osborn@0.9.135: Suspicious npm security report (Warn)

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 28 file(s), 1.16 MB of source, external domains: api.groq.com, api.openai.com, api.smithery.ai, cloud.livekit.io, example.com, osborn.app, www.voice-native.com

Source & flagged code

6 flagged

bin/cli.jsView file

2L3: import { spawn } from 'child_process' L4: import { fileURLToPath } from 'url'

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L2

dist/jsonl-search.jsView file

34// @vscode/ripgrep bundles the rg binary — this is our own dependency L35: const { rgPath } = require('@vscode/ripgrep'); L36: if (rgPath && existsSync(rgPath))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/jsonl-search.jsView on unpkg · L34

dist/index.jsView file

11setMaxListeners(50); L12: import { createServer } from 'http'; L13: import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, mkdtempSync, cpSync, rmSync, statSync, utimesSync, createWriteStream } from 'node:fs'; ... L15: import { fileURLToPath } from 'node:url'; L16: import { spawn } from 'node:child_process'; L17: import { randomUUID } from 'node:crypto'; L18: import { createRequire } from 'node:module'; L19: // 0.9.71: createRequire for resolving package.json versions inside ESM L20: const __sdkVersionRequire = createRequire(import.meta.url); ... L22: import { PassThrough } from 'node:stream'; L23: import { createGunzip } from 'node:zlib'; L24: // Resolve __dirname for this ESM module so we can find sibling files (e.g.

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L11

•matchType = previous_version_dangerous_delta matchedPackage = osborn@0.9.79 matchedIdentity = npm:b3Nib3Ju:0.9.79 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

11setMaxListeners(50); L12: import { createServer } from 'http'; L13: import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, mkdtempSync, cpSync, rmSync, statSync, utimesSync, createWriteStream } from 'node:fs'; ... L15: import { fileURLToPath } from 'node:url'; L16: import { spawn } from 'node:child_process'; L17: import { randomUUID } from 'node:crypto'; L18: import { createRequire } from 'node:module'; L19: // 0.9.71: createRequire for resolving package.json versions inside ESM L20: const __sdkVersionRequire = createRequire(import.meta.url); ... L22: import { PassThrough } from 'node:stream'; L23: import { createGunzip } from 'node:zlib'; L24: // Resolve __dirname for this ESM module so we can find sibling files (e.g.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L11

deploy.shView file

•path = deploy.sh kind = build_helper sizeBytes = 2309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy.shView on unpkg

Source & flagged code

6 flagged · loading source

bin/cli.jsView file

2L3: import { spawn } from 'child_process' L4: import { fileURLToPath } from 'url'

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L2

dist/jsonl-search.jsView file

34// @vscode/ripgrep bundles the rg binary — this is our own dependency L35: const { rgPath } = require('@vscode/ripgrep'); L36: if (rgPath && existsSync(rgPath))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/jsonl-search.jsView on unpkg · L34

dist/index.jsView file

11setMaxListeners(50); L12: import { createServer } from 'http'; L13: import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, mkdtempSync, cpSync, rmSync, statSync, utimesSync, createWriteStream } from 'node:fs'; ... L15: import { fileURLToPath } from 'node:url'; L16: import { spawn } from 'node:child_process'; L17: import { randomUUID } from 'node:crypto'; L18: import { createRequire } from 'node:module'; L19: // 0.9.71: createRequire for resolving package.json versions inside ESM L20: const __sdkVersionRequire = createRequire(import.meta.url); ... L22: import { PassThrough } from 'node:stream'; L23: import { createGunzip } from 'node:zlib'; L24: // Resolve __dirname for this ESM module so we can find sibling files (e.g.

Findings

2 Critical3 High5 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalPrevious Version Dangerous Deltadist/index.js

HighChild Processbin/cli.js

HighShell

HighCommand Output Exfiltrationdist/index.js

MediumDynamic Requiredist/jsonl-search.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdeploy.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code