Loading npm security reports…

polyrouter@1.0.40: Manual Review npm security report (Allow) | LPM Firewall

registry / polyrouter / 1.0.40

polyrouter@1.0.40

⚠ Under review

Local AI gateway and OpenAI-compatible API router for AI coding tools and 60+ providers

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed attack surface was established. Install-time work is limited to warming pinned SQLite and tray packages under the user runtime directory, and the Codex config writer is gated on a caller-supplied request.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall, or an explicit dashboard request that includes baseUrl, apiKey, and model.

Impact

No unconsented agent-control mutation, credential theft, or nested self-install chain was shown. A clean verdict cannot be finalized because required citation coverage exceeds the citation limit.

Mechanism

Postinstall invokes local helpers that npm-install pinned modules into ~/.polyrouter/runtime. The Codex handler writes config only after required fields are present in the request body.

AI rationale

Inspected install and agent paths show package-aligned runtime warm-up and a request-gated Codex settings write, without a self-dependency lifecycle chain or hidden exfiltration. The required clean citation set is larger than the citation limit, so the review cannot be finalized as clean.

Decision evidence

public snapshot

AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.

AI review observations

npm postinstall only runs node hooks/postinstall.js.
That hook calls ensureSqliteRuntime and ensureTrayRuntime, logs failures, and exits 0.

Source & flagged code

42 flagged · loading source

package.jsonView file

•scripts.postinstall = node hooks/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node hooks/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

app/.next-cli-build/server/instrumentation.jsView file

8patternName = generic_password severity = medium line = 8

Medium

Secret Pattern

Package contains a possible secret pattern.

app/.next-cli-build/server/instrumentation.jsView on unpkg · L8

app/src/mitm/server.jsView file

32`)}catch{}}var od=(()=>{let e=new Uint32Array(256);for(let t=0;t<256;t++){let a=t;for(let r=0;r<8;r++)a=a&1?3988292384^a>>>1:a>>>1;e[t]=a}return e})();function Po(e){let t=42949672... L33: `);t.push({role:"tool",tool_call_id:n.toolUseId||"",content:s})}let r=(e.content||"").trim();return(r||a.length===0)&&t.push({role:"user",content:r}),t}function fd(e){let t=e.toolU... L34: $proc = Start-Process powershell -ArgumentList @(

High

Child Process

Package source references child process execution.

app/src/mitm/server.jsView on unpkg · L32

32`)}catch{}}var od=(()=>{let e=new Uint32Array(256);for(let t=0;t<256;t++){let a=t;for(let r=0;r<8;r++)a=a&1?3988292384^a>>>1:a>>>1;e[t]=a}return e})();function Po(e){let t=42949672... L33: `);t.push({role:"tool",tool_call_id:n.toolUseId||"",content:s})}let r=(e.content||"").trim();return(r||a.length===0)&&t.push({role:"user",content:r}),t}function fd(e){let t=e.toolU... L34: $proc = Start-Process powershell -ArgumentList @(

High

Shell

Package source references shell execution.

app/src/mitm/server.jsView on unpkg · L32

24Private-MAC: `+B.digest().toHex()+`\r L25: `,s};ma.publicKeyToOpenSSH=function(e,t){var a="ssh-rsa";t=t||"";var r=Ce.util.createBuffer();return vr(r,a),Et(r,e.e),Et(r,e.n),a+" "+Ce.util.encode64(r.bytes())+" "+t};ma.private... L26: `);u=c.pop()||"";for(let g of c){let v=g.trim();if(!v||!v.startsWith("data:"))continue;let y=v.slice(5).trim();if(y!=="[DONE]"){process.env.DEBUG_MITM&&Ea(`[SSE in] ${y.slice(0,200... ... L32: `)}catch{}}var od=(()=>{let e=new Uint32Array(256);for(let t=0;t<256;t++){let a=t;for(let r=0;r<8;r++)a=a&1?3988292384^a>>>1:a>>>1;e[t]=a}return e})();function Po(e){let t=42949672... L33: `);t.push({role:"tool",tool_call_id:n.toolUseId||"",content:s})}let r=(e.content||"").trim();return(r||a.length===0)&&t.push({role:"user",content:r}),t}function fd(e){let t=e.toolU.

