pi-harness-runtime@1.1.97: Suspicious npm security report (Warn)

Loading npm security reports…

pi-harness-runtime@1.1.97: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

21 flagged

Lines 1-28json

2 "name": "pi-harness-runtime",

3 "version": "1.1.97",

4 "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",

5 "type": "module",

6 "scripts": {

7 "test": "node --test",

8 "postinstall": "mkdir -p ~/.pi-harness-runtime/cookies && node scripts/copy-plugins.js && ([ -f ~/.config/herdr/config.toml ] || mkdir -p ~/.config/herdr && cp config.toml.example ~/.config/herdr/config.toml)",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 "release": "bun scripts/release-all.ts",

10 "release:patch": "bun scripts/release-all.ts --release-as patch",

11 "release:minor": "bun scripts/release-all.ts --release-as minor",

12 "release:major": "bun scripts/release-all.ts --release-as major",

13 "release:dry-run": "bun scripts/release-all.ts --dry-run",

14 "auth:minimax": "bun packages/auth/src/run-minimax-auth.ts auth",

15 "auth:minimax:check": "bun packages/auth/src/run-minimax-auth.ts check",

16 "auth:minimax:scrape": "bun packages/auth/src/run-minimax-auth.ts scrape",

17 "skills:sync": "bun scripts/skills-sync.ts",

18 "skills:sync:check": "bun scripts/skills-sync.ts --check-only",

19 "build": "for pkg in packages/*/; do [ -f \"${pkg}tsconfig.json\" ] && [ \"$pkg\" != \"packages/provider-router/\" ] && node_modules/.bin/tsc -p \"${pkg}tsconfig.json\" --skipLibCheck > /dev/null 2>&1 || true; done",

20 "prepublishOnly": "bun run build",

21 "test:harness": "bun test harness/langchain/",

22 "test:all": "node --test && bun test harness/langchain/"

23 },

24 "bin": {

25 "harness-auth": "packages/auth/src/run-minimax-auth.ts"

26 },

27 "files": [

28 "*.ts",

harness/langchain/daemon.tsView file

Lines 16-56typescript

16 * │ publish (loop-events.ts) ─► HerdrEventBus

17 * │ gates ─► NotificationCenter

18 *

19 * Milestones:

20 * M1 — Daemon skeleton

harness/e2e/playwright-runner.tsView file

Lines 149-189typescript

149 await this.page.waitForSelector(selector, {

150 timeout: timeoutMs ?? this.config.timeout,

151 });

152 }

153

154 /**

155 * Take a screenshot

156

harness/langchain/cron-cli.tsView file

Lines 14-54typescript

15const SCHEDULES = ["every-5m", "every-10m", "every-30m", "hourly", "daily", "weekly"] as const;

16type Schedule

packages/scheduler-adapter/dist/cron.jsView file

Lines 1-23javascript

1/**

2 * Cron Scheduler Adapter — RFC-0101 §6

3 *

4 * Writes crontab entries for scheduled tasks.

5 * Entries are managed via a marker block so unschedule() is clean.

6 */

7import { execSync } from "node:child_process";

8import { writeFileSync, unlinkSync } from

harness/e2e/auto-test-loop.tsView file

Lines 473-513typescript

473/**

474 * Attempt to auto-fix the failure

475 */

476async function attemptAutoFix(

477 analysis: FailureAnalysis,

478 projectRoot: string

scripts/scan-secrets.shView file

•path = scripts/scan-secrets.sh kind = build_helper sizeBytes = 1945 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/scan-secrets.shView on unpkg

.pi/plugins/herdr-clipboard/tmux-watch.shView file

•path = .pi/plugins/herdr-clipboard/tmux-watch.sh kind = payload_in_excluded_dir sizeBytes = 1169 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.pi/plugins/herdr-clipboard/tmux-watch.shView on unpkg

harness/langchain/checkpointer.tsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

harness/langchain/checkpointer.tsView on unpkg

packages/auth/dist/minimax-browser-auth.jsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/auth/dist/minimax-browser-auth.js matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/auth/dist/minimax-browser-auth.jsView on unpkg

packages/auth/src/minimax-browser-auth.tsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/auth/src/minimax-browser-auth.ts matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/auth/src/minimax-browser-auth.tsView on unpkg

packages/clipboard/dist/src/gist-relay.jsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = [redacted]-relay.js matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/clipboard/dist/src/gist-relay.jsView on unpkg

packages/clipboard/src/gist-relay.tsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/clipboard/src/gist-relay.ts matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/clipboard/src/gist-relay.tsView on unpkg

