Loading npm security reports…

natureco-cli@5.57.0: Suspicious npm security report (Warn) | LPM Firewall

registry / natureco-cli / 5.57.0

natureco-cli@5.57.0

⚠ Under review

OpenClaw'dan daha güvenli, daha hızlı, daha ucuz AI agent CLI. Multi-agent, self-evolving skills, audit log, maliyet optimizasyonu ve NatureCo platform-native.

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 23 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 292 file(s), 2.05 MB of source, external domains: 127.0.0.1, accounts.spotify.com, api.anthropic.com, api.browser-use.com, api.cohere.ai, api.deepgram.com, api.deepinfra.com, api.deepseek.com, api.duckduckgo.com, api.elevenlabs.io, api.exa.ai, api.example.com, api.firecrawl.dev, api.fireworks.ai, api.github.com, api.groq.com, api.medium.com, api.minimax.io, api.mistral.ai, api.natureco.me, api.openai.com, api.perplexity.ai, api.pushover.net, api.runwayml.com, api.sunoa.ai, api.tavily.com, api.together.xyz, api.twilio.com, api.twitter.com, api.udio.ai, api.vydra.ai, api.x.ai, browser-use.com, clawhub.ai, cloud.browser-use.com, console.anthropic.com, console.deepgram.com, console.groq.com, console.mistral.ai, dashboard.exa.ai, developers.deepgram.com, developers.natureco.me, docs.anthropic.com, docs.mistral.ai, docs.openclaw.ai, docs.perplexity.ai, docs.together.ai, docs.vydra.ai, docs.x.ai, elevenlabs.io

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/utils/natureco-account.jsView file

17patternName = supabase_service_key severity = critical line = 17 matchedText = const SU...GU';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/utils/natureco-account.jsView on unpkg · L17

17patternName = supabase_service_key severity = critical line = 17 matchedText = const SU...GU';

Critical

Secret Pattern

Supabase service role key (JWT) in src/utils/natureco-account.js

src/utils/natureco-account.jsView on unpkg · L17

scripts/postinstall.jsView file

11L12: const { execSync } = require('child_process'); L13: const fs = require('fs');

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L11

src/commands/policy.jsView file

90const { execSync } = require('child_process'); L91: const output = execSync(`powershell -Command "Get-PSDrive -Name ${drive} | Select-Object -ExpandProperty Free"`, { encoding: 'utf-8' }).trim(); L92: const free = parseInt(output);

High

Shell

Package source references shell execution.

src/commands/policy.jsView on unpkg · L90

bin/natureco.jsView file

2L3: const { Command } = require('commander'); L4: const chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/natureco.jsView on unpkg · L2

src/commands/gateway-server.jsView file

4const os = require('os'); L5: const { spawn, execSync } = require('child_process'); L6: const pino = require('pino'); ... L9: L10: const PID_FILE = path.join(os.homedir(), '.natureco', 'gateway.pid'); L11: const LOG_FILE = path.join(os.homedir(), '.natureco', 'gateway.log'); ... L16: // restart this would crash. Explicit. L17: const https = require('https'); L18: // saveConfig (and the loaded `config` value, when not shadowed in scope) ... L70: L71: // Note: File writing removed - parent process redirects stdout/stderr to log file L72: // This prevents duplicate log entries

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/commands/gateway-server.jsView on unpkg · L4

src/tools/cron_create.jsView file

10const os = require("os"); L11: const { execSync } = require("child_process"); L12: L13: const CRON_FILE = path.join(os.homedir(), ".natureco", "crons.json"); L14: ... L17: if (!fs.existsSync(CRON_FILE)) return []; L18: return JSON.parse(fs.readFileSync(CRON_FILE, "utf8")); L19: } catch { return []; } ... L42: L43: async function createCron({ name, schedule, command, description = "", allowSystemCrontab = false, agentId = "default" }) { L44: if (!name) return { success: false, error: "name gerekli" };

