ozaiya-cli@0.11.21: Malicious npm security report (Block)

Loading npm security reports…

ozaiya-cli@0.11.21: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

23 flagged

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/ozaiya.mjsView file

Lines 1-27javascript

1#!/usr/bin/env node

3import { execFileSync } from 'child_process';

4import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/ozaiya.mjsView on unpkg · L2

5import { join, dirname } from 'path';

7// Check if we're already running with the flags

8const hasNoWarnings = process.execArgv.includes('--no-warnings');

9const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/ozaiya.mjsView on unpkg · L7

11if (!hasNoWarnings || !hasNoDeprecation) {

12 // Get path to the actual CLI entrypoint

13 const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));

14 const entrypoint = join(projectRoot, 'dist', 'index.mjs');

16 // Execute the actual CLI directly with the correct flags

17 try {

18 execFileSync(process.execPath, [

19 '--no-warnings',

20 '--no-deprecation',

21 entrypoint,

22 ...process.argv.slice(2)

23 ], {

24 stdio: 'inherit',

25 env: process.env

26 });

27 } catch (error) {

dist/api-DAWnl5V4.mjsView file

Lines 1-21javascript

1import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import axios from 'axios';

2import http from

dist/index-BgQzvLf3.cjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index-BgQzvLf3.cjs: var node_readline = require('node:readline'); this.claudeEnvVars = opts.claudeEnvVars; this.claudeArgs = opts.claudeArgs; if (!this.claudeArgs) return; for (let i = 0; i < this.claudeArgs.length; i++) { const arg = this.claudeArgs[i]; if (i + 1 < this.claudeArgs.length) { const nextArg = this.claudeArgs[i + 1];

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-BgQzvLf3.cjsView on unpkg

dist/api-BIlDnBCx.cjsView file

•context = {\n await updateSettings((settings) => ({\n ...settings,\n machineId: void 0\n }));\n}\nasync function readDaemonState() {\n try {\n if (!fs.existsSync(configuration.daemonStateFile)) {\n return null;\n }\n const content = await promises.readFile(configuration.daemonStateFile, "utf-8");\n return JSON.parse(content);\n } catch (error) {\n console.error(`[PERSISTENCE] Daemon state file corrupted: ${configuration.daemonStateFile}`, error);\n return null;\n }\n}\nfunction writeDaemonState(state) {\n fs.writeFileSync(configuration.daemonStateFile, JSON.stringify(state, null, 2), "utf-8");\n}\nfunction markDaemonOffline(stateReason) {\n try {\n if (!fs.existsSync(configuration.daemonStateFile)) return;\n const existing = JSON.parse(fs.readFileS

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/api-BIlDnBCx.cjsView on unpkg

2Trigger-reachable chain: manifest.main -> dist/index.cjs -> dist/api-BIlDnBCx.cjs L2: L3: var axios = require('axios'); L4: var http = require('node:http'); ... L15: var tweetnacl = require('tweetnacl'); L16: var require$$0$1 = require('child_process'); L17: var util = require('util'); ... L93: L94: const proxyConfigured = !!(process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy)... L95: const httpClient = proxyConfigured ? axios.create() : axios.create({ ... L185: "tools/archives", L186: "package.json" L187: ];

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/api-BIlDnBCx.cjsView on unpkg · L2

bin/ozaiya-local.shView file

•path = bin/ozaiya-local.sh kind = build_helper sizeBytes = 358 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/ozaiya-local.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

scripts/env-wrapper.cjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = scripts/env-wrapper.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

scripts/ripgrep_launcher.cjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = scripts/ripgrep_launcher.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ripgrep_launcher.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

•matchType = normalized_sha256 matchedPackage = claudeputer@1.1.41 matchedPath = scripts/claude_local_launcher.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/index.cjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/index.cjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 0.925 shingleOverlap = 37 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.mjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/lib.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 0.860 shingleOverlap = 37 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg

dist/index.mjsView file

•matchType = token_shingles matchedPackage = claudeputer@1.1.41 matchedPath = dist/index.mjs matchedIdentity = npm:Y2xhdWRlcHV0ZXI:1.1.41 similarity = 0.750 shingleOverlap = 30 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg

