child_process"),Qa=Cn("node:path"),$m=Cn("node:fs"... L14: - specify the name in Command constructor or using .name()`);if(t=t||{},t.isDef

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/cli.jsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = min-agent@0.7.1 matchedIdentity = npm:bWluLWFnZW50:0.7.1 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

25Expecting one of '${n.join("', '")}'`);let r=`${e}Help`;return this.on(r,(o)=>{let a;if(typeof t==="function")a=t({error:o.error,command:o.command});else a=t;if(a)o.write(`${a} L26: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();if(t&&e.find((r)=>t.is(r)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function f_(e){... L27: `),n=__().map((o)=>`(subpath ${w_(hn.resolve(o))})`).join(` ... L39: `}function P_(){if(EA("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function U_(e,t,n){let r=["--die-with-parent","--ro-bind","/","/","--dev","/dev","--proc... L40: ${S_}`:D_,u}function Gd(e){return e==="off"?"off":e==="strict"?"strict":"workspace"}function G_(e){return e==="deny"?"network denied":"network allowed"}function Hd(e=

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L25

24`),this._exit(0,"commander.version",e)}),this}description(e,t){if(e===void 0&&t===void 0)return this._description;if(this._description=e,t)this._argsDescription=t;return this}summa... L25: Expecting one of '${n.join("', '")}'`);let r=`${e}Help`;return this.on(r,(o)=>{let a;if(typeof t==="function")a=t({error:o.error,command:o.command});else a=t;if(a)o.write(`${a} L26: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();if(t&&e.find((r)=>t.is(r)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function f_(e){... L27: `),n=__().map((o)=>`(subpath ${w_(hn.resolve(o))})`).join(` ... L39: `}function P_(){if(EA("/usr/bin/bwrap"))return"/usr/bin/bwrap";return"/usr/local/bin/bwrap"}function U_(e,t,n){let r=["--die-with-parent","--ro-bind","/","/","--dev",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L24

24Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/min-agent.js -> dist/cli.js L24: `),this._exit(0,"commander.version",e)}),this}description(e,t){if(e===void 0&&t===void 0)return this._description;if(this._description=e,t)this._argsDescription=t;return this}summa... L25: Expecting one of '${n.join("', '")}'`);let r=`${e}Help`;return this.on(r,(o)=>{let a;if(typeof t==="function")a=t({error:o.error,command:o.command});else a=t;if(a)o.write(`${a} L26: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();if(t&&e.find((r)=>t.is(r)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function f_(e){... L27: `),n=__().map((o)=>`(subpath ${w_(hn.resolve(o))})`).join(` ... L39: `}function P_(){if(EA("/usr/bin/bwrap"))return"/usr/bin/bwrap";re

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/cli.jsView on unpkg · L24

93`)});var J1={};en(J1,{runWriteConfig:()=>t5});async function t5(e){let t=[],n=!0;if(e.sandbox!==void 0||e.network!==void 0){let r=kE({positionals:[],flagMode:e.sandbox,flagNetwork:... L94: `)),!n)process.exitCode=1}var K1=U(()=>{kx();Tx();Rx();Mx()});function OE(e,t,n){let r=e==="openai"?"openai":e==="ollama"?"ollama":n5(t)??"provider";return r5(r,n)}function LE(e){l... L95:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L93