moflo@4.12.4: Suspicious npm security report (Warn)

Loading npm security reports…

moflo@4.12.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

17 flagged

package.jsonView file

Lines 33-73json

33 "!**/__tests__/**",

34 ".claude/commands/**/*.md",

35 ".claude/agents/**/*.md",

36 ".claude/helpers/**",

37 ".claude/guidance/shipped/**",

38 ".claude/skills/**/*.md",

39 "!.claude/**/*.db",

40 "!.claude/**/*.map",

41 "README.md",

42 "LICENSE",

43 "retired-files.json",

44 "scripts/prune-native-binaries.mjs",

45 "scripts/post-install-notice.mjs",

46 "scripts/post-install-bootstrap.mjs"

47 ],

48 "scripts": {

49 "dev": "tsx watch src/cli/index.ts",

50 "prebuild": "node scripts/sync-version.mjs && node scripts/clean-dist.mjs",

51 "build": "tsc",

52 "prepublishOnly": "npm run build",

53 "postinstall": "node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 "test": "node scripts/test-runner.mjs",

55 "test:ui": "vitest --ui",

56 "test:smoke": "node harness/consumer-smoke/run.mjs",

57 "test:smoke:populated": "node harness/consumer-smoke/run-populated.mjs",

58 "bench": "vitest run --config vitest.bench.config.ts",

59 "lint": "eslint src/ bin/ .claude/scripts/ --max-warnings 0",

60 "security:audit": "npm audit --omit=dev --audit-level high",

61 "security:fix": "npm audit fix",

62 "version": "node scripts/sync-version.mjs && git add src/cli/version.ts",

63 "flo": "node bin/cli.js"

64 },

65 "dependencies": {

66 "@anush008/tokenizers": "^0.6.0",

67 "@modelcontextprotocol/sdk": "^1.30.0",

68 "js-yaml": "^5.2.0",

69 "lru-cache": "^11.3.5",

70 "onnxruntime-node": "^1.27.0",

71 "semver": "^7.7.4",

72 "tar": "^7.5.16",

73 "valibot": "^1.3.1"

dist/src/cli/guidance/analyzer.jsView file

Lines 1264-1304javascript

1264 { type: 'must-contain', value: 'build', severity: 'critical' },

1265 ],

1266 weight: 0.35,

1267 },

1268 {

bin/generate-code-map.mjsView file

Lines 10-50javascript

10 * 5. file: — ONE PER FILE with exported types (file-level granularity)

11 *

12 * The `file:` entries are the key improvement — they enable precise semantic search

bin/hooks.mjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/**

3 * Cross-platform Claude Code hook runner

4 * Works on Windows (cmd/powershell) and Linux/WSL (bash)

5 *

High

Shell

Package source references shell execution.

bin/hooks.mjsView on unpkg · L3

6 * Usage: node .claude/scripts/hooks.mjs <hook-type> [args...]

7 *

8 * Hook types:

9 * pre-edit --file <path>

bin/run-migrations.mjsView file

Lines 41-81javascript

41 const manifest = listMigrations(projectRoot);

42 const keys = Object.keys(manifest);

43 if (keys.length === 0

bin/lib/file-sync.mjsView file

Lines 1-21javascript

1/**

2 * Shared file-sync helper for the launcher (#854 §3) and the postinstall

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/lib/file-sync.mjsView on unpkg · L1

3 * bootstrap (#857 / #975).

4 *

5 * Both layers used to inline the same retry/breaker + copy logic. They drifted

6 * once already (the bootstrap added hash-skip + atomic tmp+rename for #975

7 * while the launcher kept the bare copyFileSync), so this module is the single

8 * source of truth.

dist/src/cli/services/daemon-service.jsView file

8* - Linux: systemd --user unit in ~/.config/systemd/user/ L9: * - Windows: Task Scheduler ONLOGON trigger via schtasks L10: */ ... L14: import { homedir } from 'os'; L15: import { execSync } from 'child_process'; L16: import { locateMofloCliBin } from './moflo-require.js'; ... L31: const resolvedRoot = resolve(projectRoot); L32: const platform = process.platform; L33: if (platform === 'darwin') { ... L93: const slug = projectRootSlug(projectRoot); L94: return join(homedir(), 'Library', 'LaunchAgents', `${PLIST_LABEL}.${slug}.plist`); L95: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/cli/services/daemon-service.jsView on unpkg · L8

bin/setup-project.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: const { generateclaudemd } = await import(moflointernalurl('dist/src/cli/init/claudemd-generator.js')); const { applyinjectionreplacement, computeinjectiondrift } = await import( moflointernalurl('dist/src/cli/services/claudemd-injection.js') ); const args = process.argv.slice(2); const updateonly = args.includes('--update'); const checkonly = args.includes('--check'); const claude_md_section = generateclaudemd({}).trimend(); function log(msg) { console.log(`[flo-setup] ${msg}`); } function findprojectroot() {

