secretloop: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

secretloop: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

out/mcp.jsView file

57L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(s);continue}if(e.external){let u=e.exter... L59: `);if("message"in e&&typeof e.message=="string")return e.message;try{return JSON.stringify(e)}catch{return String(e)}}return String(e)}function mhe(e){return e.description}function... ... L66: || (${s} === "string" && ${n} && ${n} == +${n} && !(${n} % 1))`).assign(a,(0,Oe._)`+${n}`);return;case"boolean":i.elseIf((0,Oe._)`${n} === "false" || ${n} === 0 || ${n} === null`).... L67: || ${s} === "boolean" || ${n} === null`).assign(a,(0,Oe._)`[${n}]`)}}}function oSe({gen:e,parentData:t,parentDataProperty:r},i){e.if((0,Oe._)`${t} !== undefined`,()=>e.assign((0,Oe... L68: missingProperty: ${i}, ... L7

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

out/mcp.jsView on unpkg · L57

120`)||(u["#text"]="#text"in u?u["#text"]+l:l);for(let l of s)l.tag==="__proto__"&&zR(u),l.tag in u?Array.isArray(u[l.tag])?u[l.tag].push(l.value):u[l.tag]=[u[l.tag],l.value]:u[l.tag]... L121: Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:t});return e},lCe=(e={})=>async({callerClientConfig:t}={})=>{e.logger?.de... L122: Multiple credential sources detected:

High

Child Process

Package source references child process execution.

out/mcp.jsView on unpkg · L120

66|| (${s} === "string" && ${n} && ${n} == +${n} && !(${n} % 1))`).assign(a,(0,Oe._)`+${n}`);return;case"boolean":i.elseIf((0,Oe._)`${n} === "false" || ${n} === 0 || ${n} === null`).... L67: || ${s} === "boolean" || ${n} === null`).assign(a,(0,Oe._)`[${n}]`)}}}function oSe({gen:e,parentData:t,parentDataProperty:r},i){e.if((0,Oe._)`${t} !== undefined`,()=>e.assign((0,Oe... L68: missingProperty: ${i},

High

Eval

Package source references dynamic code evaluation.

out/mcp.jsView on unpkg · L66

57L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(s);continue}if(e.external){let u=e.exter... L59: `);if("message"in e&&typeof e.message=="string")return e.message;try{return JSON.stringify(e)}catch{return String(e)}}return String(e)}function mhe(e){return e.description}function... ... L66: || (${s} === "string" && ${n} && ${n} == +${n} && !(${n} % 1))`).assign(a,(0,Oe._)`+${n}`);return;case"boolean":i.elseIf((0,Oe._)`${n} === "false" || ${n} === 0 || ${n} === null`).... L67: || ${s} === "boolean" || ${n} === null`).assign(a,(0,Oe._)`[${n}]`)}}}function oSe({gen:e,parentData:t,parentDataProperty:r},i){e.if((0,Oe._)`${t} !== undefined`,()=>e.assign((0,Oe... L68: missingProperty: ${i}, ... L7

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

out/mcp.jsView on unpkg · L57

1#!/usr/bin/env node L2: "use strict";var rY=Object.create;var Xh=Object.defineProperty;var nY=Object.getOwnPropertyDescriptor;var iY=Object.getOwnPropertyNames;var oY=Object.getPrototypeOf,sY=Object.proto... L3: `)}});var Q0=x(W=>{"use strict";var Jee=W&&W.__createBinding||(Object.create?(function(e,t,r,i){i===void 0&&(i=r);var n=Object.getOwnPropertyDescriptor(t,r);(!n||("get"in n?!t.__es... ... L6: `)} L7: };`)(...Object.values(this.closed))}};dg.Doc=oE});var sE=x(pg=>{"use strict";Object.defineProperty(pg,"__esModule",{value:!0});pg.version=void 0;pg.version={major:4,minor:5,patch:1... L8: for (let i = 0; i < ${M}.issues.length; i++) { ... L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

out/mcp.jsView on unpkg · L1

1#!/usr/bin/env node L2: "use strict";var rY=Object.create;var Xh=Object.defineProperty;var nY=Object.getOwnPropertyDescriptor;var iY=Object.getOwnPropertyNames;var oY=Object.getPrototypeOf,sY=Object.proto... L3: `)}});var Q0=x(W=>{"use strict";var Jee=W&&W.__createBinding||(Object.create?(function(e,t,r,i){i===void 0&&(i=r);var n=Object.getOwnPropertyDescriptor(t,r);(!n||("get"in n?!t.__es... ... L6: `)} L7: };`)(...Object.values(this.closed))}};dg.Doc=oE});var sE=x(pg=>{"use strict";Object.defineProperty(pg,"__esModule",{value:!0});pg.version=void 0;pg.version={major:4,minor:5,patch:1... L8: for (let i = 0; i < ${M}.issues.length; i++) { ... L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

