omnirush@2.1.4: Suspicious npm security report (Warn)

Loading npm security reports…

omnirush@2.1.4: Suspicious npm security report (Warn) | LPM Firewall

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

src/lib.js accepts the gateway environment override without restricting its host.
The auth module reads stored credentials; src/bin.js forwards the existing access token alongside the selected gateway.
The extension entrypoint automatically loads session synchronization for parent agent runs.
Session synchronization retrieves the saved bearer and inserts the latest token into outgoing authenticated requests.
Workspace synchronization accepts any HTTPS host and posts compressed session data with the bearer token.

Evidence against

package.json contains no install lifecycle hooks or runtime self-dependency.
The default destination is the package-aligned Omnirush service; an operator override activates the identified exposure.
Inspected Kimi OAuth code does not substantiate the scanner's claimed default external exfiltration.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 228 file(s), 13.3 MB of source, external domains: 127.0.0.1, 169.254.169.254, 169.254.170.2, a.co, accounts.google.com, ai-gateway.vercel.sh, ai.google.dev, aiplatform.googleapis.com, api.ant-ling.com, api.anthropic.com, api.cerebras.ai, api.cloudflare.com, api.deepseek.com, api.fireworks.ai, api.groq.com, api.individual.githubcopilot.com, api.kimi.com, api.meta.ai, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.together.ai, api.x.ai, api.xiaomimimo.com, api.z.ai, auth.kimi.com, auth.meta.com, auth.openai.com, auth.x.ai, aws.amazon.com, babeljs.io, bedrock-runtime.eu-central-1.amazonaws.com, bedrock-runtime.us-east-1.amazonaws.com, chatgpt.com, claude.ai, cli.github.com, cloud.google.com, cloudresourcemanager.googleapis.com, codeload.github.com, docs.anthropic.com, docs.aws.amazon.com, docs.cloud.google.com, docs.expo.dev, dummy.com, example.com, foo.com, gateway.ai.cloudflare.com

Source & flagged code

26 flagged

core/dist/bundle/chunks/chunk-7ZC4UXSL.jsView file

Lines 1-3javascript

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);

2import*as child_process from"node:child_process";import*as crypto from"node:crypto";import*as fs from"node:fs";import*as os from"node:os";import*as path from"node:path";import*as stream from"node:stream";import*as util from"node:util";export{child_process,crypto,fs,os,path,stream,util};

High

Child Process

Package source references child process execution.

core/dist/bundle/chunks/chunk-7ZC4UXSL.jsView on unpkg · L1

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView file

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); L2: import{require_bash,require_c,require_core,require_cpp,require_csharp,require_dart,require_go,require_groovy,require_java,require_javascript,require_kotlin,require_lua,require_nix,... L3: `)||potentialValue.includes("\r")||potentialValue.includes("\0"))===!1}function parseReferrerPolicy(actualResponse){let policyHeader=(actualResponse.headersList.get("referrer-polic...

High

Shell

Package source references shell execution.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg · L1

1Cross-file remote execution chain: core/dist/bundle/chunks/chunk-CMRUVXTE.js spawns [redacted].js; helper contains network access plus dynamic code execution. L1: import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); L2: import{require_bash,require_c,require_core,require_cpp,require_csharp,require_dart,require_go,require_groovy,require_java,require_javascript,require_kotlin,require_lua,require_nix,... L3: `)||potentialValue.includes("\r")||potentialValue.includes("\0"))===!1}function parseReferrerPolicy(actualResponse){let policyHeader=(actualResponse.headersList.get("referrer-polic... ... L40: `;channels.sendHeaders.publish({request,headers:header,socket:session[kSocket]})}let shouldEndStream=body===null||contentLength===0;re

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg · L1

core/deps/photon-node/photon_rs_bg.jsView file

Lines 4195-4235javascript

4195};

4196

4197export function __wbg_setwidth_c1a7061891b71f25(arg0, arg1) {

4198 getObject(arg0).width = arg1 >>> 0;

4199};

core/dist/bundle/chunks/chunk-S7SZN6Z3.jsView file

Lines 1-3javascript

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);

