sap-ai-dev-toolkit@0.7.9: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

sap-ai-dev-toolkit@0.7.9: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

20 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/ensure-go.mjsView file

1import { createHash } from 'node:crypto'; L2: import { execFile, spawnSync } from 'node:child_process'; L3: import { chmod, mkdir, rm, symlink, writeFile } from 'node:fs/promises';

High

Child Process

Package source references child process execution.

scripts/ensure-go.mjsView on unpkg · L1

16function localGoPath() { L17: return join(brandedEnvValue(process.env, 'GO_ROOT') || join(homedir(), '.local', 'go'), GO_VERSION, 'bin', process.platform === 'win32' ? 'go.exe' : 'go'); L18: } ... L21: if (process.env.GO_BINARY) return process.env.GO_BINARY; L22: const result = spawnSync('go', ['version'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }); L23: if (result.status === 0) return 'go'; ... L31: if (!release) throw new Error(`Go is missing and automatic installation is supported only for Linux x64/arm64. Install ${GO_VERSION} manually and ensure go is on PATH.`); L32: const response = await fetch(`https://go.dev/dl/${release.archive}`); L33: if (!response.ok) throw new Error(`Go download failed with HTTP ${response.status}; install ${GO_VERSION} manually and ensur

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/ensure-go.mjsView on unpkg · L16

1import { createHash } from 'node:crypto'; L2: import { execFile, spawnSync } from 'node:child_process'; L3: import { chmod, mkdir, rm, symlink, writeFile } from 'node:fs/promises'; ... L9: const exec = promisify(execFile); L10: export const GO_VERSION = brandedEnvValue(process.env, 'GO_VERSION') || 'go1.27.1'; L11: const GO_RELEASES = { ... L16: function localGoPath() { L17: return join(brandedEnvValue(process.env, 'GO_ROOT') || join(homedir(), '.local', 'go'), GO_VERSION, 'bin', process.platform === 'win32' ? 'go.exe' : 'go'); L18: } ... L31: if (!release) throw new Error(`Go is missing and automatic installation is supported only for Linux x64/arm64. Install ${GO_VERSION} manually and ensure go is on PATH.`); L32: const response = await fetch(`https://go.dev/dl/${release.archive}`);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/ensure-go.mjsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = scripts/ensure-go.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/ensure-go.mjsView on unpkg

scripts/install-local.mjsView file

31stdio: 'inherit', L32: ...(process.platform === 'win32' ? { shell: true } : {}), L33: ...options

High

Shell

Package source references shell execution.

scripts/install-local.mjsView on unpkg · L31

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = scripts/install-local.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install-local.mjsView on unpkg

scripts/postinstall.mjsView file

7Install-time code directly mutates a foreign AI-agent control surface: L7: import { installUserAssetsForHarnesses } from '../src/install-user-assets.mjs'; L8: import { installMcpServersForHarnesses } from '../src/harness-mcp-config.mjs'; L9: import { DEFAULT_HARNESS_IDS, HARNESSES, HARNESS_ENV_VAR, NON_INTERACTIVE_HARNESS_IDS, envHarnessSelection, harnessRoot } from '../src/harnesses.mjs'; ... L153: L154: async function wireHarnessMcpServers(ids, servers) { L155: const entries = servers && Object.keys(servers).length ? servers : null; ... L161: } L162: const { results, failures } = await installMcpServersForHarnesses(ids, entries, { env: runtimeEnv }); L163: for (const result of results) { ... L326: try { L327: if (setupCompleted) await wireHarnessMcpServers(harnessIds, setupResult?.serve

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L7

dist/vsp-linux-x64View file

•path = dist/vsp-linux-x64 kind = native_binary sizeBytes = 24371360 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vsp-linux-x64View on unpkg

scripts/windows-negotiate-helper.ps1View file

•path = scripts/windows-negotiate-helper.ps1 kind = build_helper sizeBytes = 6880 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/windows-negotiate-helper.ps1View on unpkg

scripts/postinstall.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/postinstall.mjs#virtual:normalized:round1View on unpkg

scripts/build-vsp.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = scripts/build-vsp.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build-vsp.mjsView on unpkg

scripts/publish-npm.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = scripts/publish-npm.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/publish-npm.mjsView on unpkg

src/windows-sso-adt-proxy.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = src/windows-sso-adt-proxy.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/windows-sso-adt-proxy.mjsView on unpkg

src/cf-destination.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = src/cf-destination.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cf-destination.mjsView on unpkg

src/mcp-proxy.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = src/mcp-proxy.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mcp-proxy.mjsView on unpkg

src/cf-connectivity.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = src/cf-connectivity.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cf-connectivity.mjsView on unpkg

src/engineering-tools.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = src/engineering-tools.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/engineering-tools.mjsView on unpkg

src/harnesses.mjsView file

•matchType = normalized_sha256 matchedPackage = sap-ai-dev-toolkit@0.8.3 matchedPath = src/harnesses.mjs matchedIdentity = npm:c2FwLWFpLWRldi10b29sa2l0:0.8.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/harnesses.mjsView on unpkg