privateer-agent@0.6.4: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

privateer-agent@0.6.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = patch-package --error-on-fail

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = patch-package --error-on-fail

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/privateer-launch.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = privateer-agent@0.6.3 matchedIdentity = npm:cHJpdmF0ZWVyLWFnZW50:0.6.3 similarity = 0.936 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/privateer-launch.mjsView on unpkg

14L15: import { spawn, spawnSync } from "node:child_process"; L16: import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/privateer-launch.mjsView on unpkg · L14

99if (isWin) { L100: runToCompletion("powershell", ["-NoProfile", "-Command", "irm https://privateer.pro/install.ps1 | iex"]); L101: } else {

High

Shell

Package source references shell execution.

bin/privateer-launch.mjsView on unpkg · L99

bin/privateer-daemon.mjsView file

28register(); L29: const { runDaemonCli } = await import(resolve(repo, "src/cli/daemonCli.ts")); L30: await runDaemonCli(process.argv.slice(2));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/privateer-daemon.mjsView on unpkg · L28

src/daemon/service.tsView file

9import { existsSync, mkdirSync, writeFileSync, rmSync, readFileSync } from "node:fs"; L10: import { spawnSync } from "node:child_process"; L11: import { homedir } from "node:os"; ... L16: L17: const LABEL = "pro.privateer.daemon"; // launchd label / reverse-dns id L18: const UNIT = "privateer-daemon.service"; // systemd --user unit name ... L42: const env: Record<string, string> = {}; L43: if (process.env.PRIVATEER_HOME) env.PRIVATEER_HOME = process.env.PRIVATEER_HOME; L44: if (process.env.PRIVATEER_SERVER_URL) env.PRIVATEER_SERVER_URL = process.env.PRIVATEER_SERVER_URL; ... L50: function launchAgentPath(): string { L51: return join(homedir(), "Library", "LaunchAgents", `${LABEL}.plist`); L52: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/daemon/service.tsView on unpkg · L9

extensions/privateer-brand.tsView file

322L323: // /update — run the global npm install in a child process and report the outcome via L324: // notify (the TUI keeps running the OLD code; npm swaps the global bin's inode in ... L328: try { L329: const { execFile } = await import("node:child_process"); L330: const stderr: string = await new Promise((resolve, reject) => {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

extensions/privateer-brand.tsView on unpkg · L322

bin/privateer.cmdView file

•path = bin/privateer.cmd kind = build_helper sizeBytes = 321 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/privateer.cmdView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 32-72json

32 },

33 "publishConfig": {

34 "access": "public"

35 },

36 "files": [

37 "bin",

38 "src",

39 "extensions",

40 "skills",

41 "patches",

42 "README.md",

43 "LICENSE"

44 ],

45 "scripts": {

46 "start": "tsx src/main.ts",

47 "chat": "node --env-file=.env --import tsx src/cli/chat.ts",

48 "channels": "node --env-file=.env --import tsx src/channels/run.ts",

49 "dev": "tsx watch src/main.ts",

50 "typecheck": "tsc --noEmit",

51 "test": "for f in tests/*.test.ts; do node --import tsx --test \"$f\" || exit 1; done",

52 "postinstall": "patch-package --error-on-fail"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 },

54 "engines": {

55 "node": ">=22.19.0"

56 },

57 "dependencies": {

58 "@earendil-works/pi-ai": "^0.80.3",

59 "@earendil-works/pi-coding-agent": "0.80.3",

60 "@earendil-works/pi-tui": "^0.80.3",

61 "@hypabolic/pi-hypa": "^0.1.6",

62 "@juicesharp/rpiv-web-tools": "^1.20.0",

63 "@noble/ciphers": "^2.1.1",

64 "@noble/curves": "^1.9.7",

65 "@noble/hashes": "^1.7.1",

66 "patch-package": "^8.0.1",

67 "pi-mcp-adapter": "^2.11.0",

68 "pi-privacy": "^0.3.0",

69 "pi-subagents": "^0.34.0",

70 "picomatch": "^4.0.4",

71 "privateer-workflow": "^0.1.0",

72 "tsx": "^4.16.0",

bin/privateer-launch.mjsView file

Lines 1-34javascript

1#!/usr/bin/env node

2// Cross-platform Privateer launcher — the single source of launch logic for every

3// platform (macOS, Linux, Windows). `bin/privateer-tui` (unix) and the Windows

4// `privateer.cmd` are thin shims that just pick a Node and run THIS file.