2import{getSystemMessageText}from"./chunk-RCZIEVGO.js";function

core/dist/bundle/chunks/bedrock-converse-stream.jsView file

35${toHex2(hashedRequest)}`}getCanonicalPath({path}){if(this.uriEscapePath){let normalizedPathSegments=[];for(let pathSegment of path.split("/"))pathSegment?.length!==0&&pathSegment!... L36: `);return this.signString(stringToSign,{signingDate,signingRegion:region,signingService,eventStreamCredentials})}async signMessage(signableMessage,{signingDate=new Date,signingRegi... L37: For more information, please visit: `+STATIC_STABILITY_DOC_URL);let originalExpiration=credentials.originalExpiration??credentials.expiration;return{...credentials,...originalExpir... ... L50: `)||(obj["#text"]="#text"in obj?obj["#text"]+text:text);for(let child of childTags)child.tag==="__proto__"&&writeKey2(obj),child.tag in obj?Array.isArray(obj[child.tag])?obj[child.... L51: Reference: https://docs.aws.amazon.

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

core/dist/bundle/chunks/bedrock-converse-stream.jsView on unpkg · L35

High

Command Output Exfiltration

core/dist/bundle/chunks/kimi-coding.jsView file

Lines 1-3javascript

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);

2var __require=(x=>typeof require<

assets/extensions/omnirush/auth.jsView file

9// Endpoint contract (live-verified 2026-09-22 against L10: // https://omnirush.ai/omnirush): L11: // POST /device/authorize {device_name, platform} ... L38: L39: import { spawn } from "node:child_process"; L40: import { createHash } from "node:crypto"; ... L67: /** User-Agent of every request this module sends to the manager. */ L68: export function clientUserAgent(env = process.env) { L69: const version = clientVersion || String(env.OMNIRUSH_VERSION ?? "").trim() || "unknown"; L70: return `omnirush/${version} (${process.platform}; ${process.arch})`; L71: } ... L124: ? path.resolve(env.OMNIRUSH_DIR)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

assets/extensions/omnirush/auth.jsView on unpkg · L9

src/opencode-config.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. permission: "allow", provider, }; } function stablejsonvalue(value) { if (array.isarray(value)) return value.map(stablejsonvalue); if (!isrecord(value)) return value; return object.fromentries(object.keys(value).sort().map((key) => [key, stablejsonvalue(value[key])])); } export function writeopencodeconfig(dir, config) { mkdirsync(dir, { recursive: true }); const file = path.join(dir, "opencode-config.json"); const content = json.stringify(stablejsonvalue(config), null, 2) + "\n"; let current; try { current = readfilesync(file, "utf8"); } catch { cu

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/opencode-config.jsView on unpkg

core/deps/photon-node/photon_rs_bg.wasmView file

•path = core/deps/photon-node/photon_rs_bg.wasm kind = wasm_module sizeBytes = 1881634 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

core/deps/photon-node/photon_rs_bg.wasmView on unpkg

assets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1View on unpkg

assets/extensions/omnirush/agents-lib.tsView file

•matchType = token_shingles matchedPackage = omnirush@1.0.2 matchedPath = [redacted]-lib.ts matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/agents-lib.tsView on unpkg

assets/extensions/omnirush/voice/capture.tsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = [redacted].ts matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/voice/capture.tsView on unpkg

assets/extensions/omnirush/mcp-client.bundle.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = assets/extensions/omnirush/mcp-client.bundle.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/mcp-client.bundle.jsView on unpkg

assets/extensions/omnirush/memory-lib.tsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = [redacted]-lib.ts matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/memory-lib.tsView on unpkg

core/dist/bundle/chunks/chunk-FUXEF6JQ.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/bundle/chunks/chunk-FUXEF6JQ.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-FUXEF6JQ.jsView on unpkg

core/dist/bundle/chunks/https-proxy-agent-2VXB7436.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/bundle/chunks/https-proxy-agent-2VXB7436.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/https-proxy-agent-2VXB7436.jsView on unpkg

core/dist/bundle/chunks/anthropic.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = [redacted].js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/anthropic.jsView on unpkg

core/dist/bundle/chunks/chunk-NUHFSC37.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/bundle/chunks/chunk-NUHFSC37.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-NUHFSC37.jsView on unpkg

core/dist/bundle/chunks/openai-codex.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/bundle/chunks/openai-codex.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/openai-codex.jsView on unpkg

Source & flagged code

26 flagged · loading source

core/dist/bundle/chunks/chunk-7ZC4UXSL.jsView file

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); L2: import*as child_process from"node:child_process";import*as crypto from"node:crypto";import*as fs from"node:fs";import*as os from"node:os";import*as path from"node:path";import*as s...

