openyida@2026.8.5: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

openyida@2026.8.5: AI-agent control-surface risk | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

lib/app/canvas-compile.jsView file

18* }`; L19: * new Function(wrapped)()(window, window); // 取 Comp.YidaComp || Comp.default L20: *

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/app/canvas-compile.jsView on unpkg · L18

bin/yida.jsView file

12L13: const { version: currentVersion } = require('../package.json'); L14: const { t } = require('../lib/core/i18n');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/yida.jsView on unpkg · L12

lib/feedback/feedback.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = lib/feedback/feedback.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/feedback/feedback.jsView on unpkg

5const crypto = require('crypto'); L6: const { spawnSync } = require('child_process'); L7: ... L47: function printUsage() { L48: process.stderr.write(` L49: 用法: ... L322: function resolveCliPath() { L323: return path.join(__dirname, '..', '..', 'bin', 'yida.js'); L324: } ... L330: env: { L331: ...process.env, L332: YIDA_QUIET: '1',

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/feedback/feedback.jsView on unpkg · L5

lib/dws/dws-wrapper.jsView file

12L13: const { execSync, spawn } = require('child_process'); L14: const { t } = require('../core/i18n'); ... L18: const INSTALL_SCRIPTS = { L19: unix: 'curl -fsSL https://raw.githubusercontent.com/DingTalk-Real-AI/dingtalk-workspace-cli/main/scripts/install.sh | sh', L20: windows: 'irm https://raw.githubusercontent.com/DingTalk-Real-AI/dingtalk-workspace-cli/main/scripts/install.ps1 | iex' ... L28: try { L29: const command = process.platform === 'win32' ? 'where' : 'which'; L30: execSync(`${command} ${DWS_BINARY_NAME}`, { stdio: 'ignore' }); ... L115: input: process.stdin, L116: output: process.stdout L117: });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/dws/dws-wrapper.jsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = lib/dws/dws-wrapper.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/dws/dws-wrapper.jsView on unpkg

scripts/postinstall.jsView file

12* folderName 固定为 yida-skills，安装目标始终是 ~/<tool-config>/skills/yida-skills/ L13: * ~/.claude/skills/yida-skills/ ← <package>/yida-skills (copy) L14: * ~/.codex/skills/yida-skills/ ← <package>/yida-skills (copy) L15: * ~/.opencode/skills/yida-skills/ ← <package>/yida-skills (copy) L16: * ~/.aone_copilot/skills/yida-skills/ ← <package>/yida-skills (copy) ... L56: if (!fs.existsSync(src)) {return;} L57: fs.mkdirSync(dest, { recursive: true }); L58: const entries = fs.readdirSync(src, { withFileTypes: true }); ... L64: } else { L65: fs.copyFileSync(srcPath, destPath); L66: } ... L73: function writeJsonFile(filePath, data) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L12

scripts/demo-dws.shView file

•path = scripts/demo-dws.sh kind = build_helper sizeBytes = 3040 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/demo-dws.shView on unpkg

lib/core/env-cmd.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = lib/core/env-cmd.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/core/env-cmd.jsView on unpkg

lib/core/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = lib/core/doctor.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/core/doctor.jsView on unpkg

scripts/validate-skills.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = scripts/validate-skills.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/validate-skills.jsView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 42-82json

42 "test:coverage": "jest --coverage",

43 "lint": "eslint bin/ lib/ scripts/ tests/ --ext .js",

44 "lint:fix": "eslint bin/ lib/ scripts/ tests/ --ext .js --fix",

45 "solution:runner": "node scripts/solution-center-runner.js",

46 "build:skills": "node scripts/build-skills-package.js",

47 "docs:commands": "node scripts/generate-command-docs.js",

48 "check:quick": "npm run check:structure && npm run check:commands && npm run check:docs && npm run check:i18n && npm run check:syntax && npm run lint",

