Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

pageproof@0.1.12: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as AI-agent capability risk

Allowed by default with warning: agent-facing configuration or capability changes need review before use.

View on npm All versions Policy details

registry / pageproof / 0.1.12

pageproof@0.1.12

Live Pandoc Markdown preview with paginated browser output.

AI Security Review

scanned 5h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User starts a debug session and explicitly invokes pageproof --session PORT --eval FILE.

Impact

Arbitrary code can act in the preview page's browser context.

Mechanism

Loopback-delivered browser AsyncFunction evaluation.

Rationale

The package is not malicious by source evidence, but it intentionally provides an AI-oriented arbitrary browser-code evaluation feature and bundled agent instructions requesting elevated permission. This warrants a warning for dangerous capability exposure.

Evidence

package.jsonsrc/cli.jssrc/server.jsassets/browser-debug.jsSKILL.md

Network endpoints1

127.0.0.1

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Evidence for warning

src/cli.js exposes explicit --session --eval execution.
assets/browser-debug.js runs supplied source via AsyncFunction.
SKILL.md directs Codex to seek elevated command permission.

Evidence against

package.json has no install lifecycle hooks.
Debug evaluation is opt-in (--debug) and loopback-only.
src/server.js binds only 127.0.0.1 and guards POST control routes.
No credential harvesting, external exfiltration, or stealth persistence found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 22 file(s), 2.32 MB of source, external domains: 127.0.0.1, bugzilla.mozilla.org, connect.microsoft.com, css-infos.net, cssdot.ru, developer.mozilla.org, drafts.csswg.org, drafts.fxtf.org, github.com, help.dottoro.com, msdn.microsoft.com, phrogz.net, registry.npmjs.org, webkit.org, www.sitepoint.com, www.w3.org

Source & flagged code

5 flagged · loading source

src/pandoc.jsView file

2import path from 'node:path'; L3: import { spawn } from 'node:child_process'; L4: import { escapeHtml, packageRoot } from './util.js';

High

Child Process

Package source references child process execution.

src/pandoc.jsView on unpkg · L2

src/lifecycle.jsView file

18if (!commandExists('pandoc')) throw new Error('Missing required program: pandoc'); L19: if (isWsl() && !commandExists('cmd.exe')) throw new Error('Missing required program: cmd.exe'); L20:

High

Shell

Package source references shell execution.

src/lifecycle.jsView on unpkg · L18

assets/vendor/mathjax/a11y/assistive-mml.jsView file

1(()=>{"use strict";var t={d:(e,s)=>{for(var i in s)t.o(s,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:s[i]})}};t.g=function(){if("object"==typeof globalThis)return g...

Low

Eval

Package source references a known benign dynamic code generation pattern.

assets/vendor/mathjax/a11y/assistive-mml.jsView on unpkg · L1

assets/vendor/mathjax/sre/speech-worker.jsView file

1(()=>{var t,e,n={238(t){function e(t){return Promise.resolve().then(()=>{var e=new Error("Cannot find module '"+t+"'");throw e.code="MODULE_NOT_FOUND",e})}e.keys=()=>[],e.resolve=e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

assets/vendor/mathjax/sre/speech-worker.jsView on unpkg · L1

assets/styles/SourceSerif4Variable-Roman.ttf.woff2View file

•path = [redacted]-Roman.ttf.woff2 kind = high_entropy_blob sizeBytes = 429100 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/styles/SourceSerif4Variable-Roman.ttf.woff2View on unpkg

Findings

4 High3 Medium8 Low

HighChild Processsrc/pandoc.js

HighShellsrc/lifecycle.js

HighSame File Env Network Executionassets/vendor/mathjax/sre/speech-worker.js

HighShips High Entropy Blobassets/styles/SourceSerif4Variable-Roman.ttf.woff2

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalassets/vendor/mathjax/a11y/assistive-mml.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

87%Warn

Verdict confidence

IntentDangerous Capability

TypeAI-agent capability abuse

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only AI-agent capability risk

Package metadata

npm

AuthorDamon Wischik

Maintainersdamonjw

Version0.1.12

PublishedJul 4, 2026

LicenseSEE LICENSE IN THIRD_PARTY_NOTICES.md

Dependencies2

Integrityverified

Package size2.12 MB

Files85

Keywordsmarkdownpreviewpandocpagedjscitationsfootnotescli

Runtime surface

package.json

Entrypointsbin → pageproof

Runtimenode >=20

Artifact7.72 MB · 85 files1 signature(s)

Install lifecycleNo install hooks · other: test, test:manual

Behavioral surface

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellHighEntropyStringsMinifiedObfuscatedTelemetryUrlStringsNoLicense

LPM CLI

Source & flagged code

5 flagged

src/pandoc.jsView file

Lines 1-22javascript

1import fs from 'node:fs/promises';

2import path from 'node:path';

3import { spawn } from 'node:child_process';

4import { escapeHtml, packageRoot } from './util.js';

High

Child Process

Package source references child process execution.

src/pandoc.jsView on unpkg · L2

5import { ownedFields } from './frontmatter.js';

6import {

7 DEBUG_EXCEPTION_MESSAGE_MAX_CHARS,

8 DEBUG_EXCEPTION_NAME_MAX_CHARS,

9 DEBUG_EXCEPTION_STACK_MAX_CHARS,

10 DEBUG_RESULT_MAX_BYTES,

11 DEBUG_RESULT_MAX_DEPTH,

12 DEBUG_RESULT_MAX_NODES,

13 DEBUG_RESULT_MAX_STRING_BYTES

14} from './debug-protocol.js';