app/node_modules/minimizer-webpack-plugin/dist/minify.jsView file

499// eslint-disable-next-line no-new-func L500: new Function("exports", "require", "module", "__filename", "__dirname", `'use strict'\nreturn ${options}` L501: // eslint-disable-next-line n/exports-style

High

Eval

Package source references dynamic code evaluation.

app/node_modules/minimizer-webpack-plugin/dist/minify.jsView on unpkg · L499

app/server.jsView file

1const path = require('path') L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/server.jsView on unpkg · L1

app/node_modules/webpack/lib/javascript/JavascriptModulesPlugin.jsView file

1/* L2: MIT License http://www.opensource.org/licenses/mit-license.php L3: Author Tobias Koppers @sokra

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

app/node_modules/webpack/lib/javascript/JavascriptModulesPlugin.jsView on unpkg · L1

app/node_modules/next/dist/compiled/@edge-runtime/primitives/load.jsView file

39}; L40: var __privateIn = (member, obj) => { L41: if (Object(obj) !== obj) ... L71: L72: // ../../node_modules/.pnpm/undici@6.21.0/node_modules/undici/lib/core/symbols.js L73: var require_symbols = __commonJS({ ... L98: kBodyUsed: Symbol("used"), L99: kBody: Symbol("abstracted request body"), L100: kRunning: Symbol("running"), ... L564: } L565: const code = this.code = key.charCodeAt(index); L566: if (code > 127) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

app/node_modules/next/dist/compiled/@edge-runtime/primitives/load.jsView on unpkg · L39

src/cli/tray/autostart.jsView file

3Trigger-reachable persistence chain: scripts.dev -> cli.js -> src/cli/tray/autostart.js L3: const os = require("os"); L4: const { execSync } = require("child_process"); L5: ... L36: } L37: const computed = path.resolve(__dirname, "..", "..", "..", "cli.js"); L38: if (fs.existsSync(computed)) return computed; ... L47: function enableAutoStart(cliPath) { L48: const platform = process.platform; L49: L50: if (!["darwin", "win32", "linux"].includes(platform)) return false; L51: if (platform === "linux" && !process.env.DISPLAY) return false; L52:

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

src/cli/tray/autostart.jsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = src/cli/tray/autostart.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/tray/autostart.jsView on unpkg

3const os = require("os"); L4: const { execSync } = require("child_process"); L5: ... L36: } L37: const computed = path.resolve(__dirname, "..", "..", "..", "cli.js"); L38: if (fs.existsSync(computed)) return computed; ... L47: function enableAutoStart(cliPath) { L48: const platform = process.platform; L49: L50: if (!["darwin", "win32", "linux"].includes(platform)) return false; L51: if (platform === "linux" && !process.env.DISPLAY) return false; L52:

cli.jsView file

783console.log(`🔔 PolyRouter is running in tray (PID: ${process.pid})`); L784: console.log(` Server: http://${displayHost}:${port}`); L785: console.log(`\n💡 You can close this terminal. Right-click tray icon to quit.\n`); ... L793: L794: const bgProcess = spawn(process.execPath, ["--dns-result-order=ipv4first", __filename, "--tray", "--skip-update", "-p", port.toString()], { L795: detached: true, ... L797: windowsHide: true, L798: env: { ...process.env } L799: });

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

cli.jsView on unpkg · L783

2L3: const { spawn, exec, execSync } = require("child_process"); L4: const path = require("path"); L5: const fs = require("fs"); L6: const https = require("https"); L7: const net = require("net"); ... L36: start() { L37: if (process.stdout.isTTY) { L38: process.stdout.write(`\r${frames[0]} ${currentText}`); L39: interval = setInterval(() => { ... L64: L65: const pkg = require("./package.json");