49 "check:structure": "node scripts/validate-structure.js",

50 "check:commands": "node scripts/validate-command-manifest.js",

51 "check:docs": "node scripts/generate-command-docs.js --check",

52 "check:skills": "node scripts/validate-skills.js",

53 "check:i18n": "node scripts/validate-i18n.js --check",

54 "check:i18n:audit": "node scripts/validate-i18n.js",

55 "check:i18n:baseline": "node scripts/validate-i18n.js --update-baseline",

56 "check:syntax": "node scripts/check-syntax.js",

57 "check:release-risks": "node scripts/check-release-risks.js",

58 "check:package-size": "node scripts/validate-package-size.js",

59 "check:package": "npm pack --dry-run",

60 "check:release": "npm run check:ci",

61 "check:ci": "bash scripts/validate-ci.sh",

62 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L62

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L62

63 },

64 "keywords": [

65 "yida",

66 "aliwork",

67 "dingtalk",

68 "cli",

69 "openyida",

70 "low-code",

71 "ai",

72 "qoder",

73 "wukong",

74 "mulerun"

75 ],

76 "author": "OpenYida Contributors",

77 "license": "MIT",

78 "repository": {

79 "type": "git",

80 "url": "git+https://github.com/openyida/openyida.git"

81 },

82 "bugs": {

lib/app/canvas-compile.jsView file

Lines 1-38javascript

1'use strict';

2

3/**

4 * canvas-compile.js - Code Canvas 页面本地编译器

5 *

6 * 把原始 React/JSX/TSX 源码在本地（Node）编译成 Code Canvas 运行态代码

7 * （runtimeCode）+ 依赖清单（importedModules），无需调用任何线上编译服务，

8 * 因此不依赖登录态、不经过风控 WAF。

9 *

10 * ── YidaCodeCanvas 运行方式 ──

11 * 画布物料在浏览器里这样消费 runtimeCode：

bin/yida.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * openyida - 宜搭命令行工具

4 *

5 * 安装：npm install -g openyida

6 * 用法：openyida <命令> [参数]（别名：yida）

7 *

8 * 命令清单维护在 lib/core/command-manifest.js，供 help 和 agent JSON 共用。

9 */

10

11'use strict';

12

lib/feedback/feedback.jsView file

Lines 1-25javascript

1'use strict';

2

3const fs = require('fs');

4const path = require('path');

5const

lib/dws/dws-wrapper.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * 钉钉 CLI (dws) 包装器

4 *

5 * 功能：

6 * 1. 检测并提示安装钉钉 CLI

7 * 2. 透传所有 dws 命令到系统安装的 dws

8 * 3. 提供一键安装指引

9 */

10

11'use strict';

12

scripts/postinstall.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * postinstall hook: skills installation + Codex plugin import + welcome guide after `npm install -g openyida`

4 *

5 * 职责：

6 * 1. 清理旧版本遗留的错误安装（~/.xxx/yida-skills/，缺少 skills/ 中间层级）

7 * 2. 将 yida-skills/ 安装到各 AI 工具的正确 skills 目录

8 * 3. Codex 已安装时，导入本地 Codex 插件，让用户可在 @ 菜单中选择「宜搭」

9 * 4. 首次安装欢迎引导

10 *

11 * 正确的 skills 安装路径（所有工具统一使用 skills/ 子目录）：

scripts/demo-dws.shView file

•path = scripts/demo-dws.sh kind = build_helper sizeBytes = 3040 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/demo-dws.shView on unpkg

lib/core/env-cmd.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = lib/core/env-cmd.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/core/env-cmd.jsView on unpkg

lib/core/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = lib/core/doctor.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/core/doctor.jsView on unpkg

scripts/validate-skills.jsView file

•matchType = normalized_sha256 matchedPackage = openyida@2026.7.30 matchedPath = scripts/validate-skills.js matchedIdentity = npm:b3BlbnlpZGE:2026.7.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/validate-skills.jsView on unpkg