Source & flagged code

23 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/ozaiya.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/ozaiya.mjsView on unpkg · L2

7// Check if we're already running with the flags L8: const hasNoWarnings = process.execArgv.includes('--no-warnings'); L9: const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/ozaiya.mjsView on unpkg · L7

dist/api-DAWnl5V4.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = ozaiya-cli@0.11.20 matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.20 similarity = 0.892 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/api-DAWnl5V4.mjsView on unpkg

1import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import axios from 'axios'; L2: import http from 'node:http'; ... L349: } L350: if (!existsSync(this.ozaiyaHomeDir)) { L351: mkdirSync(this.ozaiyaHomeDir, { recursive: true }); ... L6156: const candidates = [ L6157: resolve$1(projectPath(), "tools", "unpacked", "ozaiya-native-screen.node"), L6158: resolve$1(projectPath(), "..", "tools", "unpacked", "ozaiya-native-screen.node") ... L7882: screenW = $.NSScreen.mainScreen.frame.size.width; L7883: } catch(e) {} L7884: }

High

Suspicious Native Addon Load

Source dynamically best-effort loads a bundled native addon.

dist/api-DAWnl5V4.mjsView on unpkg · L1

1import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import axios from 'axios'; L2: import http from 'node:http'; ... L15: import { z as z$1 } from 'zod'; L16: import require$$1, { randomBytes, createCipheriv, createDecipheriv, createHash, createHmac, randomUUID } from 'node:crypto'; L17: import tweetnacl from 'tweetnacl'; L18: import require$$0$1, { spawn, exec as exec$2, execSync as execSync$1 } from 'child_process'; L19: import { promisify } from 'util'; ... L71: L72: const proxyConfigured = !!(process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy)... L73: const httpClient = proxyConfigured ? axios.create() : axios.create({ ... L163: "tools/ar

dist/index-BgQzvLf3.cjsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-BgQzvLf3.cjsView on unpkg

dist/api-BIlDnBCx.cjsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/api-BIlDnBCx.cjsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/api-BIlDnBCx.cjsView on unpkg · L2

bin/ozaiya-local.shView file

•path = bin/ozaiya-local.sh kind = build_helper sizeBytes = 358 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/ozaiya-local.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

scripts/env-wrapper.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

scripts/ripgrep_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ripgrep_launcher.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/index.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg

dist/index.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg

Source & flagged code

23 flagged

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/ozaiya.mjsView file

Lines 1-27javascript

1#!/usr/bin/env node

3import { execFileSync } from 'child_process';

4import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/ozaiya.mjsView on unpkg · L2

5import { join, dirname } from 'path';

7// Check if we're already running with the flags

8const hasNoWarnings = process.execArgv.includes('--no-warnings');

9const hasNoDeprecation = process.execArgv.includes('--no-deprecation');

High

Shell

Package source references shell execution.

bin/ozaiya.mjsView on unpkg · L7

11if (!hasNoWarnings || !hasNoDeprecation) {

12 // Get path to the actual CLI entrypoint

13 const projectRoot = dirname(dirname(fileURLToPath(import.meta.url)));

14 const entrypoint = join(projectRoot, 'dist', 'index.mjs');

16 // Execute the actual CLI directly with the correct flags

17 try {

18 execFileSync(process.execPath, [

19 '--no-warnings',

20 '--no-deprecation',

21 entrypoint,

22 ...process.argv.slice(2)

23 ], {

24 stdio: 'inherit',

25 env: process.env

26 });

27 } catch (error) {

dist/api-DAWnl5V4.mjsView file

Lines 1-21javascript

1import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import axios from 'axios';

2import http from

dist/index-BgQzvLf3.cjsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index-BgQzvLf3.cjsView on unpkg

dist/api-BIlDnBCx.cjsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/api-BIlDnBCx.cjsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/api-BIlDnBCx.cjsView on unpkg · L2

bin/ozaiya-local.shView file

•path = bin/ozaiya-local.sh kind = build_helper sizeBytes = 358 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/ozaiya-local.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

scripts/env-wrapper.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

scripts/ripgrep_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ripgrep_launcher.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

dist/index.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.mjsView on unpkg

dist/index.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.mjsView on unpkg

ozaiya-cli@0.11.21

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code