privateer-agent@0.6.7: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

privateer-agent@0.6.7: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

7 flagged · loading source

bin/privateer-launch.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = privateer-agent@0.6.4 matchedIdentity = npm:cHJpdmF0ZWVyLWFnZW50:0.6.4 similarity = 0.885 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/privateer-launch.mjsView on unpkg

14L15: import { spawn, spawnSync } from "node:child_process"; L16: import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/privateer-launch.mjsView on unpkg · L14

101if (isWin) { L102: runToCompletion("powershell", ["-NoProfile", "-Command", "irm https://privateer.pro/install.ps1 | iex"]); L103: } else {

High

Shell

Package source references shell execution.

bin/privateer-launch.mjsView on unpkg · L101

bin/privateer-daemon.mjsView file

28register(); L29: const { runDaemonCli } = await import(resolve(repo, "src/cli/daemonCli.ts")); L30: await runDaemonCli(process.argv.slice(2));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/privateer-daemon.mjsView on unpkg · L28

src/daemon/service.tsView file

9import { existsSync, mkdirSync, writeFileSync, rmSync, readFileSync } from "node:fs"; L10: import { spawnSync } from "node:child_process"; L11: import { homedir } from "node:os"; ... L16: L17: const LABEL = "pro.privateer.daemon"; // launchd label / reverse-dns id L18: const UNIT = "privateer-daemon.service"; // systemd --user unit name ... L42: const env: Record<string, string> = {}; L43: if (process.env.PRIVATEER_HOME) env.PRIVATEER_HOME = process.env.PRIVATEER_HOME; L44: if (process.env.PRIVATEER_SERVER_URL) env.PRIVATEER_SERVER_URL = process.env.PRIVATEER_SERVER_URL; ... L50: function launchAgentPath(): string { L51: return join(homedir(), "Library", "LaunchAgents", `${LABEL}.plist`); L52: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/daemon/service.tsView on unpkg · L9

extensions/privateer-brand.tsView file

322L323: // /update — run the global npm install in a child process and report the outcome via L324: // notify (the TUI keeps running the OLD code; npm swaps the global bin's inode in ... L328: try { L329: const { execFile } = await import("node:child_process"); L330: const stderr: string = await new Promise((resolve, reject) => {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

extensions/privateer-brand.tsView on unpkg · L322

bin/privateer.cmdView file

•path = bin/privateer.cmd kind = build_helper sizeBytes = 321 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/privateer.cmdView on unpkg

Source & flagged code

7 flagged

bin/privateer-launch.mjsView file

Lines 1-34javascript

1#!/usr/bin/env node

2// Cross-platform Privateer launcher — the single source of launch logic for every

3// platform (macOS, Linux, Windows). `bin/privateer-tui` (unix) and the Windows

4// `privateer.cmd` are thin shims that just pick a Node and run THIS file.

5//

6// It boots Pi's full interactive TUI with the Privateer moat + tool packs. The moat

7// is installed as re-export SHIMS in the agent dir's extensions/, so BOTH this TUI

8// and any subagents it spawns (child processes reading the same agent dir) load the

9// identical set — including our permission gate. One source of truth via discovery

10// (no `-e`, which would double-load vs discovery). Runs in the current directory;

11// model via PRIVATEER_MODEL=provider/id.

12//

13// Ported from the original bash launcher; behaviour is intended to match exactly.

14

15import { spawn, spawnSync } from "node:child_process";

16import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/privateer-launch.mjsView on unpkg · L14

17import os from "node:os";

18import path from "node:path";

19import { fileURLToPath, pathToFileURL } from "node:url";

20import { applyPatchesIfNeeded, resolveDep } from "./apply-patches.mjs";

21

22const HERE = path.dirname(fileURLToPath(import.meta.url)); // bin/

23const REPO = path.resolve(HERE, "..");

24const isWin = process.platform === "win32";

25

26const PRIVATEER_HOME = process.env.PRIVATEER_HOME || path.join(os.homedir(), ".privateer");

27const ENV_FILE = path.join(REPO, ".env"); // dev-only; a real install has none

28

29// --- bundle detection ------------------------------------------------------

30// A self-contained bundle ships its own pinned Node at "$REPO/node[.exe]" plus a

31// BUNDLE_INFO.json marker (built by scripts/build-bundle.mjs). When present we use

32// that runtime and never touch system node/npm. Putting the bundle dir on PATH also

33// lets any child that boots via `#!/usr/bin/env node` (Pi's cli.js, the subagent

34// wrapper) resolve the bundled node.

Lines 81-121javascript

81

82// Faithfully propagate a child's exit/signal, mirroring bash `exec`.

83function runToCompletion(cmd, cmdArgs, opts = {}) {

84 const child = spawn(cmd, cmdArgs, { stdio: "inherit", env: process.env, ...opts });

85

•matchType = previous_version_dangerous_delta matchedPackage = privateer-agent@0.6.4 matchedIdentity = npm:cHJpdmF0ZWVyLWFnZW50:0.6.4 similarity = 0.885 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/privateer-launch.mjsView on unpkg

bin/privateer-daemon.mjsView file

Lines 8-31javascript

8// by the installed launchd/systemd service (`node privateer-daemon.mjs run`).

9import { register } from "tsx/esm/api";

10import { fileURLToPath } from "node:url";

11import { dirname, resolve } from "node:path";

12

13const

src/daemon/service.tsView file

Lines 1-29typescript

1// Install the resident daemon as a per-user OS service so it auto-starts at login

2// and survives the terminal closing — the difference between "the CLI is running"

3// and "the daemon is reachable from the app even when no CLI is". macOS → launchd

4// user agent; Linux → systemd --user unit. No root: everything lives under the

5// user's own home and login session.

6//

7// ORDERING NOTE: this module is import-safe (node builtins + our paths only, no Pi),

8// so the daemon CLI can load it without going through boot.ts.

9import { existsSync, mkdirSync, writeFileSync, rmSync, readFileSync } from

extensions/privateer-brand.tsView file

Lines 302-342typescript

302 setHeader(ctx);

303 ctx?.ui?.setStatus?.("account", accountBadge());

304 };

305

306 // Drop Pi's PERSISTED account credential (the "privateer" entry in auth.json).

307 // Pi reuses this credential on the next launch and refreshes it only when it

308 // EXPIRES — never reactively on a 401 (see the LIFECYCLE HAZARD note in

bin/privateer.cmdView file

•path = bin/privateer.cmd kind = build_helper sizeBytes = 321 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/privateer.cmdView on unpkg