sealclaw@2026.9.3: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

sealclaw@2026.9.3: AI-agent control-surface risk | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/preinstall-package-manager-warning.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/proxy-cli.runtime-BWHciWzX.jsView file

764patternName = generic_password severity = medium line = 764

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/proxy-cli.runtime-BWHciWzX.jsView on unpkg · L764

dist/status.gather-C91Qzjwd.jsView file

41//#region src/cli/daemon-cli/status.gather.ts L42: const gatewayProbeAuthModuleLoader = createLazyImportLoader(() => import("./probe-auth-ELGkDkVL.js")); L43: const daemonInspectModuleLoader = createLazyImportLoader(() => import("./inspect-CjyLQNom.js"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/status.gather-C91Qzjwd.jsView on unpkg · L41

dist/restart-C_iPYGsU.jsView file

12import "./config-ChKvCtdo.js"; L13: import { a as resolveTaskScriptPath } from "./schtasks-CzggW55X.js"; L14: import fs from "node:fs"; ... L16: import path from "node:path"; L17: import { spawn, spawnSync } from "node:child_process"; L18: import { randomUUID } from "node:crypto"; ... L49: const quotedScript = quoteCmdScriptArg(taskScriptPath); L50: lines.push(`if exist ${quotedScript} (`, ` start "" /min cmd.exe /d /c ${quotedScript}`, ")"); L51: } ... L54: } L55: function relaunchGatewayScheduledTask(env = process.env) { L56: const taskName = resolveWindowsTaskName(env);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/restart-C_iPYGsU.jsView on unpkg · L12

dist/control-ui/assets/index-CKP5GwLX.jsView file

6897contains invisible/control Unicode U+200C (zero width non-joiner) `}var a6=e(n(((e,t)=>{(function(n,r){typeof e==`object`&&t!==void 0?t.exports=r():typeof define==`function`&&define.amd?define(r):n.JSON5=r()})(e,(function(){function e(e,t){return t={exports:{}},e(t,t.exports),t.exports}var t=e(function(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-CKP5GwLX.jsView on unpkg · L6897

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/docx-preview-DMEG690f.js","assets/chunk-62oNxeRG.js","assets/jszip.min-C9xvYp-s.js","assets/pptx-preview.es-eMvLaQp... L2: import{i as e,n as t,t as n}from"./chunk-62oNxeRG.js";import{a as r,c as i,i as a,l as o,n as s,o as c,r as l,s as u,t as d,u as f}from"./lit-Cfjy9bnZ.js";import{t as p}from"./requ... L3: `+re+e}var I=!1;function R(e,t){if(!e||I)return``;I=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.... ... L5: `),o=i.length-1,s=a.length-1;1<=o&&0<=s&&i[o]!==a[s];)s--;for(;1<=o&&0<=s;o--,s--)if(i[o]!==a[s]){if(o!==1||s!==1)do if(o--,s--,0>s||i[o]!==a[s]){var c=` L6: `+i[o].replace(` at new `,` at `);return e.displayName&&c.includes(`<a

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/control-ui/assets/index-CKP5GwLX.jsView on unpkg · L1

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView file

•path = skills/llm-wiki-ingest/tests/test_ingest_scripts.py kind = payload_in_excluded_dir sizeBytes = 16667 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView on unpkg

•path = skills/llm-wiki-ingest/tests/test_ingest_scripts.py kind = build_helper sizeBytes = 16667 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView on unpkg

dist/approval-native-runtime-B7-Q8YuY.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/approval-native-runtime-B7-Q8YuY.js#virtual:normalized:round1View on unpkg

dist/plugin-sdk/plugin-test-contracts.jsView file

•matchType = normalized_sha256 matchedPackage = sealclaw@2026.9.2 matchedPath = dist/plugin-sdk/plugin-test-contracts.js matchedIdentity = npm:c2VhbGNsYXc:2026.9.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin-sdk/plugin-test-contracts.jsView on unpkg

scripts/preinstall-package-manager-warning.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = sealclaw@2026.9.1 matchedIdentity = npm:c2VhbGNsYXc:2026.9.1 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/preinstall-package-manager-warning.mjsView on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 1409-1450json