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/tools/cron_create.jsView on unpkg · L10

src/tools/voice_chat.jsView file

15const path = require("path"); L16: const { spawn } = require("child_process"); L17: const https = require("https"); L18: ... L25: return new Promise((resolve, reject) => { L26: const apiKey = process.env.OPENAI_API_KEY || process.env.WHISPER_API_KEY; L27: if (!apiKey) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/tools/voice_chat.jsView on unpkg · L15

src/tools/phone_control_enhanced.jsView file

1const { getConfig, saveConfig } = require('../utils/config'); L2: const { execFileSync } = require('child_process'); L3: ... L56: if (service === 'pushover') { L57: const token = config.pushoverToken || process.env.PUSHOVER_TOKEN; L58: const user = config.pushoverUser || process.env.PUSHOVER_USER; L59: if (!token || !user) return { success: false, error: 'Pushover token/user gerekli' }; L60: const r = await fetch('https://api.pushover.net/1/messages.json', { L61: method: 'POST', L62: headers: { 'Content-Type': 'application/json' }, L63: body: JSON.stringify({ token, user, title: params.title || 'NatureCo', message: params.message, priority: params.priority || 0 }) L64: });

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

src/tools/phone_control_enhanced.jsView on unpkg · L1

src/tools/social_open.jsView file

1const { spawn, execFileSync } = require("child_process"); L2: const os = require("os"); ... L9: url: (id) => id.match(/^https?:\/\//) ? id L10: : id.startsWith("@") ? `https://www.youtube.com/${id}` L11: : id.startsWith("UC") ? `https://www.youtube.com/channel/${id}` ... L129: if (IS_MAC) return spawn("open", browserApp ? ["-a", browserApp, url] : [url]); L130: if (process.platform === "win32") return spawn("cmd", ["/c", "start", "", url], { windowsHide: true }); L131: return spawn("xdg-open", [url]); // linux + diğer *nix

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/tools/social_open.jsView on unpkg · L1

src/utils/plugin-registry.jsView file

124try { L125: execSync(`npm install ${pkg} --prefix "${tmpDir}" --no-save --ignore-scripts --no-audit --no-fund`, { stdio: 'pipe', timeout: 120000 }); L126: const pkgDir = path.join(tmpDir, 'node_modules', pkg.split('/').pop());

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/utils/plugin-registry.jsView on unpkg · L124

src/tools/agentic-runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = natureco-cli@5.21.0 matchedIdentity = npm:bmF0dXJlY28tY2xp:5.21.0 similarity = 0.783 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/tools/agentic-runner.jsView on unpkg

Source & flagged code

14 flagged

package.jsonView file

Lines 9-49json

9 "bin/",

10 "src/",

11 "scripts/",

12 "skills/",

13 "README.md",

14 "SELF.md",

15 "CHANGELOG.md",

16 "AUDIT.md",

17 "SECURITY_AUDIT_SUMMARY.md",

18 "DEPLOY_v2.0.0.md"

19 ],

20 "scripts": {

21 "test": "vitest run",

22 "test:unit": "vitest run",

23 "test:watch": "vitest",

24 "test:coverage": "vitest run --coverage",

25 "lint": "eslint src/ bin/ test/",

26 "lint:fix": "eslint src/ bin/ test/ --fix",

27 "lint:errors-only": "eslint src/ bin/ test/ --quiet",

28 "smoke": "node --check bin/natureco.js && node bin/natureco.js help",

29 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "prepublishOnly": "node --check bin/natureco.js && eslint src/ bin/ test/ --quiet && vitest run"

31 },

32 "keywords": [

33 "natureco",

34 "ai",

35 "ai-agent",

36 "bot",

37 "cli",

38 "terminal",

39 "openclaw-alternative",

40 "claude-code-alternative",

41 "multi-agent",

42 "self-evolving-skills",

43 "audit-log",

44 "cost-optimization",

45 "seo",

46 "türkçe",

47 "turkish",

48 "whatsapp-bot",

49 "telegram-bot",

src/utils/natureco-account.jsView file

Lines 1-37javascript

1/**

2 * NatureCo Hesabı (SSO) — tek NatureCo hesabı, ekosistem geneli.

3 * natureco.me Supabase Auth üstünde, bağımlılıksız (Supabase REST + global fetch).