Critical

Download Execute

Source downloads or fetches remote code and executes it.

cli.jsView on unpkg · L2

2Trigger-reachable chain: scripts.dev -> cli.js L2: L3: const { spawn, exec, execSync } = require("child_process"); L4: const path = require("path"); L5: const fs = require("fs"); L6: const https = require("https"); L7: const net = require("net"); ... L36: start() { L37: if (process.stdout.isTTY) { L38: process.stdout.write(`\r${frames[0]} ${currentText}`); L39: interval = setInterval(() => { ... L64: L65: const pkg = require("./package.json");

Critical

Trigger Reachable Dangerous Capability

app/src/realtime/runtime.jsView file

1import { WebSocketServer, WebSocket } from "ws"; L2: import RealtimeUpstream from "./upstream.js"; ... L19: const internalHost = getInternalAuthHost(host); L20: const response = await fetch(`http://${internalHost}:${process.env.PORT || 20128}/api/realtime/authorize`, { L21: method: "POST", ... L32: }, L33: body: JSON.stringify({ L34: model: url.searchParams.get("model"), ... L40: }); L41: const payload = await response.json().catch(() => ({})); L42: if (!response.ok || !payload.accessToken) throw new Error(payload.error || "Realtime authentication failed.");

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

app/src/realtime/runtime.jsView on unpkg · L1

app/node_modules/next/dist/next-devtools/server/launch-editor.js#virtual:normalized:round1View file

50const _picocolors = require("../../lib/picocolors"); L51: const _child_process = /*#__PURE__*/ _interop_require_default._(require("child_process")); L52: const _fs = /*#__PURE__*/ _interop_require_default._(require("fs")); ... L177: // Explicit config always wins L178: if (process.env.REACT_EDITOR) { L179: return _shellquote.default.parse(process.env.REACT_EDITOR); ... L184: try { L185: if (process.platform === "darwin") { L186: const output = _child_process.default.execSync("ps x").toString(); ... L259: // L260: // https://developer.apple.[redacted]ASLR_classes.html#//apple_ref/doc/uid/TP40000983-CH1g-BBCIAHJF:~:... L261: return input.replaceAll(/[\\"]/g, (original)=>`\\${original}`);\n}\nfunction launchEditor(fileName, line1, column1) {\n if (!_fs.default.existsSync(fileName)) {\

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

app/node_modules/next/dist/next-devtools/server/launch-editor.js#virtual:normalized:round1View on unpkg · L50

app/node_modules/playwright-core/lib/coreBundle.jsView file

21933"use strict"; L21934: source5 = '\nvar __commonJS = obj => {\n let required = false;\n let result;\n return function __require() {\n if (!required) {\n required = true;\n let fn;\n ... L21935: }

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

app/node_modules/playwright-core/lib/coreBundle.jsView on unpkg · L21933

app/node_modules/next/dist/compiled/jest-worker/threadChild.jsView file

1(()=>{"use strict";var __webpack_modules__={582:(e,r)=>{Object.defineProperty(r,"__esModule",{value:true});r.PARENT_MESSAGE_SETUP_ERROR=r.PARENT_MESSAGE_OK=r.PARENT_MESSAGE_CUSTOM=...

