openyida@2026.8.31: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

openyida@2026.8.31: AI-agent control-surface risk | LPM Firewall

Source & flagged code

20 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

lib/app/canvas-compile.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/app/canvas-compile.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/app/canvas-compile.jsView on unpkg

18* }`; L19: * new Function(wrapped)()(window, window); // 取 Comp.YidaComp || Comp.default L20: *

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/app/canvas-compile.jsView on unpkg · L18

bin/yida.jsView file

12L13: const { version: currentVersion } = require('../package.json'); L14: const { t } = require('../lib/core/i18n');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/yida.jsView on unpkg · L12

lib/feedback/feedback.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/feedback/feedback.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/feedback/feedback.jsView on unpkg

5const crypto = require('crypto'); L6: const { spawnSync } = require('child_process'); L7: ... L47: function printUsage() { L48: process.stderr.write(` L49: 用法: ... L322: function resolveCliPath() { L323: return path.join(__dirname, '..', '..', 'bin', 'yida.js'); L324: } ... L330: env: { L331: ...process.env, L332: YIDA_QUIET: '1',

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/feedback/feedback.jsView on unpkg · L5

lib/dws/dws-wrapper.jsView file

12L13: const { execSync, spawn } = require('child_process'); L14: const { t } = require('../core/i18n'); ... L18: const INSTALL_SCRIPTS = { L19: unix: 'curl -fsSL https://raw.githubusercontent.com/DingTalk-Real-AI/dingtalk-workspace-cli/main/scripts/install.sh | sh', L20: windows: 'irm https://raw.githubusercontent.com/DingTalk-Real-AI/dingtalk-workspace-cli/main/scripts/install.ps1 | iex' ... L28: try { L29: const command = process.platform === 'win32' ? 'where' : 'which'; L30: execSync(`${command} ${DWS_BINARY_NAME}`, { stdio: 'ignore' }); ... L115: input: process.stdin, L116: output: process.stdout L117: });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/dws/dws-wrapper.jsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/dws/dws-wrapper.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/dws/dws-wrapper.jsView on unpkg

scripts/postinstall.jsView file

12* folderName 固定为 yida-skills，安装目标始终是 ~/<tool-config>/skills/yida-skills/ L13: * ~/.claude/skills/yida-skills/ ← <package>/yida-skills (copy) L14: * ~/.codex/skills/yida-skills/ ← <package>/yida-skills (copy) L15: * ~/.opencode/skills/yida-skills/ ← <package>/yida-skills (copy) L16: * ~/.cursor/skills/yida-skills/ ← <package>/yida-skills (copy) ... L58: if (!fs.existsSync(src)) {return;} L59: fs.mkdirSync(dest, { recursive: true }); L60: const entries = fs.readdirSync(src, { withFileTypes: true }); ... L66: } else { L67: fs.copyFileSync(srcPath, destPath); L68: } ... L75: function writeJsonFile(filePath, data) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L12

lib/app/page-compat.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/app/page-compat.js#virtual:normalized:round1View on unpkg

lib/app/create-form.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/app/create-form.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/app/create-form.jsView on unpkg

lib/auth/token-store.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/auth/token-store.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/auth/token-store.jsView on unpkg

lib/bridge/bridge.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/bridge/bridge.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/bridge/bridge.jsView on unpkg

lib/core/doctor.jsView file

•matchType = token_shingles matchedPackage = openyida@2026.8.27-1 matchedPath = lib/core/doctor.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/core/doctor.jsView on unpkg

lib/cdn/cdn-refresh.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/cdn/cdn-refresh.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/cdn/cdn-refresh.jsView on unpkg

lib/cdn/cdn-upload.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/cdn/cdn-upload.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/cdn/cdn-upload.jsView on unpkg

lib/core/env-manager.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/core/env-manager.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/core/env-manager.jsView on unpkg

lib/ai/ai.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/ai/ai.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/ai/ai.jsView on unpkg

lib/asset/asset-resolve.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.8.27-1 matchedPath = lib/asset/asset-resolve.js matchedIdentity = npm:b3BlbnlpZGE:2026.8.27-1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/asset/asset-resolve.jsView on unpkg