registry / neural-loom / 0.4.0-rc.12

neural-loom@0.4.0-rc.12

NeuralLoom is a local Next.js orchestration cockpit and terminal bridge designed to manage multiple concurrent terminal agent sessions (such as **Claude Code** and **Aider**) in isolated or overlapping workspaces. It streams pseudo-terminal (PTY) streams

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 73 file(s), 622 KB of source, external domains: cli.github.com, www.docker.com

Source & flagged code

7 flagged

bin/cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/* eslint-disable @typescript-eslint/no-require-imports */

4const { spawn } = require('child_process');

5const path = require('path');

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L3

7if (process.argv[2] === 'mcp') {

8 const readline = require('readline');

9 const http = require('http');

11 let wsRoot = process.argv[3] || process.env.ORIGINAL_CWD || process.cwd();

12 wsRoot = path.resolve(wsRoot).replace(/\\/g, '/');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L3

14 console.error(`[NeuralLoom MCP Bridge] Workspace context: ${wsRoot}`);

15 console.error(`[NeuralLoom MCP Bridge] Connecting to Next.js server on http://localhost:${process.env.PORT || 9600}...`);

17 const rl = readline.createInterface({

18 input: process.stdin,

19 output: process.stdout,

20 terminal: false

21 });

23 rl.on('line', (line) => {

src/lib/agents/AiderRunner.tsView file

Lines 59-99typescript

60 private ptyProcess: IPty | null = null;

61 private ptyModule: typeof import("node-pty") | null = null;

63 constructor(id: string, type: 'aider'

src/app/api/sessions/stats/route.tsView file

Lines 1-34typescript

1import { NextResponse } from "next/server";

2import { SessionManager } from "@/lib/agents/SessionManager";

3import { promisify } from "util";

4import { execFile } from "child_process";

5import os from "os";

src/lib/agents/ClaudeRunner.tsView file

Lines 58-98typescript

58 // Force Claude Code onto the normal screen buffer. Its "fullscreen" TUI

59 // renderer (settings `tui: "fullscreen"`) takes over the alternate

60 // screen buffer, which has no scrollback — inside our xterm console that

61 // breaks wheel-scroll and history (the app owns the screen and we have

62 // nothing to scroll). On the normal buffer the transcript lands in

63 // xterm's scrollback and the wheel handler works. Scoped to sessions we

64 // spawn, so the user's standalone terminals keep fullscreen if they want.

65 CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN:

bin/fix-pwa-ubuntu.shView file

•path = bin/fix-pwa-ubuntu.sh kind = build_helper sizeBytes = 1700 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/fix-pwa-ubuntu.shView on unpkg

.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View file

•path = .[redacted]-s.0zgw-jeven.3w.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View on unpkg

Source & flagged code

7 flagged · loading source

bin/cli.jsView file

3L4: const { spawn } = require('child_process'); L5: const path = require('path');

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L3

3L4: const { spawn } = require('child_process'); L5: const path = require('path'); ... L8: const readline = require('readline'); L9: const http = require('http'); L10: L11: let wsRoot = process.argv[3] || process.env.ORIGINAL_CWD || process.cwd(); L12: wsRoot = path.resolve(wsRoot).replace(/\\/g, '/');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L3

src/lib/agents/AiderRunner.tsView file

79const useCmd = isWindows(); L80: const shellPath = useCmd ? (process.env.COMSPEC || "cmd.exe") : findGitBash(); L81: if (!shellPath) {

High

Shell

Package source references shell execution.

src/lib/agents/AiderRunner.tsView on unpkg · L79

src/app/api/sessions/stats/route.tsView file

14/* eslint-disable @typescript-eslint/no-require-imports */ L15: const pidusage = eval("require")("pidusage"); L16: const stat = await pidusage(pid);

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/app/api/sessions/stats/route.tsView on unpkg · L14

src/lib/agents/ClaudeRunner.tsView file

78L79: // Check if 'claude' command exists in PATH, fallback to npx if not L80: let baseCmd = "claude"; ... L82: const checkCmd = isWindows() ? "where.exe claude" : "which claude"; L83: execSync(checkCmd, { env: customEnv, stdio: "ignore" }); L84: } catch {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/lib/agents/ClaudeRunner.tsView on unpkg · L78

bin/fix-pwa-ubuntu.shView file

•path = bin/fix-pwa-ubuntu.sh kind = build_helper sizeBytes = 1700 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/fix-pwa-ubuntu.shView on unpkg

.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View file

•path = .[redacted]-s.0zgw-jeven.3w.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View on unpkg

Findings

5 High4 Medium7 Low

HighChild Processbin/cli.js

HighShellsrc/lib/agents/AiderRunner.ts

HighSame File Env Network Executionbin/cli.js

HighRuntime Package Installsrc/lib/agents/ClaudeRunner.ts

HighShips High Entropy Blob.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperbin/fix-pwa-ubuntu.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalsrc/app/api/sessions/stats/route.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

7 flagged

bin/cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/* eslint-disable @typescript-eslint/no-require-imports */

4const { spawn } = require('child_process');

5const path = require('path');

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L3

7if (process.argv[2] === 'mcp') {

8 const readline = require('readline');

9 const http = require('http');

11 let wsRoot = process.argv[3] || process.env.ORIGINAL_CWD || process.cwd();

12 wsRoot = path.resolve(wsRoot).replace(/\\/g, '/');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.jsView on unpkg · L3

14 console.error(`[NeuralLoom MCP Bridge] Workspace context: ${wsRoot}`);

15 console.error(`[NeuralLoom MCP Bridge] Connecting to Next.js server on http://localhost:${process.env.PORT || 9600}...`);

17 const rl = readline.createInterface({

18 input: process.stdin,

19 output: process.stdout,

20 terminal: false

21 });

23 rl.on('line', (line) => {

src/lib/agents/AiderRunner.tsView file

Lines 59-99typescript

60 private ptyProcess: IPty | null = null;

61 private ptyModule: typeof import("node-pty") | null = null;

63 constructor(id: string, type: 'aider'

src/app/api/sessions/stats/route.tsView file

Lines 1-34typescript

1import { NextResponse } from "next/server";

2import { SessionManager } from "@/lib/agents/SessionManager";

3import { promisify } from "util";

4import { execFile } from "child_process";

5import os from "os";

src/lib/agents/ClaudeRunner.tsView file

Lines 58-98typescript

58 // Force Claude Code onto the normal screen buffer. Its "fullscreen" TUI

59 // renderer (settings `tui: "fullscreen"`) takes over the alternate

60 // screen buffer, which has no scrollback — inside our xterm console that

61 // breaks wheel-scroll and history (the app owns the screen and we have

62 // nothing to scroll). On the normal buffer the transcript lands in

63 // xterm's scrollback and the wheel handler works. Scoped to sessions we

64 // spawn, so the user's standalone terminals keep fullscreen if they want.

65 CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN:

bin/fix-pwa-ubuntu.shView file

•path = bin/fix-pwa-ubuntu.sh kind = build_helper sizeBytes = 1700 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/fix-pwa-ubuntu.shView on unpkg

.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View file

•path = .[redacted]-s.0zgw-jeven.3w.woff2 kind = high_entropy_blob sizeBytes = 6204 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/static/media/5ce348bf30bf5439-s.0zgw-jeven.3w.woff2View on unpkg