poe-code@4.0.18: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

poe-code@4.0.18: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-sync-skills.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/providers/opencode.jsView file

87// packages/agent-spawn/src/register-factories.ts L88: import { spawn as spawnChildProcess2 } from "node:child_process"; L89:

High

Child Process

Package source references child process execution.

dist/providers/opencode.jsView on unpkg · L87

4338{ id: "r", aliases: ["r", "rscript"], family: "lexical", spec: "r" }, L4339: { id: "powershell", aliases: ["ps1", "powershell", "pwsh"], family: "lexical", spec: "powershell" }, L4340: { id: "elixir", aliases: ["ex", "exs", "elixir"], family: "lexical", spec: "elixir" },

High

Shell

Package source references shell execution.

dist/providers/opencode.jsView on unpkg · L4338

dist/providers/poe-agent.jsView file

472spawn as spawnChildProcess L473: } from "node:child_process"; L474: function assertExtensionMethod(method) { ... L17953: summary: "Route AI coding agents through Poe's API.", L17954: baseUrl: "https://api.poe.com", L17955: agentBaseUrl: "https://api.poe.com", ... L30510: try { L30511: writeFileSync(filePath, serializeDockerEnvFile(entries), { L30512: encoding: "utf8", ... L51829: `, L51830: agent: `Review the requested pull request directly without orchestrating other agents. Read the pull request context with the available tools, then create exactly one review draft ... L51831:

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/providers/poe-agent.jsView on unpkg · L472

14}; L15: var __commonJS = (cb, mod) => function __require() { L16: try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/providers/poe-agent.jsView on unpkg · L14

packages/terminal-pilot/dist/testing/qa-cli.jsView file

14860// src/commands/daemon-runtime.ts L14861: import { spawn as spawn3 } from "node:child_process"; L14862: import { createHash as createHash2 } from "node:crypto"; L14863: import { mkdir as mkdir2, unlink as unlink2 } from "node:fs/promises"; L14864: import net from "node:net"; L14865: import os4 from "node:os"; ... L14875: const runtime = createTerminalPilotRuntime(); L14876: const socketPath = resolveSocketPath(process.env); L14877: await mkdir2(path14.dirname(socketPath), { recursive: true });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

packages/terminal-pilot/dist/testing/qa-cli.jsView on unpkg · L14860

packages/e2e-test-runner/dist/preflight.jsView file

1import { execSync } from 'node:child_process'; L2: import { access, mkdtemp, rm } from 'node:fs/promises'; ... L86: message: error instanceof Error ? error.message : 'Podman not installed', L87: fix: 'Install Podman: https://podman.io/docs/installation', L88: }; ... L106: try { L107: if (process.platform === 'darwin') { L108: execSync('sandbox-exec -V', { stdio: 'ignore' }); ... L153: const home = await mkdtemp(TEMP_HOME_PREFIX); L154: const workspace = getWorkspaceDir() ?? process.cwd(); L155: const env = buildIsolatedHostEnv(home, workspace); ... L168: function buildIsolatedHostEnv(home, workspace) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

packages/e2e-test-runner/dist/preflight.jsView on unpkg · L1

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 5084834 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index.jsView on unpkg

dist/cli/commands/experiment.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = poe-code@4.0.16 matchedIdentity = npm:cG9lLWNvZGU:4.0.16 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/commands/experiment.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 76-116json

76 "prepack": "npm run build",

77 "prepare": "husky",

78 "install-local-package": "npm pack --pack-destination /tmp && npm install -g /tmp/poe-code-*.tgz && rm /tmp/poe-code-*.tgz",

79 "smoke": "tsx scripts/smoke-test.ts",

80 "smoke:verbose": "tsx scripts/smoke-test.ts --verbose",

81 "smoke:toolcraft-bundle": "node scripts/verify-toolcraft-cli-bundle.mjs",

82 "smoke:toolcraft-entrypoints": "node scripts/verify-toolcraft-entrypoint-bundles.mjs",

