nolo-cli@0.52.0-alpha.1: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

nolo-cli@0.52.0-alpha.1: AI-agent control-surface risk | LPM Firewall

Source & flagged code

13 flagged · loading source

chunk-72COHDZR.jsView file

4484patternName = generic_password severity = medium line = 4484

Medium

Secret Pattern

Package contains a possible secret pattern.

chunk-72COHDZR.jsView on unpkg · L4484

11832var findModelConfig = async (modelName, provider) => { L11833: const { ALL_MODELS } = await import("./models-N4NXQ44D.js"); L11834: const name = toTrimmedString(modelName);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

chunk-72COHDZR.jsView on unpkg · L11832

5800patternName = generic_password severity = medium line = 5800

Medium

Secret Pattern

Hardcoded password in chunk-72COHDZR.js

chunk-72COHDZR.jsView on unpkg · L5800

7059patternName = generic_password severity = medium line = 7059

Medium

Secret Pattern

Hardcoded password in chunk-72COHDZR.js

chunk-72COHDZR.jsView on unpkg · L7059

8239patternName = generic_password severity = medium line = 8239

Medium

Secret Pattern

Hardcoded password in chunk-72COHDZR.js

chunk-72COHDZR.jsView on unpkg · L8239

18567} L18568: const importBridge = new Function("specifier", "return import(specifier)"); L18569: const { readXPostWithBridge } = await importBridge("../../integrations/x-[redacted].ts");

Low

Eval

Package source references a known benign dynamic code generation pattern.

chunk-72COHDZR.jsView on unpkg · L18567

machineCommands-JZVC7JEX.jsView file

148// [redacted].ts L149: import { spawn } from "node:child_process"; L150: import { existsSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync } from "node:fs";

High

Child Process

Package source references child process execution.

machineCommands-JZVC7JEX.jsView on unpkg · L148

6Cross-file remote execution chain: machineCommands-JZVC7JEX.js spawns chunk-72COHDZR.js; helper contains network access plus dynamic code execution. L6: import { L7: isConnectorWebSocketAuthError, L8: [redacted], ... L148: // [redacted].ts L149: import { spawn } from "node:child_process"; L150: import { existsSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync } from "node:fs"; ... L159: try { L160: return JSON.parse(readFileSync(path, "utf8")); L161: } catch { ... L170: const resolved = resolve(path); L171: return process.platform === "win32" ? resolved.toLowerCase() : resolved; L172: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

machineCommands-JZVC7JEX.jsView on unpkg · L6

chunk-T5HJEUQN.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = nolo-cli@0.34.0-alpha.3 matchedIdentity = npm:bm9sby1jbGk:0.34.0-alpha.3 similarity = 0.592 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

chunk-T5HJEUQN.jsView on unpkg

51const windowsRoot = env.SystemRoot?.trim() || env.WINDIR?.trim(); L52: const powershellPath = overrides.powershellPath ?? (windowsRoot ? join( L53: windowsRoot,

High

Shell

Package source references shell execution.

chunk-T5HJEUQN.jsView on unpkg · L51

23// packages/cli/windowsSelfUpdate.ts L24: import { spawn } from "node:child_process"; L25: import { ... L41: var UPDATE_LOCK_FILE = "update.lock"; L42: function resolveNoloHome(env, homeDir = homedir()) { L43: return env.NOLO_HOME?.trim() || join(homeDir, ".nolo"); L44: } L45: function resolveWindowsUpdateStatePath(env = process.env, homeDir = homedir()) { L46: return join(resolveNoloHome(env, homeDir), "updates", UPDATE_STATE_FILE); ... L74: const raw = readFileSync(lockPath, "utf8").trim(); L75: const owner = raw.startsWith("{") ? JSON.parse(raw).updateId : raw; L76: if (owner === updateId) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

chunk-T5HJEUQN.js

chunk-S3HB4CQY.jsView file

160...titleParams ? { titleParams } : {}, L161: ...asOptionalTrimmedString(value.body) ? { body: asOptionalTrimmedString(value.body) } : {}, L162: ...Object.prototype.hasOwnProperty.call(value, "payload") ? { payload: value.payload } : {} ... L281: try { L282: return asRecordOrEmpty(JSON.parse(raw)); L283: } catch { ... L807: } L808: function resolveProgressGuardConfig(options, env = typeof process !== "undefined" ? process.env : {}) { L809: const envDisabled = env.NOLO_LOOP_PROGRESS_GUARD_DISABLED === "true" || env.NOLO_LOOP_PROGRESS_GUARD_DISABLED === "1"; ... L1076: const safe = {}; L1077: if (typeof metadata.exitCode === "number") safe.exitCode = metadata.exitCode; L1078: if (typeof metadata.actionGate === "string") safe.actionGate = clip2(metadata.actionGate, 240);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

chunk-S3HB4CQY.jsView on unpkg · L160

chunk-HMMOAG2I.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

chunk-HMMOAG2I.js#virtual:normalized:round1View on unpkg