4 * Bu, developers.natureco.me API-KEY girişinden (config.json) AYRIDIR:

5 * - API key → bot/otomasyon API'si (config.json)

6 * - Hesap → kişi kimliği / SSO (auth.json) ← bu dosya

7 * natureco-sdk'daki NatureCoAuth ile aynı protokol (paylaşılan auth.json).

8 */

9'use strict';

10

scripts/postinstall.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * NatureCo CLI - Post-install script (v5.6.0)

4 *

5 * Bu script npm install sirasinda otomatik calisir.

6 * Hatalari onceden duzeltir:

7 * - chalk v5 (ESM) yerine chalk@4 (CJS) kur

8 * - Doctor calistir

9 * - Soul dosyalarini generic yap (Personal yoksa)

10 */

11

src/commands/policy.jsView file

Lines 70-110javascript

70 id: 'git-config',

71 name: 'Git Yapılandırması',

72 check: () => {

73 try {

74 const { execSync }

bin/natureco.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2

3const { Command } = require('commander');

4const chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/natureco.js

src/commands/gateway-server.jsView file

Lines 1-24javascript

1const chalk = require('chalk');

2const fs = require('fs');

3const path = require

src/tools/cron_create.jsView file

Lines 1-30javascript

1/**

2 * cron_create - Zamanlanmis gorev (v4.9.0)

3 *

4 * Hermes cronjob'una benzer. "Her gun 09:00'da calistir" gibi.

5 * NatureCo CLI mevcut cron sistemine yazar (cron.js zaten var).

6 */

7

8const fs = require("fs");

src/tools/voice_chat.jsView file

15const path = require("path"); L16: const { spawn } = require("child_process"); L17: const https = require("https"); L18: ... L25: return new Promise((resolve, reject) => { L26: const apiKey = process.env.OPENAI_API_KEY || process.env.WHISPER_API_KEY; L27: if (!apiKey) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/tools/voice_chat.jsView on unpkg · L15

src/tools/phone_control_enhanced.jsView file

1const { getConfig, saveConfig } = require('../utils/config'); L2: const { execFileSync } = require('child_process'); L3: ... L56: if (service === 'pushover') { L57: const token = config.pushoverToken || process.env.PUSHOVER_TOKEN; L58: const user = config.pushoverUser || process.env.PUSHOVER_USER; L59: if (!token || !user) return { success: false, error: 'Pushover token/user gerekli' }; L60: const r = await fetch('https://api.pushover.net/1/messages.json', { L61: method: 'POST', L62: headers: { 'Content-Type': 'application/json' }, L63: body: JSON.stringify({ token, user, title: params.title || 'NatureCo', message: params.message, priority: params.priority || 0 }) L64: });

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

src/tools/phone_control_enhanced.jsView on unpkg · L1

src/tools/social_open.jsView file

1const { spawn, execFileSync } = require("child_process"); L2: const os = require("os"); ... L9: url: (id) => id.match(/^https?:\/\//) ? id L10: : id.startsWith("@") ? `https://www.youtube.com/${id}` L11: : id.startsWith("UC") ? `https://www.youtube.com/channel/${id}` ... L129: if (IS_MAC) return spawn("open", browserApp ? ["-a", browserApp, url] : [url]); L130: if (process.platform === "win32") return spawn("cmd", ["/c", "start", "", url], { windowsHide: true }); L131: return spawn("xdg-open", [url]); // linux + diğer *nix

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/tools/social_open.jsView on unpkg · L1

src/utils/plugin-registry.jsView file

124try { L125: execSync(`npm install ${pkg} --prefix "${tmpDir}" --no-save --ignore-scripts --no-audit --no-fund`, { stdio: 'pipe', timeout: 120000 }); L126: const pkgDir = path.join(tmpDir, 'node_modules', pkg.split('/').pop());

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/utils/plugin-registry.jsView on unpkg · L124

src/tools/agentic-runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = natureco-cli@5.21.0 matchedIdentity = npm:bmF0dXJlY28tY2xp:5.21.0 similarity = 0.783 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/tools/agentic-runner.jsView on unpkg