5//

6// It boots Pi's full interactive TUI with the Privateer moat + tool packs. The moat

7// is installed as re-export SHIMS in the agent dir's extensions/, so BOTH this TUI

8// and any subagents it spawns (child processes reading the same agent dir) load the

9// identical set — including our permission gate. One source of truth via discovery

10

bin/privateer-daemon.mjsView file

Lines 8-31javascript

8// by the installed launchd/systemd service (`node privateer-daemon.mjs run`).

9import { register } from "tsx/esm/api";

10import { fileURLToPath } from "node:url";

11import { dirname, resolve } from "node:path";

12

13const

src/daemon/service.tsView file

Lines 1-29typescript

1// Install the resident daemon as a per-user OS service so it auto-starts at login

2// and survives the terminal closing — the difference between "the CLI is running"

3// and "the daemon is reachable from the app even when no CLI is". macOS → launchd

4// user agent; Linux → systemd --user unit. No root: everything lives under the

5// user's own home and login session.

6//

7// ORDERING NOTE: this module is import-safe (node builtins + our paths only, no Pi),

8// so the daemon CLI can load it without going through boot.ts.

9import { existsSync, mkdirSync, writeFileSync, rmSync, readFileSync } from

extensions/privateer-brand.tsView file

Lines 302-342typescript

302 setHeader(ctx);

303 ctx?.ui?.setStatus?.("account", accountBadge());

304 };

305

306 // Drop Pi's PERSISTED account credential (the "privateer" entry in auth.json).

307 // Pi reuses this credential on the next launch and refreshes it only when it

308 // EXPIRES — never reactively on a 401 (see the LIFECYCLE HAZARD note in

bin/privateer.cmdView file

•path = bin/privateer.cmd kind = build_helper sizeBytes = 321 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/privateer.cmdView on unpkg

Lines 79-119javascript

79

80// Faithfully propagate a child's exit/signal, mirroring bash `exec`.

81function runToCompletion(cmd, cmdArgs, opts = {}) {

82 const child = spawn(cmd, cmdArgs, { stdio: "inherit", env: process.env, ...opts });

83 child.on("exit", (code, signal) => {

84 if (signal) process.kill(process.pid, signal);

85 else process.exit(code ?? 0);

86 });

87 child.on("error", (e) => {

88 console.error(`privateer: failed to launch — ${e.message}`);

89 process.exit(1);

90 });

91}

92

93// --- `privateer update` ----------------------------------------------------

94// Fetch the latest release and exit. Bundle installs re-run the download+extract

95// installer; npm installs update the global package.

96if (sub === "update") {

97 if (BUNDLED) {

98 console.log("Updating Privateer to the latest release…");

99 if (isWin) {

100 runToCompletion("powershell", ["-NoProfile", "-Command", "irm https://privateer.pro/install.ps1 | iex"]);

101 } else {

High

Shell

Package source references shell execution.

bin/privateer-launch.mjsView on unpkg · L99

102 runToCompletion("sh", ["-c", "curl -fsSL https://privateer.pro/install.sh | sh"]);

103 }

104 } else {

105 console.log("Updating privateer-agent to the latest release…");

106 // npm is npm.cmd on Windows; Node >=18.20 needs a shell to spawn a .cmd (EINVAL otherwise).

107 runToCompletion(isWin ? "npm.cmd" : "npm", ["install", "-g", "privateer-agent@latest"], { shell: isWin });

108 }

109 // runToCompletion exits via the child's exit handler.

110}

111

112// --- `privateer daemon [run|install|uninstall|status]` ---------------------

113// The resident background daemon (routines + app-driven headless task spawns). Boots

114// straight into src/daemon via bin/privateer-daemon.mjs — no moat-shim install (the

115// daemon loads the moat as in-code factories, not interactive extensions).

116else if (sub === "daemon") {

117 const nodeArgs = fs.existsSync(ENV_FILE) ? [`--env-file=${ENV_FILE}`] : [];

118 runToCompletion(NODE_BIN, [...nodeArgs, path.join(REPO, "bin", "privateer-daemon.mjs"), ...args.slice(1)]);

119}