ozaiya-cli@0.11.32: Manual Review npm security report (Allow)

Loading npm security reports…

ozaiya-cli@0.11.32: Manual Review npm security report (Allow) | LPM Firewall

Source & flagged code

28 flagged

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/ozaiya.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/ozaiya.mjsView on unpkg · L2

dist/api-CLsi8TNA.cjsView file

•context = {\n await updateSettings((settings) => ({\n ...settings,\n machineId: void 0\n }));\n}\nasync function readDaemonState() {\n try {\n if (!fs.existsSync(configuration.daemonStateFile)) {\n return null;\n }\n const content = await promises.readFile(configuration.daemonStateFile, "utf-8");\n return JSON.parse(content);\n } catch (error) {\n console.error(`[PERSISTENCE] Daemon state file corrupted: ${configuration.daemonStateFile}`, error);\n return null;\n }\n}\nfunction writeDaemonState(state) {\n fs.writeFileSync(configuration.daemonStateFile, JSON.stringify(state, null, 2), "utf-8");\n}\nfunction markDaemonOffline(stateReason) {\n try {\n if (!fs.existsSync(configuration.daemonStateFile)) return;\n const existing = JSON.parse(fs.readFileS

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/api-CLsi8TNA.cjsView on unpkg

2Trigger-reachable chain: manifest.main -> dist/index.cjs -> dist/api-CLsi8TNA.cjs L2: L3: var axios = require('axios'); L4: var http = require('node:http'); ... L15: var tweetnacl = require('tweetnacl'); L16: var require$$0$1 = require('child_process'); L17: var util = require('util'); ... L38: var mailparser = require('mailparser'); L39: var promises$2 = require('node:dns/promises'); L40: var node_zlib = require('node:zlib'); ... L100: L101: const proxyConfigured = !!(process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy)... L102: const httpClient = proxyConfigured ? axios.create() : axios.create({

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/api-CLsi8TNA.cjsView on unpkg · L2

2291L2292: const execAsync = util.promisify(require$$0$1.exec); L2293: function registerCommonHandlers(rpcHandlerManager, workingDirectory) {

High

Shell

Package source references shell execution.

dist/api-CLsi8TNA.cjsView on unpkg · L2291

385} L386: if (!fs.existsSync(this.ozaiyaHomeDir)) { L387: fs.mkdirSync(this.ozaiyaHomeDir, { recursive: true }); ... L6527: let gdigrabCache; L6528: const esmRequire$2 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentSc... L6529: function getNativeAddon() { ... L6542: const candidates = [ L6543: path.resolve(projectPath(), "tools", "unpacked", "ozaiya-native-screen.node"), L6544: path.resolve(projectPath(), "..", "tools", "unpacked", "ozaiya-native-screen.node") ... L8342: screenW = $.NSScreen.mainScreen.frame.size.width; L8343: } catch(e) {} L8344: }

High

Suspicious Native Addon Load

Source dynamically best-effort loads a bundled native addon.

dist/api-CLsi8TNA.cjsView on unpkg · L385

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/api-CLsi8TNA.cjs: // env var name holding the API key (e.g., 'ANTHROPIC_API_KEY') async function writeFileChunk(request) { await promises.writeFile(rangesPath(pending.partPath), JSON.stringify(pending.ranges)).catch(() => { baseUrl: z__namespace.string().url().optional(), baseUrl: z__namespace.string().url().optional(), if (profile.anthropicConfig.baseUrl) envVars.ANTHROPIC_BASE_URL = profile.anthropicConfig.baseUrl; if (profile.openaiConfig.baseUrl) envVars.OPENAI_BASE_URL = profile.openaiConfig.baseUrl; await promises.writeFile(tmpFile, JSON.stringify(updated, null, 2));

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/api-CLsi8TNA.cjsView on unpkg

2L3: var axios = require('axios'); L4: var http = require('node:http'); ... L15: var tweetnacl = require('tweetnacl'); L16: var require$$0$1 = require('child_process'); L17: var util = require('util'); ... L38: var mailparser = require('mailparser'); L39: var promises$2 = require('node:dns/promises'); L40: var node_zlib = require('node:zlib'); ... L100: L101: const proxyConfigured = !!(process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy)... L102: const httpClient = proxyConfigured ? axios.create() : axios.create({

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/api-CLsi8TNA.cjsView on unpkg · L2

