sap-ai-dev-toolkit: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

sap-ai-dev-toolkit: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/ensure-go.mjsView file

1import { createHash } from 'node:crypto'; L2: import { execFile, spawnSync } from 'node:child_process'; L3: import { chmod, mkdir, rm, symlink, writeFile } from 'node:fs/promises';

High

Child Process

Package source references child process execution.

scripts/ensure-go.mjsView on unpkg · L1

17function localGoPath() { L18: return join(brandedEnvValue(process.env, 'GO_ROOT') || join(homedir(), '.local', 'go'), GO_VERSION, 'bin', process.platform === 'win32' ? 'go.exe' : 'go'); L19: } ... L22: if (process.env.GO_BINARY) return process.env.GO_BINARY; L23: const result = spawnSync('go', ['version'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }); L24: if (result.status === 0) return 'go'; ... L32: if (!release) throw new Error(`Go is missing and automatic installation is supported only for Linux x64/arm64 and Windows x64. Install ${GO_VERSION} manually and ensure go is on PA... L33: const response = await fetch(`https://go.dev/dl/${release.archive}`); L34: if (!response.ok) throw new Error(`Go download failed with HTTP ${response.status}; install ${GO_VERSION} manua

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/ensure-go.mjsView on unpkg · L17

1import { createHash } from 'node:crypto'; L2: import { execFile, spawnSync } from 'node:child_process'; L3: import { chmod, mkdir, rm, symlink, writeFile } from 'node:fs/promises'; ... L9: const exec = promisify(execFile); L10: export const GO_VERSION = brandedEnvValue(process.env, 'GO_VERSION') || 'go1.27.1'; L11: const GO_RELEASES = { ... L17: function localGoPath() { L18: return join(brandedEnvValue(process.env, 'GO_ROOT') || join(homedir(), '.local', 'go'), GO_VERSION, 'bin', process.platform === 'win32' ? 'go.exe' : 'go'); L19: } ... L32: if (!release) throw new Error(`Go is missing and automatic installation is supported only for Linux x64/arm64 and Windows x64. Install ${GO_VERSION} manually and ensure go is on PA... L33: const response = await fetch(`https://go.dev/dl/${release

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/ensure-go.mjsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = scripts/ensure-go.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ensure-go.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = sap-ai-dev-toolkit@0.7.9 matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.7.9 similarity = 0.516 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/ensure-go.mjsView on unpkg

scripts/install-local.mjsView file

31stdio: 'inherit', L32: ...(process.platform === 'win32' ? { shell: true } : {}), L33: ...options

High

Shell

Package source references shell execution.

scripts/install-local.mjsView on unpkg · L31

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = scripts/install-local.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install-local.mjsView on unpkg

scripts/postinstall.mjsView file

7Install-time code directly mutates a foreign AI-agent control surface: L7: import { installUserAssetsForHarnesses } from '../src/install-user-assets.mjs'; L8: import { installMcpServersForHarnesses } from '../src/harness-mcp-config.mjs'; L9: import { DEFAULT_HARNESS_IDS, HARNESSES, HARNESS_ENV_VAR, NON_INTERACTIVE_HARNESS_IDS, envHarnessSelection, harnessRoot } from '../src/harnesses.mjs'; ... L165: L166: async function wireHarnessMcpServers(ids, servers) { L167: const entries = servers && Object.keys(servers).length ? servers : null; ... L173: } L174: const { results, failures } = await installMcpServersForHarnesses(ids, entries, { env: runtimeEnv }); L175: for (const result of results) { ... L342: try { L343: if (setupCompleted) await wireHarnessMcpServers(harnessIds, setupResult?.serve

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L7

dist/vsp-linux-x64View file

•path = dist/vsp-linux-x64 kind = native_binary sizeBytes = 24826018 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vsp-linux-x64View on unpkg

scripts/postinstall.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/postinstall.mjs#virtual:normalized:round1View on unpkg

scripts/build-vsp.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = scripts/build-vsp.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build-vsp.mjsView on unpkg

scripts/publish-npm.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = scripts/publish-npm.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/publish-npm.mjsView on unpkg

src/local-sap-gui.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = src/local-sap-gui.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/local-sap-gui.mjsView on unpkg

src/cf-destination.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = src/cf-destination.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cf-destination.mjsView on unpkg

src/cf-connectivity.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = src/cf-connectivity.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cf-connectivity.mjsView on unpkg

src/engineering-tools.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = src/engineering-tools.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/engineering-tools.mjsView on unpkg

src/harnesses.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.9.3 matchedPath = src/harnesses.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.9.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/harnesses.mjsView on unpkg