Critical

Remote Response Code Execution

Source passes code obtained from a remote response into a dynamic execution sink.

app/node_modules/next/dist/compiled/jest-worker/threadChild.jsView on unpkg · L1

app/src/lib/updater/updater.jsView file

1// Standalone detached updater process. L2: // Spawns `npm i -g <pkg>@latest`, exposes progress via tiny HTTP server. L3: // Survives after parent Next server exits (detached + unref by spawner). L4: L5: const { spawn } = require("child_process"); L6: const http = require("http");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

app/src/lib/updater/updater.jsView on unpkg · L1

app/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.nodeView file

•path = app/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.node kind = binary_string_ioc sizeBytes = 11022768 magicHex = [redacted] matchedPrintableString = x.crates.io-6f17d22bba15001f/proxy-protocol-0.5.0/src/version1.rscryptoproviderkx_groupssignature_verification_algorithmssecure_randomkey_providerillegaladdressfamilymissingaddressinvalidaddressinvalidportillegalheaderendingstdiodestinationhttps://ngrok.com/docs/errors "0", "1", "2", or "3"0, 1, or 2struct authrespstruct authrespextrastruct bindrespextrastruct starttunnelwithlabelrespstruct unbindrespstruct proxyheaderevent /[redacted].crates.io-6f17d2

Critical

Binary String Ioc

Native or WebAssembly artifact printable strings contain known collector or webhook infrastructure.

app/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.nodeView on unpkg

•path = app/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.node kind = native_binary sizeBytes = 11022768 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

app/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.nodeView on unpkg

src/cli/tray/tray.ps1View file

•path = src/cli/tray/tray.ps1 kind = build_helper sizeBytes = 4795 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/cli/tray/tray.ps1View on unpkg

app/public/downloads/polyrouter-connector.zipView file

•path = app/public/downloads/polyrouter-connector.zip kind = high_entropy_blob sizeBytes = 41038 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

app/public/downloads/polyrouter-connector.zipView on unpkg

•path = app/public/downloads/polyrouter-connector.zip kind = compressed_blob sizeBytes = 41038 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

app/public/downloads/polyrouter-connector.zipView on unpkg

•path = app/public/downloads/polyrouter-connector.zip kind = nested_archive_needs_inspection sizeBytes = 41038 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

app/public/downloads/polyrouter-connector.zipView on unpkg

app/node_modules/next/dist/build/next-config-ts/transpile-config.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 54

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/node_modules/next/dist/build/next-config-ts/transpile-config.js#virtual:normalized:round1View on unpkg

src/cli/tray/tray.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = src/cli/tray/tray.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/tray/tray.jsView on unpkg

hooks/sqliteRuntime.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = hooks/sqliteRuntime.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/sqliteRuntime.jsView on unpkg

src/cli/api/client.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = src/cli/api/client.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/api/client.jsView on unpkg

app/node_modules/@next/env/dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = app/node_modules/@next/env/dist/index.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/node_modules/@next/env/dist/index.jsView on unpkg

app/node_modules/browserslist/node.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = polyrouter@1.0.38 matchedIdentity = npm:cG9seXJvdXRlcg:1.0.38 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

app/node_modules/browserslist/node.jsView on unpkg

•matchType = token_shingles matchedPackage = polyrouter@1.0.35 matchedPath = app/node_modules/browserslist/node.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/node_modules/browserslist/node.jsView on unpkg

src/cli/commands/xaiVideo.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = src/cli/commands/xaiVideo.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/commands/xaiVideo.jsView on unpkg

app/node_modules/@jridgewell/resolve-uri/dist/resolve-uri.umd.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = app/node_modules/@jridgewell/resolve-uri/dist/resolve-uri.umd.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/node_modules/@jridgewell/resolve-uri/dist/resolve-uri.umd.jsView on unpkg

app/node_modules/ajv-formats/dist/formats.jsView file

•matchType = normalized_sha256 matchedPackage = polyrouter@1.0.35 matchedPath = app/node_modules/ajv-formats/dist/formats.js matchedIdentity = npm:cG9seXJvdXRlcg:1.0.35 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/node_modules/ajv-formats/dist/formats.jsView on unpkg