15

16const BROWSER_TITLE_SENTINEL = 'MDPREVIEW_BROWSER_TITLE';

17const MATHJAX_URL = '/static/mathjax/tex-mml-chtml-nofont.js';

18const PANDOC_BOUNDARY_FILTER = path.join(packageRoot, 'assets', 'pandoc-boundary.lua');

19

20export async function buildWithPandoc({

21 sourceFile,

22 tempDir,

src/lifecycle.jsView file

Lines 1-38javascript

1import fs from 'node:fs/promises';

2import os from 'node:os';

3import path from 'node:path';

4import { spawn } from 'node:child_process';

assets/vendor/mathjax/a11y/assistive-mml.jsView file

Lines 1-2javascript

1(()=>{"use strict";var t={d:(e,s)=>{for(var i in s)t.o(s,i)&&!t.o(e,i)

assets/vendor/mathjax/sre/speech-worker.jsView file

Lines 1-1javascript

1(()=>{var t,e,n={238(t){function e(t){return Promise.resolve().then(()=>{var e

assets/styles/SourceSerif4Variable-Roman.ttf.woff2View file

•path = [redacted]-Roman.ttf.woff2 kind = high_entropy_blob sizeBytes = 429100 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/styles/SourceSerif4Variable-Roman.ttf.woff2View on unpkg

5import chokidar from 'chokidar';

6import { createDependencySet } from './dependencies.js';

7import { replacePandocDependencies } from './manifest.js';

8import { buildWithPandoc, stylesheetUrls, writeErrorPage } from './pandoc.js';

9import { commandExists, delay, isWsl, pathNeedsPolling, writeJson } from './util.js';

10import { createPreviewServer } from './server.js';

11import { resolveBuildInput, resolvedStatus } from './resolution.js';

12import { mergeViewerUpdate, normalizeViewerSelection } from './viewer-selection.js';

13

14const watchPollIntervalMs = 100;

15

16export async function runSession(options) {

17 const sourceFile = path.resolve(options.file);

18 if (!commandExists('pandoc')) throw new Error('Missing required program: pandoc');

19 if (isWsl() && !commandExists('cmd.exe')) throw new Error('Missing required program: cmd.exe');

20

High

Shell

Package source references shell execution.

src/lifecycle.jsView on unpkg · L18

21 const sourceDir = path.dirname(sourceFile);

22 const homeDir = options.homeDir ?? os.homedir();

23 const cwd = path.resolve(options.cwd ?? process.cwd());

24 const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'mdpreview-'));

25 const debug = Boolean(options.debug);

26 const logFile = options.logFile ?? (debug ? path.join(tempDir, 'session.log') : undefined);

27 const stdout = options.stdout ?? process.stdout;

28 const stderr = options.stderr ?? process.stderr;

29 const state = createSessionState({ sourceFile, logFile });

30 const dependencies = createDependencySet();

31 const reporter = createReporter({ sourceFile, debug, logFile, stdout });

32 const handleBrowserLog = createBrowserLogHandler({

33 tempDir,

34 logFile,

35 debugBrowser: debug,

36 onEntry: (entry) => {

37 if (entry.buildId === state.buildId) state.browserReport = entry;

38 if (!state.firstBrowserWarningReported && (entry.ok === false || entry.errors?.length)) {

&&

Object.

defineProperty

(e,i,{enumerable:

!

0

,get:s[i]})}};t.

g

=function

(){

if

(

"object"

==typeof

globalThis)

return

globalThis;

try

{

return

this

||new

Function

(

"return this"

)()}

catch

(t){

if

(

"object"

==typeof

window)

return

window}}(),t.

o

=

(

t

,

e

)

=>

Object

.

prototype

.hasOwnProperty.

call

(t,e),t.

r

=

t

=>

{

"undefined"

!=typeof

Symbol

&&

Symbol.toStringTag

&&

Object.

defineProperty

(t,Symbol.toStringTag,{value:

"Module"

}),Object.

defineProperty

(t,

"__esModule"

,{value:

!

0

})};

var

e

=

{};t.

r

(e),t.

d

(e,{

AssistiveMmlHandler

:()

=>

u,

AssistiveMmlMathDocumentMixin

:()

=>

h,Assi

...

Low

Eval

Package source references a known benign dynamic code generation pattern.

assets/vendor/mathjax/a11y/assistive-mml.jsView on unpkg · L1

2

Long lines were clipped for display.

=new

Error

(

"Cannot find module '"

+

t

+

"'"

);

throw

e.code

=

"MODULE_NOT_FOUND"

,e})}e.

keys

=

()

=>

[],e.resolve

=

e,e.id

=

238

,t.exports

=

e},

981

(

t

,

e

){

"use strict"

;

function

n

(

t

,

e

){

return

void

0

===

e

&&

(e

=

Object),e

&&

"function"

==typeof

e.getOwnPropertyDescriptors

&&

(t

=

e.

create

(

null

,e.

getOwnPropertyDescriptors

(t))),e

&&

"function"

==typeof

e.freeze

?

e.

freeze

(t)

:

t}

function

r

(

t

,

e

){

return

Object

.

prototype

.hasOwnProperty.

call

(t,e)}

var

o

=

n

({allowfullscreen:

!

0

,async:

!

0

,autofocus:

!

0

,autoplay:

!

0

,checked:

!

0

,controls:

!

0

,default:

!

0

,defer:

!

0

,disabled:

!

0

,f

...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

assets/vendor/mathjax/sre/speech-worker.jsView on unpkg · L1

Long lines were clipped for display.