2Cross-file remote execution chain: dist/api-CLsi8TNA.cjs spawns dist/index-BnG-UOaS.cjs; helper contains network access plus dynamic code execution. L2: L3: var axios = require('axios'); L4: var http = require('node:http'); ... L15: var tweetnacl = require('tweetnacl'); L16: var require$$0$1 = require('child_process'); L17: var util = require('util'); ... L38: var mailparser = require('mailparser'); L39: var promises$2 = require('node:dns/promises'); L40: var node_zlib = require('node:zlib'); ... L100: L101: const proxyConfigured = !!(process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy)... L102: const httpClient = proxyConfigured ? axios.create() : axios.create({

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/api-CLsi8TNA.cjsView on unpkg · L2

2Trigger-reachable persistence chain: manifest.main -> dist/index.cjs -> dist/api-CLsi8TNA.cjs L2: L3: var axios = require('axios'); L4: var http = require('node:http'); ... L15: var tweetnacl = require('tweetnacl'); L16: var require$$0$1 = require('child_process'); L17: var util = require('util'); ... L38: var mailparser = require('mailparser'); L39: var promises$2 = require('node:dns/promises'); L40: var node_zlib = require('node:zlib'); ... L100: L101: const proxyConfigured = !!(process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || process.env.ALL_PROXY || process.env.all_proxy)... L102: const httpClient = proxyConfigured ? axios.create() : axios.create({

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/api-CLsi8TNA.cjsView on unpkg · L2

•matchType = token_shingles matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/api-Dhblu5y0.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api-CLsi8TNA.cjsView on unpkg

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/api-CLsi8TNA.cjsView on unpkg · L2

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/api-CLsi8TNA.cjsView on unpkg · L2

dist/socket-worker.cjsView file

2L3: var node_worker_threads = require('node:worker_threads'); L4: var socket_ioClient = require('socket.io-client');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/socket-worker.cjsView on unpkg · L2

bin/ozaiya-local.shView file

•path = bin/ozaiya-local.sh kind = build_helper sizeBytes = 358 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/ozaiya-local.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-BnG-UOaS.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/index-rXaOQjoz.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-BnG-UOaS.cjsView on unpkg

dist/index-Hd3MCdMB.mjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/index-DlJGYQrD.mjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-Hd3MCdMB.mjsView on unpkg

scripts/claude_version_utils.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.28 matchedPath = scripts/claude_version_utils.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_version_utils.cjsView on unpkg

dist/config-E9BWBsNm.cjsView file

•matchType = token_shingles matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/config-BZ5yHtjK.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-E9BWBsNm.cjsView on unpkg

scripts/env-wrapper.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.28 matchedPath = scripts/env-wrapper.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/runGemini-BY5N6_Gt.mjsView file

•matchType = token_shingles matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/runGemini-LLu95jEf.mjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-BY5N6_Gt.mjsView on unpkg

scripts/ripgrep_launcher.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.28 matchedPath = scripts/ripgrep_launcher.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ripgrep_launcher.cjsView on unpkg

dist/config-D26_u_Ah.mjsView file

•matchType = token_shingles matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/config-kuWdk3pc.mjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-D26_u_Ah.mjsView on unpkg

dist/index.cjsView file

•matchType = token_shingles matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/index.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.cjsView file

•matchType = token_shingles matchedPackage = ozaiya-cli@0.11.28 matchedPath = dist/lib.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

•matchType = normalized_sha256 matchedPackage = ozaiya-cli@0.11.28 matchedPath = scripts/claude_local_launcher.cjs matchedIdentity = npm:b3phaXlhLWNsaQ:0.11.28 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

Source & flagged code

28 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/ozaiya.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/ozaiya.mjsView on unpkg · L2

dist/api-CLsi8TNA.cjsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/api-CLsi8TNA.cjsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/api-CLsi8TNA.cjsView on unpkg · L2

2291L2292: const execAsync = util.promisify(require$$0$1.exec); L2293: function registerCommonHandlers(rpcHandlerManager, workingDirectory) {

High

Shell

Package source references shell execution.

dist/api-CLsi8TNA.cjsView on unpkg · L2291

High

Suspicious Native Addon Load

Source dynamically best-effort loads a bundled native addon.

dist/api-CLsi8TNA.cjsView on unpkg · L385

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/api-CLsi8TNA.cjsView on unpkg

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/api-CLsi8TNA.cjsView on unpkg · L2