High

Child Process

Package source references child process execution.

core/dist/bundle/chunks/chunk-7ZC4UXSL.jsView on unpkg · L1

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView file

High

Shell

Package source references shell execution.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/bundle/chunks/chunk-CMRUVXTE.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg

core/deps/photon-node/photon_rs_bg.jsView file

4215export function __wbg_newnoargs_be86524d73f67598(arg0, arg1) { L4216: var ret = new Function(getStringFromWasm0(arg0, arg1)); L4217: return addHeapObject(ret);

Low

Eval

Package source references a known benign dynamic code generation pattern.

core/deps/photon-node/photon_rs_bg.jsView on unpkg · L4215

core/dist/bundle/chunks/chunk-S7SZN6Z3.jsView file

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); L2: import{getSystemMessageText}from"./chunk-RCZIEVGO.js";function loadNodeOs(){return typeof process>"u"||!(process.versions?.node||process.versions?.bun)?null:process.getBuiltinModul...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/dist/bundle/chunks/chunk-S7SZN6Z3.jsView on unpkg · L1

core/dist/bundle/chunks/bedrock-converse-stream.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

core/dist/bundle/chunks/bedrock-converse-stream.jsView on unpkg · L35

High

Command Output Exfiltration

core/dist/bundle/chunks/kimi-coding.jsView file

1Source sends the broad process environment to a literal external destination. L1: import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); L2: var __require=(x=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(x,{get:(a,b)=>(typeof require<"u"?require:a)[b]}):x)(function(x){if(typeof require<"u")return require.apply(...

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

core/dist/bundle/chunks/kimi-coding.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/bundle/chunks/kimi-coding.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/kimi-coding.jsView on unpkg

assets/extensions/omnirush/auth.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

assets/extensions/omnirush/auth.jsView on unpkg · L9

src/opencode-config.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/opencode-config.jsView on unpkg

core/deps/photon-node/photon_rs_bg.wasmView file

•path = core/deps/photon-node/photon_rs_bg.wasm kind = wasm_module sizeBytes = 1881634 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

core/deps/photon-node/photon_rs_bg.wasmView on unpkg

assets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1View on unpkg

assets/extensions/omnirush/agents-lib.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/agents-lib.tsView on unpkg

assets/extensions/omnirush/voice/capture.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/voice/capture.tsView on unpkg

assets/extensions/omnirush/mcp-client.bundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/mcp-client.bundle.jsView on unpkg

assets/extensions/omnirush/memory-lib.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/memory-lib.tsView on unpkg

core/dist/bundle/chunks/chunk-FUXEF6JQ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-FUXEF6JQ.jsView on unpkg

core/dist/bundle/chunks/https-proxy-agent-2VXB7436.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/https-proxy-agent-2VXB7436.jsView on unpkg

core/dist/bundle/chunks/anthropic.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/anthropic.jsView on unpkg

core/dist/bundle/chunks/chunk-NUHFSC37.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-NUHFSC37.jsView on unpkg

core/dist/bundle/chunks/openai-codex.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/openai-codex.jsView on unpkg

Findings

1 Critical21 High5 Medium6 Low

CriticalHardcoded Runtime Data Exfiltrationcore/dist/bundle/chunks/kimi-coding.js

HighChild Processcore/dist/bundle/chunks/chunk-7ZC4UXSL.js

HighShellcore/dist/bundle/chunks/chunk-CMRUVXTE.js

HighSame File Env Network Executioncore/dist/bundle/chunks/bedrock-converse-stream.js

HighCommand Output Exfiltrationcore/dist/bundle/chunks/bedrock-converse-stream.js

HighSandbox Evasion Gated Capabilityassets/extensions/omnirush/auth.js

HighCloud Metadata Accesscore/dist/bundle/chunks/bedrock-converse-stream.js

HighTrigger Reachable External Ai Agent Control Surface Mutationsrc/opencode-config.js

HighCross File Remote Execution Contextcore/dist/bundle/chunks/chunk-CMRUVXTE.js

HighSemantic Analysis Limitedassets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1

