Loading npm security reports…

morphyagent@0.3.9: Suspicious npm security report (Warn) | LPM Firewall

registry / morphyagent / 0.3.9

morphyagent@0.3.9

Self-hosted, self-evolving AI agent with its own dashboard.

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 429 file(s), 11.6 MB of source, external domains: 127.0.0.1, aistudio.google.com, api.anthropic.com, api.cerebras.ai, api.deepseek.com, api.groq.com, api.mistral.ai, api.morphyagent.com, api.openai.com, api.telegram.org, api.x.ai, auth.openai.com, cdn.jsdelivr.net, claude.ai, cloud.cerebras.ai, console.anthropic.com, console.groq.com, console.mistral.ai, console.x.ai, example.com, fonts.googleapis.com, fonts.gstatic.com, generativelanguage.googleapis.com, github.com, morphyagent.com, ollama.com, openrouter.ai, platform.deepseek.com, platform.openai.com, react.dev, registry.npmjs.org, rpc.tempo.xyz, t.me, www.ibm.com, www.morphyagent.com, www.w3.org

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist-chat/assets/cobol-hBjMZW-R.jsView file

1import{t as e}from"./html-CzX0w7K_.js";import{t}from"./java-BqKEu7zh.js";var n=Object.freeze(JSON.parse(`{"displayName":"COBOL","fileTypes":["ccp","scbl","cobol","cbl","cblle","cbl...

High

Child Process

Package source references child process execution.

dist-chat/assets/cobol-hBjMZW-R.jsView on unpkg · L1

dist-chat/assets/codeql-DlIhJTR7.jsView file

1var e=[Object.freeze(JSON.parse(`{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\b...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-chat/assets/codeql-DlIhJTR7.jsView on unpkg · L1

supervisor/index.tsView file

1import http from 'http'; L2: import net from 'net'; ... L26: import { ensureFileDirs, saveAttachment, saveAudio, MAX_ATTACHMENTS_PER_MESSAGE, MAX_TOTAL_ATTACHMENT_BYTES, type SavedFile } from './file-saver.js'; L27: import { approxBase64Bytes } from './harnesses/attachment-policy.js'; L28: import { startViteDevServers, stopViteDevServers } from './vite-dev.js'; L29: import { startScheduler, stopScheduler, readPulseConfig, readCronsConfig, nextRunISO, describeCron } from './scheduler.js'; L30: import { execSync, spawn as cpSpawn } from 'child_process'; L31: import crypto from 'crypto'; ... L83: // fixed token budget. Auto-compaction stays on as the in-turn safety net. L84: const CONTEXT_RECYCLE_TOKENS = Number(process.env.MORPHY_CONTEXT_RECYCLE_TOKENS) || 140_000; L85: const CONTEXT_REC

Low

Weak Crypto

Package source references weak cryptographic algorithms.

supervisor/index.tsView on unpkg · L1

bin/cli.jsView file

99ensureNpmrc(ROOT); L100: execSync('npm install --omit=dev', { cwd: ROOT, stdio: 'inherit' }); L101: } catch {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.jsView on unpkg · L99

12// - The supervisor writes ~/.morphy/supervisor.json at boot (pid/startedAt/ L13: // version/port). That pidfile — not launchctl/systemctl alone — is the L14: // source of truth for "is Morphy running", so status/logs can never show a ... L20: // hosted provisioning: `cli.js init --hosted` → __HOSTED_READY__=<json>. L21: // foreground boot parses supervisor stdout markers __READY__, L22: // __TUNNEL_URL__=, __RELAY_URL__=, __VITE_WARM__, __TUNNEL_FAILED__. ... L25: L26: import { spawn, spawnSync, execSync, execFileSync } from 'child_process'; L27: import fs from 'fs'; ... L32: L33: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L34:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/cli.jsView on unpkg · L12

workspace/client/public/morphy_bounce.webmView file

•path = workspace/client/public/morphy_bounce.webm kind = high_entropy_blob sizeBytes = 645337 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

workspace/client/public/morphy_bounce.webmView on unpkg

bin/cli.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3// ─────────────────────────────────────────────────────────────────────────────

4// Morphy CLI — single entry point for the morphy command.

5//

6// Design rules (load-bearing — do not break):

7// - ZERO npm deps at top level. This file must run even when ~/.morphy's

8// node_modules is broken, because it IS the recovery tool (self-heal below).

9// - Every command daemonizes and returns the terminal. The only foreground

10// paths are `start --foreground` (debug) and platforms with no daemon

11// support (Windows, containers without systemd) — incl. `init --hosted`.

12// - The supervisor writes ~/.morphy/supervisor.json at boot (pid/startedAt/

13// version/port). That pidfile — not launchctl/systemctl alone — is the

14// source of truth for "is Morphy running", so status/logs can never show a

15// process that isn't alive anymore, regardless of how it was launched.

16// - Contracts preserved for external callers:

17// supervisor self-update: `cli.js update` + MORPHY_SELF_UPDATE=1 → exit 0

18// on success-or-already-latest, never touches the daemon, headless-safe.

19// supervisor relaunch: `cli.js daemon restart` detached, no TTY.

20// hosted provisioning: `cli.js init --hosted` → __HOSTED_READY__=<json>.

21// foreground boot parses supervisor stdout markers __READY__,

22// __TUNNEL_URL__=, __RELAY_URL__=, __VITE_WARM__, __TUNNEL_FAILED__.

23// env: MORPHY_NODE_PATH, MORPHY_REAL_HOME, SUDO_USER, MORPHY_SELF_UPDATE.

24// ─────────────────────────────────────────────────────────────────────────────

25

26import { spawn, spawnSync, execSync, execFileSync } from 'child_process';

27import fs from 'fs';

28import path from 'path';

29import os from 'os';

30import readline from 'readline';

31import { fileURLToPath, pathToFileURL } from 'url';

32

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/cli.jsView on unpkg · L12

Lines 79-119javascript

79}

80

81// ── Ensure dependencies exist (self-heal if postinstall/update npm install failed) ──

82// Check every declared dep, not just one sentinel: a release that adds a new

83// dep would otherwise silently boot into an `ERR_MODULE_NOT_FOUND` crash loop.

84function missingDeps(root) {

85 let deps;

86 try {

87 deps =