packages/codex-adapter/dist/executor.jsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/codex-adapter/dist/executor.js matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/codex-adapter/dist/executor.jsView on unpkg

packages/codex-adapter/src/executor.tsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/codex-adapter/src/executor.ts matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/codex-adapter/src/executor.tsView on unpkg

packages/generic-web-plugin/dist/analyzer.jsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/generic-web-plugin/dist/analyzer.js matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/generic-web-plugin/dist/analyzer.jsView on unpkg

packages/generic-web-plugin/src/analyzer.tsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/generic-web-plugin/src/analyzer.ts matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/generic-web-plugin/src/analyzer.tsView on unpkg

packages/code-review/dist/engine.jsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/code-review/dist/engine.js matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/code-review/dist/engine.jsView on unpkg

packages/code-review/src/engine.tsView file

•matchType = normalized_sha256 matchedPackage = pi-harness-runtime@1.1.30 matchedPath = packages/code-review/src/engine.ts matchedIdentity = npm:cGktaGFybmVzcy1ydW50aW1l:1.1.30 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/code-review/src/engine.tsView on unpkg

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.postinstall = mkdir -p ~/.pi-harness-runtime/cookies && node scripts/copy-plugins.js && ([ -f ~/.config/herdr/config.toml ] || mkdir -p ~/.config/herdr && cp config.toml.example ~/.config/herdr/...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

harness/langchain/daemon.tsView file

36} from "node:fs"; L37: import { execSync } from "node:child_process"; L38: import { join } from "node:path";

High

Child Process

Package source references child process execution.

harness/langchain/daemon.tsView on unpkg · L36

766const { promisify } = await import("node:util"); L767: const execAsync = promisify(exec); L768:

High

Shell

Package source references shell execution.

harness/langchain/daemon.tsView on unpkg · L766

harness/e2e/playwright-runner.tsView file

169// eslint-disable-next-line no-eval L170: return eval(String(cond)) as boolean; // eslint-disable-line L171: }, condition);

Low

Eval

Package source references a known benign dynamic code generation pattern.

harness/e2e/playwright-runner.tsView on unpkg · L169

harness/langchain/cron-cli.tsView file

34try { L35: const { getHerdrWorkspace } = require("../../packages/event-bus/src/herdr-bus.js"); L36: return getHerdrWorkspace();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

harness/langchain/cron-cli.tsView on unpkg · L34

packages/scheduler-adapter/dist/cron.jsView file

3* L4: * Writes crontab entries for scheduled tasks. L5: * Entries are managed via a marker block so unschedule() is clean. L6: */ L7: import { execSync } from "node:child_process"; L8: import { writeFileSync, unlinkSync } from "node:fs";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

packages/scheduler-adapter/dist/cron.jsView on unpkg · L3

harness/e2e/auto-test-loop.tsView file

493try { L494: execSync("npm install", { cwd: projectRoot, stdio: "ignore" }); L495: return { fixed: true, description: "Ran npm install" }; L496: } catch { L497: return { fixed: false, description: "npm install failed" }; L498: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

harness/e2e/auto-test-loop.tsView on unpkg · L493

scripts/scan-secrets.shView file

•path = scripts/scan-secrets.sh kind = build_helper sizeBytes = 1945 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/scan-secrets.shView on unpkg

.pi/plugins/herdr-clipboard/tmux-watch.shView file

•path = .pi/plugins/herdr-clipboard/tmux-watch.sh kind = payload_in_excluded_dir sizeBytes = 1169 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.pi/plugins/herdr-clipboard/tmux-watch.shView on unpkg

harness/langchain/checkpointer.tsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

harness/langchain/checkpointer.tsView on unpkg

packages/auth/dist/minimax-browser-auth.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/auth/dist/minimax-browser-auth.jsView on unpkg

packages/auth/src/minimax-browser-auth.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/auth/src/minimax-browser-auth.tsView on unpkg

packages/clipboard/dist/src/gist-relay.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/clipboard/dist/src/gist-relay.jsView on unpkg

packages/clipboard/src/gist-relay.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/clipboard/src/gist-relay.tsView on unpkg

packages/codex-adapter/dist/executor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/codex-adapter/dist/executor.jsView on unpkg

packages/codex-adapter/src/executor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/codex-adapter/src/executor.tsView on unpkg

packages/generic-web-plugin/dist/analyzer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/generic-web-plugin/dist/analyzer.jsView on unpkg

packages/generic-web-plugin/src/analyzer.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/generic-web-plugin/src/analyzer.tsView on unpkg

packages/code-review/dist/engine.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/code-review/dist/engine.jsView on unpkg

packages/code-review/src/engine.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/code-review/src/engine.tsView on unpkg