83 "metric:test_count": "node scripts/metric-test-count.mjs",

84 "metric:test_duration": "node scripts/metric-test-duration.mjs",

85 "demo:dashboard": "tsx packages/toolcraft-design/src/dashboard/demo.ts",

86 "demo:explorer": "tsx packages/toolcraft-design/src/explorer/demo.ts",

87 "replay": "tsx packages/agent-spawn/src/acp/replay-cli.ts",

88 "codegen:plan-schemas": "tsx scripts/generate-plan-schemas.ts",

89 "codegen:harness-schemas": "tsx scripts/generate-harness-schemas.ts",

90 "smoke:toolcraft-standalone": "node scripts/verify-toolcraft-standalone.mjs",

91 "smoke:toolcraft-sdk-types": "node scripts/verify-toolcraft-published-sdk-types.mjs",

92 "sync-skills": "tsx scripts/sync-skills.ts",

93 "record:fs-conformance": "tsx scripts/record-fs-conformance.ts",

94 "sync:json-schema-test-suite": "node scripts/sync-json-schema-test-suite.mjs",

95 "sync:uri-template-test": "node scripts/sync-uri-template-test.mjs",

96 "postinstall": "node scripts/postinstall-sync-skills.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L96

97 },

98 "bin": {

99 "poe": "dist/bin.cjs",

100 "poe-code": "dist/bin.cjs",

101 "poe-agent": "dist/bin/poe-agent.js",

102 "poe-superintendent-mcp": "packages/superintendent/dist/mcp.js"

103 },

104 "files": [

105 "LICENSE",

106 "dist",

107 "packages/agent-mcp-config/dist",

108 "packages/agent-skill-config/dist",

109 "packages/config-mutations/dist",

110 "packages/toolcraft-design/dist",

111 "packages/memory/dist",

112 "scripts/postinstall-sync-skills.mjs",

113 "packages/superintendent/dist",

114 "packages/tiny-stdio-mcp-server/dist",

115 "packages/acp-telemetry/dist",

116 "packages/agent-child-process/dist",

dist/providers/opencode.jsView file

Lines 67-107javascript

67var DEFAULT_FRONTIER_MODEL = "anthropic/claude-opus-4.7";

68var CLAUDE_CODE_VARIANTS = {

69 haiku: "anthropic/claude-haiku-4.5",

70 sonnet: "anthropic/claude-sonnet-4.6",

71 opus: "anthropic/claude-opus-4.7"

dist/providers/poe-agent.jsView file

472spawn as spawnChildProcess L473: } from "node:child_process"; L474: function assertExtensionMethod(method) { ... L17953: summary: "Route AI coding agents through Poe's API.", L17954: baseUrl: "https://api.poe.com", L17955: agentBaseUrl: "https://api.poe.com", ... L30510: try { L30511: writeFileSync(filePath, serializeDockerEnvFile(entries), { L30512: encoding: "utf8", ... L51829: `, L51830: agent: `Review the requested pull request directly without orchestrating other agents. Read the pull request context with the available tools, then create exactly one review draft ... L51831:

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/providers/poe-agent.jsView on unpkg · L472

14}; L15: var __commonJS = (cb, mod) => function __require() { L16: try {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/providers/poe-agent.jsView on unpkg · L14

packages/terminal-pilot/dist/testing/qa-cli.jsView file

Lines 14840-14880javascript

14840 waitForExit2,

14841 readScreen,

14842 screenshot,

14843 readHistory,

14844 resize,

14845 closeSession,

14846 getSession,

14847 listSessions,

14848 install,

14849 uninstall

14850];

packages/e2e-test-runner/dist/preflight.jsView file

Lines 1-21javascript

1import { execSync } from 'node:child_process';

2import { access, mkdtemp, rm } from 'node:fs/promises';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

packages/e2e-test-runner/dist/preflight.jsView on unpkg · L1

3import { tmpdir } from 'node:os'

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 5084834 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/index.jsView on unpkg

dist/cli/commands/experiment.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = poe-code@4.0.16 matchedIdentity = npm:cG9lLWNvZGU:4.0.16 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/commands/experiment.jsView on unpkg

Lines 4318-4358javascript

4318 { id: "dockerfile", aliases: ["dockerfile", "docker"], family: "line", spec: "dockerfile" },