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/setup-project.mjsView on unpkg

dist/src/cli/update/executor.jsView file

62// Execute npm install L63: const installCmd = `npm install ${update.package}@${update.latestVersion} --save-exact`; L64: execSync(installCmd, { L65: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cli/update/executor.jsView on unpkg · L62

bin/lib/daemon-recycler.mjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.10.29 matchedPath = bin/lib/daemon-recycler.mjs matchedIdentity = npm:bW9mbG8:4.10.29 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/daemon-recycler.mjsView on unpkg

bin/meditate-distill.mjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.10.29 matchedPath = bin/meditate-distill.mjs matchedIdentity = npm:bW9mbG8:4.10.29 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/meditate-distill.mjsView on unpkg

bin/simplify-classify.cjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.10.29 matchedPath = bin/simplify-classify.cjs matchedIdentity = npm:bW9mbG8:4.10.29 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/simplify-classify.cjsView on unpkg

dist/src/cli/guidance/headless.jsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.10.29 matchedPath = dist/src/cli/guidance/headless.js matchedIdentity = npm:bW9mbG8:4.10.29 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/guidance/headless.jsView on unpkg

Source & flagged code

17 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/src/cli/guidance/analyzer.jsView file

1284patternName = generic_password severity = medium line = 1284 matchedText = { type: ...' },

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/cli/guidance/analyzer.jsView on unpkg · L1284

2067patternName = generic_password severity = medium line = 2067 matchedText = { type: ...' },

Medium

Secret Pattern

Hardcoded password in dist/src/cli/guidance/analyzer.js

dist/src/cli/guidance/analyzer.jsView on unpkg · L2067

2043{ type: 'must-match-pattern', value: 'escape|validate|regex|filter', severity: 'major' }, L2044: { type: 'must-not-contain', value: 'eval(', severity: 'critical' }, L2045: ],

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/cli/guidance/analyzer.jsView on unpkg · L2043

bin/generate-code-map.mjsView file

30import { fileURLToPath } from 'url'; L31: import { execSync, execFileSync, spawn } from 'child_process'; L32: import { memoryDbPath, MOFLO_DIR, findProjectRoot } from './lib/moflo-paths.mjs';

High

Child Process

Package source references child process execution.

bin/generate-code-map.mjsView on unpkg · L30

bin/hooks.mjsView file

3* Cross-platform Claude Code hook runner L4: * Works on Windows (cmd/powershell) and Linux/WSL (bash) L5: *

High

Shell

Package source references shell execution.

bin/hooks.mjsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = moflo@4.10.29 matchedPath = bin/hooks.mjs matchedIdentity = npm:bW9mbG8:4.10.29 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/hooks.mjsView on unpkg

bin/run-migrations.mjsView file

61try { L62: const mod = await import(url); L63: if (mod && typeof mod.run === 'function' && typeof mod.name === 'string') {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/run-migrations.mjsView on unpkg · L61

bin/lib/file-sync.mjsView file

1/** L2: * Shared file-sync helper for the launcher (#854 §3) and the postinstall

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/lib/file-sync.mjsView on unpkg · L1

dist/src/cli/services/daemon-service.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/cli/services/daemon-service.jsView on unpkg · L8

bin/setup-project.mjsView file

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/setup-project.mjsView on unpkg

dist/src/cli/update/executor.jsView file

62// Execute npm install L63: const installCmd = `npm install ${update.package}@${update.latestVersion} --save-exact`; L64: execSync(installCmd, { L65: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cli/update/executor.jsView on unpkg · L62

bin/lib/daemon-recycler.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/daemon-recycler.mjsView on unpkg

bin/meditate-distill.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/meditate-distill.mjsView on unpkg

bin/simplify-classify.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/simplify-classify.cjsView on unpkg

dist/src/cli/guidance/headless.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/guidance/headless.jsView on unpkg

Source & flagged code

17 flagged

package.jsonView file

Lines 33-73json

33 "!**/__tests__/**",

34 ".claude/commands/**/*.md",

35 ".claude/agents/**/*.md",

36 ".claude/helpers/**",

37 ".claude/guidance/shipped/**",

38 ".claude/skills/**/*.md",

39 "!.claude/**/*.db",

40 "!.claude/**/*.map",

41 "README.md",

42 "LICENSE",

43 "retired-files.json",

44 "scripts/prune-native-binaries.mjs",

45 "scripts/post-install-notice.mjs",

46 "scripts/post-install-bootstrap.mjs"

47 ],

48 "scripts": {

49 "dev": "tsx watch src/cli/index.ts",

50 "prebuild": "node scripts/sync-version.mjs && node scripts/clean-dist.mjs",

51 "build": "tsc",

52 "prepublishOnly": "npm run build",

53 "postinstall": "node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 "test": "node scripts/test-runner.mjs",

55 "test:ui": "vitest --ui",

56 "test:smoke": "node harness/consumer-smoke/run.mjs",

57 "test:smoke:populated": "node harness/consumer-smoke/run-populated.mjs",

58 "bench": "vitest run --config vitest.bench.config.ts",

59 "lint": "eslint src/ bin/ .claude/scripts/ --max-warnings 0",

60 "security:audit": "npm audit --omit=dev --audit-level high",

61 "security:fix": "npm audit fix",

62 "version": "node scripts/sync-version.mjs && git add src/cli/version.ts",

63 "flo": "node bin/cli.js"