HighKnown Malware Source Similaritycore/dist/bundle/chunks/chunk-CMRUVXTE.js

HighKnown Malware Source Similarityassets/extensions/omnirush/agents-lib.ts

HighKnown Malware Source Similarityassets/extensions/omnirush/voice/capture.ts

HighKnown Malware Source Similarityassets/extensions/omnirush/mcp-client.bundle.js

HighKnown Malware Source Similarityassets/extensions/omnirush/memory-lib.ts

HighKnown Malware Source Similaritycore/dist/bundle/chunks/bedrock-converse-stream.js

HighKnown Malware Source Similaritycore/dist/bundle/chunks/chunk-FUXEF6JQ.js

HighKnown Malware Source Similaritycore/dist/bundle/chunks/https-proxy-agent-2VXB7436.js

HighKnown Malware Source Similaritycore/dist/bundle/chunks/anthropic.js

HighKnown Malware Source Similaritycore/dist/bundle/chunks/chunk-NUHFSC37.js

HighKnown Malware Source Similaritycore/dist/bundle/chunks/kimi-coding.js

HighKnown Malware Source Similaritycore/dist/bundle/chunks/openai-codex.js

MediumDynamic Requirecore/dist/bundle/chunks/chunk-S7SZN6Z3.js

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Modulecore/deps/photon-node/photon_rs_bg.wasm

MediumStructural Risk Force Deep Review

LowEvalcore/deps/photon-node/photon_rs_bg.js

LowWeak Cryptocore/dist/bundle/chunks/bedrock-converse-stream.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

26 flagged

core/dist/bundle/chunks/chunk-7ZC4UXSL.jsView file

Lines 1-3javascript

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);

High

Child Process

Package source references child process execution.

core/dist/bundle/chunks/chunk-7ZC4UXSL.jsView on unpkg · L1

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView file

High

Shell

Package source references shell execution.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg · L1

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

core/dist/bundle/chunks/chunk-CMRUVXTE.jsView on unpkg · L1

core/deps/photon-node/photon_rs_bg.jsView file

Lines 4195-4235javascript

4195};

4196

4197export function __wbg_setwidth_c1a7061891b71f25(arg0, arg1) {

4198 getObject(arg0).width = arg1 >>> 0;

4199};

core/dist/bundle/chunks/chunk-S7SZN6Z3.jsView file

Lines 1-3javascript

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);

2import{getSystemMessageText}from"./chunk-RCZIEVGO.js";function

core/dist/bundle/chunks/bedrock-converse-stream.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

core/dist/bundle/chunks/bedrock-converse-stream.jsView on unpkg · L35

High

Command Output Exfiltration

core/dist/bundle/chunks/kimi-coding.jsView file

Lines 1-3javascript

1import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);

2var __require=(x=>typeof require<

assets/extensions/omnirush/auth.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

assets/extensions/omnirush/auth.jsView on unpkg · L9

src/opencode-config.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/opencode-config.jsView on unpkg

core/deps/photon-node/photon_rs_bg.wasmView file

•path = core/deps/photon-node/photon_rs_bg.wasm kind = wasm_module sizeBytes = 1881634 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

core/deps/photon-node/photon_rs_bg.wasmView on unpkg

assets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

assets/extensions/omnirush/agents-lib.ts#virtual:normalized:round1View on unpkg

assets/extensions/omnirush/agents-lib.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/agents-lib.tsView on unpkg

assets/extensions/omnirush/voice/capture.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/voice/capture.tsView on unpkg

assets/extensions/omnirush/mcp-client.bundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/mcp-client.bundle.jsView on unpkg

assets/extensions/omnirush/memory-lib.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/extensions/omnirush/memory-lib.tsView on unpkg

core/dist/bundle/chunks/chunk-FUXEF6JQ.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-FUXEF6JQ.jsView on unpkg

core/dist/bundle/chunks/https-proxy-agent-2VXB7436.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/https-proxy-agent-2VXB7436.jsView on unpkg

core/dist/bundle/chunks/anthropic.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/anthropic.jsView on unpkg

core/dist/bundle/chunks/chunk-NUHFSC37.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/chunk-NUHFSC37.jsView on unpkg

core/dist/bundle/chunks/openai-codex.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

core/dist/bundle/chunks/openai-codex.jsView on unpkg

omnirush@2.1.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code