sealclaw@2026.8.5: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

sealclaw@2026.8.5: Suspicious npm security report (Warn) | LPM Firewall

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json runs two install-time scripts.
postinstall imports and runs a plugin-registry migration.
Migration reads configuration and writes an installed-plugin index.
postinstall patches an installed @mariozechner/pi-ai file.

Evidence against

Preinstall only detects package manager and prints a warning.
Reviewed lifecycle scripts contain no network requests or credential collection.
Registry migration is package-owned plugin-state maintenance with opt-out.
The flagged UI Unicode is bundled parser character-class data, not concealed source logic.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3,038 file(s), 28.5 MB of source, external domains: 127.0.0.1, accounts.feishu.cn, accounts.google.com, accounts.larksuite.com, ai-gateway.vercel.sh, api.anthropic.com, api.cerebras.ai, api.chutes.ai, api.cloudflare.com, api.deepgram.com, api.deepseek.com, api.dev.runwayml.com, api.elevenlabs.io, api.example.com, api.fireworks.ai, api.github.com, api.groq.com, api.individual.githubcopilot.com, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.plivo.com, api.push.apple.com, api.sandbox.push.apple.com, api.senseaudio.cn, api.telnyx.com, api.twilio.com, api.voyageai.com, api.x.ai, api.xiaomimimo.com, api.z.ai, auth.openai.com, bedrock-runtime.eu-central-1.amazonaws.com, bedrock-runtime.us-east-1.amazonaws.com, brew.sh, bun.sh, chatgpt.com, claude.ai, clawhub.ai, cloud.comfy.org, cloudcode-pa.googleapis.com, coding-intl.dashscope.aliyuncs.com, coding.dashscope.aliyuncs.com, control.example.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com

Oversized source lightweight scan

dist/control-ui/assets/sheet-runtime.iife-6mEyCWwJ.js3.96 MB file, sampled 256 KB

ChildProcessObfuscatedHighEntropyStringsMinifiedUrlStringswww.w3.org

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/proxy-cli.runtime-CJzzH6-s.jsView file

764patternName = generic_password severity = medium line = 764 matchedText = url.pass...ed";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/proxy-cli.runtime-CJzzH6-s.jsView on unpkg · L764

openclaw.mjsView file

285try { L286: const mod = await import(specifier); L287: if (typeof mod.installProcessWarningFilter === "function") {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

openclaw.mjsView on unpkg · L285

dist/control-ui/assets/index-BcIC7mzP.jsView file

6274contains invisible/control Unicode U+200C (zero width non-joiner) `}var q2=e(n(((e,t)=>{(function(n,r){typeof e==`object`&&t!==void 0?t.exports=r():typeof define==`function`&&define.amd?define(r):n.JSON5=r()})(e,(function(){function e(e,t){return t={exports:{}},e(t,t.exports),t.exports}var t=e(function(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-BcIC7mzP.jsView on unpkg · L6274

skills/model-usage/scripts/test_model_usage.pyView file

•path = skills/model-usage/scripts/test_model_usage.py kind = build_helper sizeBytes = 1310 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/test_model_usage.pyView on unpkg

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView file

•path = skills/llm-wiki-ingest/tests/test_ingest_scripts.py kind = payload_in_excluded_dir sizeBytes = 16667 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1470-1510json

1470 "mac:package": "bash scripts/package-mac-app.sh",

1471 "mac:restart": "bash scripts/restart-mac.sh",

1472 "moltbot:rpc": "node scripts/run-node.mjs agent --mode rpc --json",

1473 "openclaw": "node scripts/run-node.mjs",

1474 "openclaw:rpc": "node scripts/run-node.mjs agent --mode rpc --json",

1475 "perf:kova:summary": "node scripts/kova-ci-summary.mjs",

1476 "perf:source:summary": "node scripts/openclaw-performance-source-summary.mjs",

1477 "plugin-sdk:api:check": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --check",

1478 "plugin-sdk:api:gen": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --write",

1479 "plugin-sdk:check-exports": "node scripts/sync-plugin-sdk-exports.mjs --check",

1480 "plugin-sdk:sync-exports": "node scripts/sync-plugin-sdk-exports.mjs",

1481 "plugin-sdk:usage": "node --import tsx scripts/analyze-plugin-sdk-usage.ts",

1482 "plugins:boundary-report": "node --import tsx scripts/plugin-boundary-report.ts",