64 },

65 "dependencies": {

66 "@anush008/tokenizers": "^0.6.0",

67 "@modelcontextprotocol/sdk": "^1.30.0",

68 "js-yaml": "^5.2.0",

69 "lru-cache": "^11.3.5",

70 "onnxruntime-node": "^1.27.0",

71 "semver": "^7.7.4",

72 "tar": "^7.5.16",

73 "valibot": "^1.3.1"

dist/src/cli/guidance/analyzer.jsView file

Lines 1264-1304javascript

1264 { type: 'must-contain', value: 'build', severity: 'critical' },

1265 ],

1266 weight: 0.35,

1267 },

1268 {

bin/generate-code-map.mjsView file

Lines 10-50javascript

10 * 5. file: — ONE PER FILE with exported types (file-level granularity)

11 *

12 * The `file:` entries are the key improvement — they enable precise semantic search

bin/hooks.mjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/**

3 * Cross-platform Claude Code hook runner

4 * Works on Windows (cmd/powershell) and Linux/WSL (bash)

5 *

High

Shell

Package source references shell execution.

bin/hooks.mjsView on unpkg · L3

6 * Usage: node .claude/scripts/hooks.mjs <hook-type> [args...]

7 *

8 * Hook types:

9 * pre-edit --file <path>

bin/run-migrations.mjsView file

Lines 41-81javascript

41 const manifest = listMigrations(projectRoot);

42 const keys = Object.keys(manifest);

43 if (keys.length === 0

bin/lib/file-sync.mjsView file

Lines 1-21javascript

1/**

2 * Shared file-sync helper for the launcher (#854 §3) and the postinstall

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/lib/file-sync.mjsView on unpkg · L1

3 * bootstrap (#857 / #975).

4 *

5 * Both layers used to inline the same retry/breaker + copy logic. They drifted

6 * once already (the bootstrap added hash-skip + atomic tmp+rename for #975

7 * while the launcher kept the bare copyFileSync), so this module is the single

8 * source of truth.

dist/src/cli/services/daemon-service.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/cli/services/daemon-service.jsView on unpkg · L8

bin/setup-project.mjsView file

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/setup-project.mjsView on unpkg

dist/src/cli/update/executor.jsView file

62// Execute npm install L63: const installCmd = `npm install ${update.package}@${update.latestVersion} --save-exact`; L64: execSync(installCmd, { L65: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cli/update/executor.jsView on unpkg · L62

bin/lib/daemon-recycler.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/daemon-recycler.mjsView on unpkg

bin/meditate-distill.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/meditate-distill.mjsView on unpkg

bin/simplify-classify.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/simplify-classify.cjsView on unpkg

dist/src/cli/guidance/headless.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/guidance/headless.jsView on unpkg

Lines 2023-2063javascript

2023 },

2024 {

2025 id: 'refactor-consolidate-validators',

2026 description: 'Consolidate duplicate validation helpers',

2027 taskClass: 'refactor',

2028 prompt: 'Consolidate the duplicate assertion evaluation functions across analyzer and headless modules into a shared validation utility.',

2029 assertions: [

2030 { type: 'must-match-pattern', value: 'shared|common|util|helper', severity: 'major' },

2031 { type: 'must-contain', value: 'test', severity: 'major' },

2032 ],

2033 gatePatterns: [missingTestGate, destructiveGate, policyGate],

2034 },

2035 // ── Security (3 tasks) ────────────────────────────────────────────

2036 {

2037 id: 'security-cli-input-sanitize',

2038 description: 'Sanitize user input in CLI arguments',

2039 taskClass: 'security',

2040 prompt: 'Add input sanitization for all CLI arguments to prevent command injection. Never pass unsanitized user input to shell commands.',

2041 assertions: [

2042 { type: 'must-contain', value: 'sanitiz', severity: 'critical' },

2043 { type: 'must-match-pattern', value: 'escape|validate|regex|filter', severity: 'major' },

2044 { type: 'must-not-contain', value: 'eval(', severity: 'critical' },

2045 ],

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/cli/guidance/analyzer.jsView on unpkg · L2043

2046 gatePatterns: [destructiveGate, secretGate, policyGate],

2047 },

2048 {

2049 id: 'security-hmac-verification',

2050 description: 'Add HMAC verification to proof chain',

2051 taskClass: 'security',

2052 prompt: 'Implement HMAC-SHA256 verification for proof chain envelopes. Reject any envelope that fails signature verification.',

2053 assertions: [

2054 { type: 'must-match-pattern', value: 'hmac|sha256|verify|signature', severity: 'critical' },

2055 { type: 'must-contain', value: 'reject', severity: 'major' },

2056 ],

2057 gatePatterns: [secretGate, policyGate],

2058 },

2059 {

2060 id: 'security-secret-scanning',

2061 description: 'Implement secret scanning for committed files',

2062 taskClass: 'security',

2063 prompt: 'Build a secret scanner that detects hardcoded passwords, API keys, and credentials in staged files before commit.',

moflo@4.12.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code