1409 "lint:ui:no-raw-window-open": "node scripts/check-no-raw-window-open.mjs",

1410 "lint:webhook:no-low-level-body-read": "node scripts/check-webhook-auth-body-order.mjs",

1411 "moltbot:rpc": "node scripts/run-node.mjs agent --mode rpc --json",

1412 "openclaw": "node scripts/run-node.mjs",

1413 "openclaw:rpc": "node scripts/run-node.mjs agent --mode rpc --json",

1414 "perf:kova:summary": "node scripts/kova-ci-summary.mjs",

1415 "perf:source:summary": "node scripts/openclaw-performance-source-summary.mjs",

1416 "plugin-sdk:api:check": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --check",

1417 "plugin-sdk:api:gen": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --write",

1418 "plugin-sdk:check-exports": "node scripts/sync-plugin-sdk-exports.mjs --check",

1419 "plugin-sdk:sync-exports": "node scripts/sync-plugin-sdk-exports.mjs",

1420 "plugin-sdk:usage": "node --import tsx scripts/analyze-plugin-sdk-usage.ts",

1421 "plugins:boundary-report": "node --import tsx scripts/plugin-boundary-report.ts",

1422 "plugins:boundary-report:ci": "node --import tsx scripts/plugin-boundary-report.ts --summary --fail-on-cross-owner --fail-on-unclassified-unused-reserved --fail-on-eligible-compat",

1423 "plugins:boundary-report:json": "node --import tsx scripts/plugin-boundary-report.ts --json",

1424 "plugins:boundary-report:summary": "node --import tsx scripts/plugin-boundary-report.ts --summary",

1425 "plugins:inventory:check": "node scripts/generate-plugin-inventory-doc.mjs --check",

1426 "plugins:inventory:gen": "node scripts/generate-plugin-inventory-doc.mjs --write",

1427 "plugins:sync": "node --import tsx scripts/sync-plugin-versions.ts",

1428 "plugins:sync:check": "node --import tsx scripts/sync-plugin-versions.ts --check",

1429 "postinstall": "node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs",

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L1429

1430 "preinstall": "node scripts/preinstall-package-manager-warning.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L1430

1431 "prepush:ci": "bash scripts/prepush-ci.sh",

1432 "prompt:snapshots:check": "node --import tsx scripts/generate-prompt-snapshots.ts --check",

1433 "prompt:snapshots:gen": "node --import tsx scripts/generate-prompt-snapshots.ts --write",

1434 "prompt:snapshots:sync-codex-model": "node --import tsx scripts/sync-codex-model-prompt-fixture.ts",

1435 "protocol:check": "pnpm protocol:gen && git diff --exit-code -- dist/protocol.schema.json",

1436 "protocol:gen": "node --import tsx scripts/protocol-gen.ts",

1437 "proxy:coverage": "node scripts/run-node.mjs proxy coverage",

1438 "proxy:gateway": "node scripts/run-node.mjs proxy run -- node scripts/run-node.mjs gateway",

1439 "proxy:install-ca": "node --import tsx scripts/proxy-install-ca.mjs",

1440 "proxy:run": "node scripts/run-node.mjs proxy run",

1441 "proxy:start": "node scripts/run-node.mjs proxy start",

1442 "release:beta-smoke": "node --import tsx scripts/release-beta-smoke.ts",

1443 "release:check": "pnpm deps:root-ownership:check && pnpm plugins:inventory:check && pnpm check:base-config-schema && pnpm check:bundled-channel-config-metadata && pnpm config:docs:check && pnpm plugin-sdk:check-exports && pnpm plugin-sdk:api:check && node --import tsx scripts/release-check.ts",

1444 "release:openclaw:npm:check": "node --import tsx scripts/openclaw-npm-release-check.ts",

1445 "release:openclaw:npm:verify-published": "node --import tsx scripts/openclaw-npm-postpublish-verify.ts",

