oh-langfuse@1.0.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

oh-langfuse@1.0.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

bin/cli.jsView file

5import { fileURLToPath } from "url"; L6: import { spawnSync } from "child_process"; L7: import { resolveOpencodeCli } from "../scripts/resolve-opencode-cli.mjs";

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L5

151const r = isWindowsShellScript L152: ? spawnSync([command, ...args].join(" "), { encoding: "utf8", shell: true }) L153: : spawnSync(command, args, { encoding: "utf8" });

High

Shell

Package source references shell execution.

bin/cli.jsView on unpkg · L151

5import { fileURLToPath } from "url"; L6: import { spawnSync } from "child_process"; L7: import { resolveOpencodeCli } from "../scripts/resolve-opencode-cli.mjs"; ... L11: L12: const DEFAULT_LANGFUSE_BASE_URL = "https://metrics.openharmonyhub.cn"; L13: const LEGACY_LANGFUSE_BASE_URLS = new Set([ ... L54: L55: const colorEnabled = process.stdout.isTTY && process.env.NO_COLOR !== "1"; L56: const ansi = (code) => (colorEnabled ? `\x1b[${code}m` : ""); ... L110: function clearScreen() { L111: if (process.stdout.isTTY) process.stdout.write("\x1b[2J\x1b[H"); L112: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/cli.jsView on unpkg · L5

scripts/opencode-langfuse-setup.mjsView file

1035" try {", L1036: " const mod = await import(pathToFileURL(discoverPath).href);", L1037: " if (mod && typeof mod.collectSkillRoots === 'function') roots = mod.collectSkillRoots(process.cwd());",

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/opencode-langfuse-setup.mjsView on unpkg · L1035

scripts/auto-update-runtime.mjsView file

3import readline from "node:readline"; L4: import { spawnSync } from "node:child_process"; L5: import { fileURLToPath } from "node:url"; ... L11: const ALLOWED_TARGETS = new Set(["claude", "opencode", "codex"]); L12: const OFFICIAL_NPM_REGISTRY = "https://registry.npmjs.org/"; L13: L14: const colorEnabled = process.stdout.isTTY && process.env.NO_COLOR !== "1"; L15: const ansi = (code) => (colorEnabled ? `\x1b[${code}m` : "");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/auto-update-runtime.mjsView on unpkg · L3

scripts/codex-langfuse-setup.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: nst verifycontent = fs.readfilesync(configpath, "utf8"); const notifymatch = verifycontent.match(/^notify\s*=\s*\[[\s\s]*?\]/m); if (!notifymatch) { throw new error(`failed to write valid notify config to ${configpath}. generated content:\n${result}`); } } async function main() { const args = parseargs(process.argv.slice(2)); const rootdir = packageroot; const packagejson = json.parse(fs.readfilesync(path.join(rootdir, "package.json"), "utf8")); const publickey = args.publickey || process.env.langfuse_public_key || "pk-lf-da0c90a7-6e93-4eb7-bb86-c1047c8d187d"; const secretkey = args.secretkey || process.env.langfuse_secret_key || "sk[redacted]"; const b

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/codex-langfuse-setup.mjsView on unpkg

codex_langfuse_notify.pyView file

•path = codex_langfuse_notify.py kind = build_helper sizeBytes = 72597 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

codex_langfuse_notify.pyView on unpkg

scripts/langfuse-setup.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = oh-langfuse@0.2.6 matchedIdentity = npm:b2gtbGFuZ2Z1c2U:0.2.6 similarity = 0.545 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/langfuse-setup.mjsView on unpkg

Source & flagged code

8 flagged

bin/cli.jsView file

Lines 1-25javascript

1#!/usr/bin/env node

2import fs from "fs";

3import path from "path";

4import readline from "readline";

5import { fileURLToPath } from "url";

6import { spawnSync } from "child_process";

7import { resolveOpencodeCli } from "../scripts/resolve-opencode-cli.mjs";

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L5

8

9const rootDir = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");

10const scriptsDir = path.join(rootDir, "scripts");

11

12const DEFAULT_LANGFUSE_BASE_URL = "https://metrics.openharmonyhub.cn";

13const LEGACY_LANGFUSE_BASE_URLS = new Set([

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/cli.jsView on unpkg · L5

14 "http://metrics.openharmonyinsight.cn",

15 "https://metrics.openharmonyinsight.cn",

16 "http://120.46.221.227:3000",

17 "https://120.46.221.227:3000",

18]);

19const DEFAULT_LANGFUSE_PUBLIC_KEY = "pk-lf-da0c90a7-6e93-4eb7-bb86-c1047c8d187d";

20const DEFAULT_LANGFUSE_SECRET_KEY = "sk-lf-0269b85d-bfdc-442c-bfa3-e737954e3315";

21const USER_ID_PATTERN = /^[a-z]((30|00|60)\d{6}|wx\d{6,})$/;

22const USER_ID_PATTERN_TEXT = "^[a-z]((30|00|60)\\d{6}|wx\\d{6,})$";

23

24function nodeMajorVersion() {

25 const raw = process.versions && process.versions.node ? process.versions.node : "0.0.0";

Lines 131-171javascript

131}

132

133function normalizeUserId(v) {

134 return String(v || "").trim();

135}

136

137function isValidUserId(v

scripts/opencode-langfuse-setup.mjsView file

Lines 1015-1055javascript

1015 " if (eventText && messageId && (role === 'assistant' || partType === 'text')) {",

1016 " messageTextById.set(messageId, limitObservationText(eventText));",

1017 " const textSkillUsages = detectOpencodeSkillUsages(eventText, knownSkillNames);",

1018 " rememberSkillUsages(skillUsagesByMessageId, messageId, textSkillUsages);",

1019 " rememberSkillUsages(skillUsagesBySessionId, sessionId, textSkillUsages);",

1020

scripts/auto-update-runtime.mjsView file

Lines 1-23javascript

1import fs from "node:fs";

2import path from "node:path";

3import readline from "node:readline";

4import { spawnSync } from "node:child_process";

scripts/codex-langfuse-setup.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: nst verifycontent = fs.readfilesync(configpath, "utf8"); const notifymatch = verifycontent.match(/^notify\s*=\s*\[[\s\s]*?\]/m); if (!notifymatch) { throw new error(`failed to write valid notify config to ${configpath}. generated content:\n${result}`); } } async function main() { const args = parseargs(process.argv.slice(2)); const rootdir = packageroot; const packagejson = json.parse(fs.readfilesync(path.join(rootdir, "package.json"), "utf8")); const publickey = args.publickey || process.env.langfuse_public_key || "pk-lf-da0c90a7-6e93-4eb7-bb86-c1047c8d187d"; const secretkey = args.secretkey || process.env.langfuse_secret_key || "sk[redacted]"; const b

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/codex-langfuse-setup.mjsView on unpkg

codex_langfuse_notify.pyView file

•path = codex_langfuse_notify.py kind = build_helper sizeBytes = 72597 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

codex_langfuse_notify.pyView on unpkg

scripts/langfuse-setup.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = oh-langfuse@0.2.6 matchedIdentity = npm:b2gtbGFuZ2Z1c2U:0.2.6 similarity = 0.545 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/langfuse-setup.mjsView on unpkg