4319 { id: "ini", aliases: ["ini", "properties"], family: "data", spec: "ini" },

4320 { id: "toml", aliases: ["toml"], family: "data", spec: "toml" },

4321 { id: "plaintext", aliases: ["text", "txt", "plain", "plaintext"], plain: true },

4322 { id: "ruby", aliases: ["rb", "ruby"], family: "lexical", spec: "ruby" },

4323 { id: "go", aliases: ["go", "golang"], family: "lexical", spec: "go" },

4324 { id: "java", aliases: ["java"], family: "lexical", spec: "java" },

4325 { id: "kotlin", aliases: ["kt", "kotlin", "kts"], family: "lexical", spec: "kotlin" },

4326 { id: "swift", aliases: ["swift"], family: "lexical", spec: "swift" },

4327 { id: "dart", aliases: ["dart"], family: "lexical", spec: "dart" },

4328 { id: "scala", aliases: ["scala", "sc"], family: "lexical", spec: "scala" },

4329 { id: "groovy", aliases: ["groovy", "gvy", "gy", "gsp"], family: "lexical", spec: "groovy" },

4330 { id: "c", aliases: ["c"], family: "lexical", spec: "c" },

4331 { id: "cpp", aliases: ["cpp", "c++", "cc", "cxx"], family: "lexical", spec: "cpp" },

4332 { id: "csharp", aliases: ["cs", "csharp", "c#"], family: "lexical", spec: "csharp" },

4333 { id: "objective-c", aliases: ["objc", "objectivec", "objective-c", "m", "mm"], family: "lexical", spec: "objectivec" },

4334 { id: "rust", aliases: ["rs", "rust"], family: "lexical", spec: "rust" },

4335 { id: "php", aliases: ["php"], family: "lexical", spec: "php" },

4336 { id: "lua", aliases: ["lua"], family: "lexical", spec: "lua" },

4337 { id: "perl", aliases: ["pl", "perl", "pm"], family: "lexical", spec: "perl" },

4338 { id: "r", aliases: ["r", "rscript"], family: "lexical", spec: "r" },

4339 { id: "powershell", aliases: ["ps1", "powershell", "pwsh"], family: "lexical", spec: "powershell" },

4340 { id: "elixir", aliases: ["ex", "exs", "elixir"], family: "lexical", spec: "elixir" },

High

Shell

Package source references shell execution.

dist/providers/opencode.jsView on unpkg · L4338

4341 { id: "erlang", aliases: ["erl", "erlang", "hrl"], family: "lexical", spec: "erlang" },

4342 { id: "haskell", aliases: ["hs", "haskell"], family: "lexical", spec: "haskell" },

4343 { id: "clojure", aliases: ["clj", "cljs", "cljc", "clojure"], family: "lexical", spec: "clojure" },

4344 { id: "fsharp", aliases: ["fs", "fsi", "fsx", "fsharp"], family: "lexical", spec: "fsharp" },

4345 { id: "vb", aliases: ["vb", "vbnet"], family: "lexical", spec: "vb" },

4346 { id: "graphql", aliases: ["graphql", "gql"], family: "lexical", spec: "graphql" },

4347 { id: "protobuf", aliases: ["proto", "protobuf"], family: "lexical", spec: "protobuf" },

4348 { id: "hcl", aliases: ["hcl", "tf", "terraform"], family: "lexical", spec: "hcl" },

4349 { id: "nginx", aliases: ["nginx", "nginxconf"], family: "lexical", spec: "nginx" },

4350 { id: "makefile", aliases: ["makefile", "mk"], family: "lexical", spec: "makefile" },

4351 { id: "cmake", aliases: ["cmake"], family: "lexical", spec: "cmake" },

4352 { id: "gradle", aliases: ["gradle"], family: "lexical", spec: "groovy" },

4353 { id: "env", aliases: ["env", "dotenv"], family: "data", spec: "ini" },

4354 { id: "vue", aliases: ["vue"], family: "markup", spec: "html" },

4355 { id: "svelte", aliases: ["svelte"], family: "markup", spec: "html" }

4356];

4357var languageByAlias = /* @__PURE__ */ new Map();

4358for (const language of codeLanguages) {