Source & flagged code

21 flagged

package.jsonView file

Lines 1-28json

2 "name": "pi-harness-runtime",

3 "version": "1.1.97",

4 "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",

5 "type": "module",

6 "scripts": {

7 "test": "node --test",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 "release": "bun scripts/release-all.ts",

10 "release:patch": "bun scripts/release-all.ts --release-as patch",

11 "release:minor": "bun scripts/release-all.ts --release-as minor",

12 "release:major": "bun scripts/release-all.ts --release-as major",

13 "release:dry-run": "bun scripts/release-all.ts --dry-run",

14 "auth:minimax": "bun packages/auth/src/run-minimax-auth.ts auth",

15 "auth:minimax:check": "bun packages/auth/src/run-minimax-auth.ts check",

16 "auth:minimax:scrape": "bun packages/auth/src/run-minimax-auth.ts scrape",

17 "skills:sync": "bun scripts/skills-sync.ts",

18 "skills:sync:check": "bun scripts/skills-sync.ts --check-only",

20 "prepublishOnly": "bun run build",

21 "test:harness": "bun test harness/langchain/",

22 "test:all": "node --test && bun test harness/langchain/"

23 },

24 "bin": {

25 "harness-auth": "packages/auth/src/run-minimax-auth.ts"

26 },

27 "files": [

28 "*.ts",

harness/langchain/daemon.tsView file

Lines 16-56typescript

16 * │ publish (loop-events.ts) ─► HerdrEventBus

17 * │ gates ─► NotificationCenter

18 *

19 * Milestones:

20 * M1 — Daemon skeleton

harness/e2e/playwright-runner.tsView file

Lines 149-189typescript

149 await this.page.waitForSelector(selector, {

150 timeout: timeoutMs ?? this.config.timeout,

151 });

152 }

153

154 /**

155 * Take a screenshot

156

harness/langchain/cron-cli.tsView file

Lines 14-54typescript

15const SCHEDULES = ["every-5m", "every-10m", "every-30m", "hourly", "daily", "weekly"] as const;

16type Schedule

packages/scheduler-adapter/dist/cron.jsView file

Lines 1-23javascript

1/**

2 * Cron Scheduler Adapter — RFC-0101 §6

3 *

4 * Writes crontab entries for scheduled tasks.

5 * Entries are managed via a marker block so unschedule() is clean.

6 */

7import { execSync } from "node:child_process";

8import { writeFileSync, unlinkSync } from

harness/e2e/auto-test-loop.tsView file

Lines 473-513typescript

473/**

474 * Attempt to auto-fix the failure

475 */

476async function attemptAutoFix(

477 analysis: FailureAnalysis,

478 projectRoot: string

scripts/scan-secrets.shView file

•path = scripts/scan-secrets.sh kind = build_helper sizeBytes = 1945 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/scan-secrets.shView on unpkg

.pi/plugins/herdr-clipboard/tmux-watch.shView file

•path = .pi/plugins/herdr-clipboard/tmux-watch.sh kind = payload_in_excluded_dir sizeBytes = 1169 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.pi/plugins/herdr-clipboard/tmux-watch.shView on unpkg

harness/langchain/checkpointer.tsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

harness/langchain/checkpointer.tsView on unpkg

packages/auth/dist/minimax-browser-auth.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/auth/dist/minimax-browser-auth.jsView on unpkg

packages/auth/src/minimax-browser-auth.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/auth/src/minimax-browser-auth.tsView on unpkg

packages/clipboard/dist/src/gist-relay.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/clipboard/dist/src/gist-relay.jsView on unpkg

packages/clipboard/src/gist-relay.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/clipboard/src/gist-relay.tsView on unpkg

packages/codex-adapter/dist/executor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/codex-adapter/dist/executor.jsView on unpkg

packages/codex-adapter/src/executor.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/codex-adapter/src/executor.tsView on unpkg

packages/generic-web-plugin/dist/analyzer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/generic-web-plugin/dist/analyzer.jsView on unpkg

packages/generic-web-plugin/src/analyzer.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/generic-web-plugin/src/analyzer.tsView on unpkg

packages/code-review/dist/engine.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/code-review/dist/engine.jsView on unpkg

packages/code-review/src/engine.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/code-review/src/engine.tsView on unpkg

pi-harness-runtime@1.1.97

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code