app/.next-cli-build/server/chunks/7688.jsView file

197patternName = generic_password severity = medium line = 197

Medium

Secret Pattern

Hardcoded password in app/.next-cli-build/server/chunks/7688.js

app/.next-cli-build/server/chunks/7688.jsView on unpkg · L197

app/.next-cli-build/server/chunks/6770.jsView file

215patternName = generic_password severity = medium line = 215

Medium

Secret Pattern

Hardcoded password in app/.next-cli-build/server/chunks/6770.js

app/.next-cli-build/server/chunks/6770.jsView on unpkg · L215

app/.next-cli-build/static/chunks/main-657cca4d46c80fc3.jsView file

6patternName = generic_password severity = medium line = 6

Medium

Secret Pattern

Hardcoded password in app/.next-cli-build/static/chunks/main-657cca4d46c80fc3.js

app/.next-cli-build/static/chunks/main-657cca4d46c80fc3.jsView on unpkg · L6

Findings

6 Critical23 High14 Medium7 Low

CriticalSame File Env Network Executioncli.js

CriticalDownload Executecli.js

CriticalRemote Response Code Executionapp/node_modules/next/dist/compiled/jest-worker/threadChild.js

CriticalTrigger Reachable Dangerous Capabilitycli.js

CriticalBinary String Iocapp/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.node

CriticalPrevious Version Dangerous Deltaapp/node_modules/browserslist/node.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processapp/src/mitm/server.js

HighShellapp/src/mitm/server.js

HighEvalapp/node_modules/minimizer-webpack-plugin/dist/minify.js

HighCredential Exfiltrationapp/src/realtime/runtime.js

HighCommand Output Exfiltrationapp/src/mitm/server.js

HighSandbox Evasion Gated Capabilityapp/node_modules/next/dist/next-devtools/server/launch-editor.js#virtual:normalized:round1

HighObfuscated Payload Loaderapp/node_modules/playwright-core/lib/coreBundle.js

HighCross File Remote Execution Contextcli.js

HighTrigger Reachable Persistencesrc/cli/tray/autostart.js

HighRuntime Package Installapp/src/lib/updater/updater.js

HighShips High Entropy Blobapp/public/downloads/polyrouter-connector.zip

HighSemantic Analysis Limitedapp/node_modules/next/dist/build/next-config-ts/transpile-config.js#virtual:normalized:round1

HighKnown Malware Source Similaritysrc/cli/tray/tray.js

HighKnown Malware Source Similaritycli.js

HighKnown Malware Source Similaritysrc/cli/tray/autostart.js

HighKnown Malware Source Similarityhooks/sqliteRuntime.js

HighKnown Malware Source Similaritysrc/cli/api/client.js

HighKnown Malware Source Similarityapp/node_modules/@next/env/dist/index.js

HighKnown Malware Source Similarityapp/node_modules/browserslist/node.js

HighKnown Malware Source Similaritysrc/cli/commands/xaiVideo.js

HighKnown Malware Source Similarityapp/node_modules/@jridgewell/resolve-uri/dist/resolve-uri.umd.js

HighKnown Malware Source Similarityapp/node_modules/ajv-formats/dist/formats.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSecret Patternapp/.next-cli-build/server/instrumentation.js

MediumDynamic Requireapp/server.js

MediumUnsafe Vm Contextapp/node_modules/webpack/lib/javascript/JavascriptModulesPlugin.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesrc/cli/tray/autostart.js

MediumShips Native Binaryapp/node_modules/@ngrok/ngrok-linux-x64-gnu/ngrok.linux-x64-gnu.node

MediumShips Build Helpersrc/cli/tray/tray.ps1

MediumShips Compressed Blobapp/public/downloads/polyrouter-connector.zip

MediumStructural Risk Force Deep Review

MediumSecret Patternapp/.next-cli-build/server/chunks/7688.js

MediumSecret Patternapp/.next-cli-build/server/chunks/6770.js

MediumSecret Patternapp/.next-cli-build/static/chunks/main-657cca4d46c80fc3.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptoapp/node_modules/next/dist/compiled/@edge-runtime/primitives/load.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionapp/public/downloads/polyrouter-connector.zip