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/api-CLsi8TNA.cjsView on unpkg · L2

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/api-CLsi8TNA.cjsView on unpkg · L2

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api-CLsi8TNA.cjsView on unpkg

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/api-CLsi8TNA.cjsView on unpkg · L2

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/api-CLsi8TNA.cjsView on unpkg · L2

dist/socket-worker.cjsView file

2L3: var node_worker_threads = require('node:worker_threads'); L4: var socket_ioClient = require('socket.io-client');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/socket-worker.cjsView on unpkg · L2

bin/ozaiya-local.shView file

•path = bin/ozaiya-local.sh kind = build_helper sizeBytes = 358 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/ozaiya-local.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-BnG-UOaS.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-BnG-UOaS.cjsView on unpkg

dist/index-Hd3MCdMB.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-Hd3MCdMB.mjsView on unpkg

scripts/claude_version_utils.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_version_utils.cjsView on unpkg

dist/config-E9BWBsNm.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-E9BWBsNm.cjsView on unpkg

scripts/env-wrapper.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/runGemini-BY5N6_Gt.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-BY5N6_Gt.mjsView on unpkg

scripts/ripgrep_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ripgrep_launcher.cjsView on unpkg

dist/config-D26_u_Ah.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-D26_u_Ah.mjsView on unpkg

dist/index.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

Source & flagged code

28 flagged

package.jsonView file

•scripts.postinstall = node scripts/unpack-tools.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/ozaiya.mjsView file

2L3: import { execFileSync } from 'child_process'; L4: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/ozaiya.mjsView on unpkg · L2

dist/api-CLsi8TNA.cjsView file

Critical

Encrypted Payload Temp Execution

Source decrypts an embedded payload, writes it to disk, and executes it through a child process.

dist/api-CLsi8TNA.cjsView on unpkg

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/api-CLsi8TNA.cjsView on unpkg · L2

2291L2292: const execAsync = util.promisify(require$$0$1.exec); L2293: function registerCommonHandlers(rpcHandlerManager, workingDirectory) {

High

Shell

Package source references shell execution.

dist/api-CLsi8TNA.cjsView on unpkg · L2291

High

Suspicious Native Addon Load

Source dynamically best-effort loads a bundled native addon.

dist/api-CLsi8TNA.cjsView on unpkg · L385

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/api-CLsi8TNA.cjsView on unpkg

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/api-CLsi8TNA.cjsView on unpkg · L2

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/api-CLsi8TNA.cjsView on unpkg · L2

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/api-CLsi8TNA.cjsView on unpkg · L2

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api-CLsi8TNA.cjsView on unpkg

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/api-CLsi8TNA.cjsView on unpkg · L2

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/api-CLsi8TNA.cjsView on unpkg · L2

dist/socket-worker.cjsView file

2L3: var node_worker_threads = require('node:worker_threads'); L4: var socket_ioClient = require('socket.io-client');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/socket-worker.cjsView on unpkg · L2

bin/ozaiya-local.shView file

•path = bin/ozaiya-local.sh kind = build_helper sizeBytes = 358 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/ozaiya-local.shView on unpkg

tools/archives/difftastic-arm64-linux.tar.gzView file

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = high_entropy_blob sizeBytes = 11425536 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

•path = tools/archives/difftastic-arm64-linux.tar.gz kind = compressed_blob sizeBytes = 11425536 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tools/archives/difftastic-arm64-linux.tar.gzView on unpkg

dist/index-BnG-UOaS.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-BnG-UOaS.cjsView on unpkg

dist/index-Hd3MCdMB.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index-Hd3MCdMB.mjsView on unpkg

scripts/claude_version_utils.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_version_utils.cjsView on unpkg

dist/config-E9BWBsNm.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-E9BWBsNm.cjsView on unpkg

scripts/env-wrapper.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/env-wrapper.cjsView on unpkg

dist/runGemini-BY5N6_Gt.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/runGemini-BY5N6_Gt.mjsView on unpkg

scripts/ripgrep_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ripgrep_launcher.cjsView on unpkg

dist/config-D26_u_Ah.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/config-D26_u_Ah.mjsView on unpkg

dist/index.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.cjsView on unpkg

dist/lib.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lib.cjsView on unpkg

scripts/claude_local_launcher.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/claude_local_launcher.cjsView on unpkg

ozaiya-cli@0.11.32

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code