1483 "plugins:boundary-report:ci": "node --import tsx scripts/plugin-boundary-report.ts --summary --fail-on-cross-owner --fail-on-unclassified-unused-reserved --fail-on-eligible-compat",

1484 "plugins:boundary-report:json": "node --import tsx scripts/plugin-boundary-report.ts --json",

1485 "plugins:boundary-report:summary": "node --import tsx scripts/plugin-boundary-report.ts --summary",

1486 "plugins:inventory:check": "node scripts/generate-plugin-inventory-doc.mjs --check",

1487 "plugins:inventory:gen": "node scripts/generate-plugin-inventory-doc.mjs --write",

1488 "plugins:sync": "node --import tsx scripts/sync-plugin-versions.ts",

1489 "plugins:sync:check": "node --import tsx scripts/sync-plugin-versions.ts --check",

1490 "postinstall": "node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L1490

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L1490

1491 "preinstall": "node scripts/preinstall-package-manager-warning.mjs",

1492 "prepush:ci": "bash scripts/prepush-ci.sh",

1493 "probe:anthropic:prompt": "node --import tsx scripts/anthropic-prompt-probe.ts",

1494 "prompt:snapshots:check": "node --import tsx scripts/generate-prompt-snapshots.ts --check",

1495 "prompt:snapshots:gen": "node --import tsx scripts/generate-prompt-snapshots.ts --write",

1496 "prompt:snapshots:sync-codex-model": "node --import tsx scripts/sync-codex-model-prompt-fixture.ts",

1497 "protocol:check": "pnpm protocol:gen && pnpm protocol:gen:swift && git diff --exit-code -- dist/protocol.schema.json apps/macos/Sources/OpenClawProtocol/GatewayModels.swift apps/shared/OpenClawKit/Sources/OpenClawProtocol/GatewayModels.swift",

1498 "protocol:gen": "node --import tsx scripts/protocol-gen.ts",

1499 "protocol:gen:swift": "node --import tsx scripts/protocol-gen-swift.ts",

1500 "proxy:coverage": "node scripts/run-node.mjs proxy coverage",

1501 "proxy:gateway": "node scripts/run-node.mjs proxy run -- node scripts/run-node.mjs gateway",

1502 "proxy:install-ca": "node --import tsx scripts/proxy-install-ca.mjs",

1503 "proxy:run": "node scripts/run-node.mjs proxy run",

1504 "proxy:start": "node scripts/run-node.mjs proxy start",

1505 "qa:e2e": "node --import tsx scripts/qa-e2e.ts",

1506 "qa:lab:build": "vite build --config extensions/qa-lab/web/vite.config.ts",

1507 "qa:lab:ui": "pnpm openclaw qa ui",

1508 "qa:lab:up": "node --import tsx scripts/qa-lab-up.ts",

1509 "qa:lab:up:fast": "node --import tsx scripts/qa-lab-up.ts --use-prebuilt-image --bind-ui-dist --skip-ui-build",

1510 "qa:lab:watch": "vite build --watch --config extensions/qa-lab/web/vite.config.ts",

dist/proxy-cli.runtime-CJzzH6-s.jsView file

Lines 744-784javascript

744 env: childEnv,

745 cwd: process$1.cwd()

746 });

747 child.once("error", reject);

748 child.once("exit", (code, signal

openclaw.mjsView file

Lines 265-305javascript

265 if (!isModuleNotFoundError(err)) {

266 return false;

267 }

268

269 const expectedUrl = new URL(specifier,

dist/control-ui/assets/index-BcIC7mzP.jsView file

6274contains invisible/control Unicode U+200C (zero width non-joiner) `}var q2=e(n(((e,t)=>{(function(n,r){typeof e==`object`&&t!==void 0?t.exports=r():typeof define==`function`&&define.amd?define(r):n.JSON5=r()})(e,(function(){function e(e,t){return t={exports:{}},e(t,t.exports),t.exports}var t=e(function(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-BcIC7mzP.jsView on unpkg · L6274

skills/model-usage/scripts/test_model_usage.pyView file

•path = skills/model-usage/scripts/test_model_usage.py kind = build_helper sizeBytes = 1310 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/test_model_usage.pyView on unpkg

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView file

•path = skills/llm-wiki-ingest/tests/test_ingest_scripts.py kind = payload_in_excluded_dir sizeBytes = 16667 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView on unpkg