1446 "release:plugins:npm:check": "node --import tsx scripts/plugin-npm-release-check.ts",

1447 "release:plugins:npm:plan": "node --import tsx scripts/plugin-npm-release-plan.ts",

1448 "runtime-sidecars:check": "node --import tsx scripts/generate-runtime-sidecar-paths-baseline.ts --check",

1449 "runtime-sidecars:gen": "node --import tsx scripts/generate-runtime-sidecar-paths-baseline.ts --write",

1450 "start": "node scripts/run-node.mjs",

dist/proxy-cli.runtime-BWHciWzX.jsView file

Lines 744-784javascript

744 env: childEnv,

745 cwd: process$1.cwd()

746 });

747 child.once("error", reject);

748 child.once("exit", (code, signal

dist/status.gather-C91Qzjwd.jsView file

Lines 21-61javascript

21function canUseNodeFs() {

22 const getBuiltinModule = process.getBuiltinModule;

23 if (typeof getBuiltinModule !== "function") return false;

dist/restart-C_iPYGsU.jsView file

Lines 1-32javascript

1import { v as resolveStateDir } from "./paths-B6Msrizt.js";

2import { a as formatErrorMessage } from "./errors-Xrw7K7c6.js";

3import { d as resolveGatewayLaunchAgentLabel, m as resolveGatewayWindowsTaskName, p as resolveGatewaySystemdServiceName } from

dist/control-ui/assets/index-CKP5GwLX.jsView file

6897contains invisible/control Unicode U+200C (zero width non-joiner) `}var a6=e(n(((e,t)=>{(function(n,r){typeof e==`object`&&t!==void 0?t.exports=r():typeof define==`function`&&define.amd?define(r):n.JSON5=r()})(e,(function(){function e(e,t){return t={exports:{}},e(t,t.exports),t.exports}var t=e(function(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-CKP5GwLX.jsView on unpkg · L6897

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/docx-preview-DMEG690f.js","assets/chunk-62oNxeRG.js","assets/jszip.min-C9xvYp-s.js","assets/pptx-preview.es-eMvLaQp... L2: import{i as e,n as t,t as n}from"./chunk-62oNxeRG.js";import{a as r,c as i,i as a,l as o,n as s,o as c,r as l,s as u,t as d,u as f}from"./lit-Cfjy9bnZ.js";import{t as p}from"./requ... L3: `+re+e}var I=!1;function R(e,t){if(!e||I)return``;I=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.... ... L5: `),o=i.length-1,s=a.length-1;1<=o&&0<=s&&i[o]!==a[s];)s--;for(;1<=o&&0<=s;o--,s--)if(i[o]!==a[s]){if(o!==1||s!==1)do if(o--,s--,0>s||i[o]!==a[s]){var c=` L6: `+i[o].replace(` at new `,` at `);return e.displayName&&c.includes(`<a

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/control-ui/assets/index-CKP5GwLX.jsView on unpkg · L1

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView file

•path = skills/llm-wiki-ingest/tests/test_ingest_scripts.py kind = payload_in_excluded_dir sizeBytes = 16667 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView on unpkg

•path = skills/llm-wiki-ingest/tests/test_ingest_scripts.py kind = build_helper sizeBytes = 16667 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/llm-wiki-ingest/tests/test_ingest_scripts.pyView on unpkg

dist/approval-native-runtime-B7-Q8YuY.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/approval-native-runtime-B7-Q8YuY.js#virtual:normalized:round1View on unpkg

dist/plugin-sdk/plugin-test-contracts.jsView file

•matchType = normalized_sha256 matchedPackage = sealclaw@2026.9.2 matchedPath = dist/plugin-sdk/plugin-test-contracts.js matchedIdentity = npm:c2VhbGNsYXc:2026.9.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugin-sdk/plugin-test-contracts.jsView on unpkg

scripts/preinstall-package-manager-warning.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = sealclaw@2026.9.1 matchedIdentity = npm:c2VhbGNsYXc:2026.9.1 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/preinstall-package-manager-warning.mjsView on unpkg