out/mcp.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = secretloop@0.2.1 matchedPath = out/mcp.js matchedIdentity = npm:c2VjcmV0bG9vcA:0.2.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

out/mcp.jsView on unpkg

out/cli.jsView file

2Trigger-reachable chain: manifest.bin -> out/cli.js L2: "use strict";var XF=Object.create;var uu=Object.defineProperty;var QF=Object.getOwnPropertyDescriptor;var e$=Object.getOwnPropertyNames;var t$=Object.getPrototypeOf,r$=Object.proto... L3: `,e-1)+1;if(e<=r)return null;let n=t.slice(r,e),o=/["'`]?([A-Za-z_$][A-Za-z0-9_$]*)["'`]?\s*(?::=|[:=])\s*$/.exec(n);return o?o[1]:null}function mw(t,e,r={}){let n=[],o=new Set;for... L4: `,e-1)+1,n=t.indexOf(` L5: `,e);return[r,n===-1?t.length:n]}function cL(t,e,r){let n=(o,s)=>{o.fingerprint=ds({filePath:r,ruleId:o.ruleId,strategy:o.fingerprintStrategy??"value",value:o.value,context:s,trans... L6: `);for(let s=0;s<o.length;s++){let i=Hw(o[s]);i&&(i.diagnostic!==void 0&&!r.includes(i.diagnostic)&&r.push(i.diagnostic),n(s+1,i),n(s+2,i))}return{lines:

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

out/cli.jsView on unpkg · L2

2Trigger-reachable command-output exfiltration chain: manifest.bin -> out/cli.js L2: "use strict";var XF=Object.create;var uu=Object.defineProperty;var QF=Object.getOwnPropertyDescriptor;var e$=Object.getOwnPropertyNames;var t$=Object.getPrototypeOf,r$=Object.proto... L3: `,e-1)+1;if(e<=r)return null;let n=t.slice(r,e),o=/["'`]?([A-Za-z_$][A-Za-z0-9_$]*)["'`]?\s*(?::=|[:=])\s*$/.exec(n);return o?o[1]:null}function mw(t,e,r={}){let n=[],o=new Set;for... L4: `,e-1)+1,n=t.indexOf(` L5: `,e);return[r,n===-1?t.length:n]}function cL(t,e,r){let n=(o,s)=>{o.fingerprint=ds({filePath:r,ruleId:o.ruleId,strategy:o.fingerprintStrategy??"value",value:o.value,context:s,trans... L6: `);for(let s=0;s<o.length;s++){let i=Hw(o[s]);i&&(i.diagnostic!==void 0&&!r.includes(i.diagnostic)&&r.push(i.diagnostic),n(s+

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

out/cli.jsView on unpkg · L2

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

Source & flagged code

10 flagged

out/mcp.jsView file

57L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(s);continue}if(e.external){let u=e.exter... L59: `);if("message"in e&&typeof e.message=="string")return e.message;try{return JSON.stringify(e)}catch{return String(e)}}return String(e)}function mhe(e){return e.description}function... ... L66: || (${s} === "string" && ${n} && ${n} == +${n} && !(${n} % 1))`).assign(a,(0,Oe._)`+${n}`);return;case"boolean":i.elseIf((0,Oe._)`${n} === "false" || ${n} === 0 || ${n} === null`).... L67: || ${s} === "boolean" || ${n} === null`).assign(a,(0,Oe._)`[${n}]`)}}}function oSe({gen:e,parentData:t,parentDataProperty:r},i){e.if((0,Oe._)`${t} !== undefined`,()=>e.assign((0,Oe... L68: missingProperty: ${i}, ... L7

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

out/mcp.jsView on unpkg · L57

120`)||(u["#text"]="#text"in u?u["#text"]+l:l);for(let l of s)l.tag==="__proto__"&&zR(u),l.tag in u?Array.isArray(u[l.tag])?u[l.tag].push(l.value):u[l.tag]=[u[l.tag],l.value]:u[l.tag]... L121: Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:t});return e},lCe=(e={})=>async({callerClientConfig:t}={})=>{e.logger?.de... L122: Multiple credential sources detected:

High

Child Process

Package source references child process execution.

out/mcp.jsView on unpkg · L120

66|| (${s} === "string" && ${n} && ${n} == +${n} && !(${n} % 1))`).assign(a,(0,Oe._)`+${n}`);return;case"boolean":i.elseIf((0,Oe._)`${n} === "false" || ${n} === 0 || ${n} === null`).... L67: || ${s} === "boolean" || ${n} === null`).assign(a,(0,Oe._)`[${n}]`)}}}function oSe({gen:e,parentData:t,parentDataProperty:r},i){e.if((0,Oe._)`${t} !== undefined`,()=>e.assign((0,Oe... L68: missingProperty: ${i},

High

Eval

Package source references dynamic code evaluation.

out/mcp.jsView on unpkg · L66

57L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(s);continue}if(e.external){let u=e.exter... L59: `);if("message"in e&&typeof e.message=="string")return e.message;try{return JSON.stringify(e)}catch{return String(e)}}return String(e)}function mhe(e){return e.description}function... ... L66: || (${s} === "string" && ${n} && ${n} == +${n} && !(${n} % 1))`).assign(a,(0,Oe._)`+${n}`);return;case"boolean":i.elseIf((0,Oe._)`${n} === "false" || ${n} === 0 || ${n} === null`).... L67: || ${s} === "boolean" || ${n} === null`).assign(a,(0,Oe._)`[${n}]`)}}}function oSe({gen:e,parentData:t,parentDataProperty:r},i){e.if((0,Oe._)`${t} !== undefined`,()=>e.assign((0,Oe... L68: missingProperty: ${i}, ... L7

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

out/mcp.jsView on unpkg · L57

1#!/usr/bin/env node L2: "use strict";var rY=Object.create;var Xh=Object.defineProperty;var nY=Object.getOwnPropertyDescriptor;var iY=Object.getOwnPropertyNames;var oY=Object.getPrototypeOf,sY=Object.proto... L3: `)}});var Q0=x(W=>{"use strict";var Jee=W&&W.__createBinding||(Object.create?(function(e,t,r,i){i===void 0&&(i=r);var n=Object.getOwnPropertyDescriptor(t,r);(!n||("get"in n?!t.__es... ... L6: `)} L7: };`)(...Object.values(this.closed))}};dg.Doc=oE});var sE=x(pg=>{"use strict";Object.defineProperty(pg,"__esModule",{value:!0});pg.version=void 0;pg.version={major:4,minor:5,patch:1... L8: for (let i = 0; i < ${M}.issues.length; i++) { ... L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

out/mcp.jsView on unpkg · L1

1#!/usr/bin/env node L2: "use strict";var rY=Object.create;var Xh=Object.defineProperty;var nY=Object.getOwnPropertyDescriptor;var iY=Object.getOwnPropertyNames;var oY=Object.getPrototypeOf,sY=Object.proto... L3: `)}});var Q0=x(W=>{"use strict";var Jee=W&&W.__createBinding||(Object.create?(function(e,t,r,i){i===void 0&&(i=r);var n=Object.getOwnPropertyDescriptor(t,r);(!n||("get"in n?!t.__es... ... L6: `)} L7: };`)(...Object.values(this.closed))}};dg.Doc=oE});var sE=x(pg=>{"use strict";Object.defineProperty(pg,"__esModule",{value:!0});pg.version=void 0;pg.version={major:4,minor:5,patch:1... L8: for (let i = 0; i < ${M}.issues.length; i++) { ... L58: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of e.seen.entries()){let a=s[1];if(t===s[0]){o(

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

out/mcp.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = secretloop@0.2.1 matchedPath = out/mcp.js matchedIdentity = npm:c2VjcmV0bG9vcA:0.2.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

out/mcp.jsView on unpkg

out/cli.jsView file

2Trigger-reachable chain: manifest.bin -> out/cli.js L2: "use strict";var XF=Object.create;var uu=Object.defineProperty;var QF=Object.getOwnPropertyDescriptor;var e$=Object.getOwnPropertyNames;var t$=Object.getPrototypeOf,r$=Object.proto... L3: `,e-1)+1;if(e<=r)return null;let n=t.slice(r,e),o=/["'`]?([A-Za-z_$][A-Za-z0-9_$]*)["'`]?\s*(?::=|[:=])\s*$/.exec(n);return o?o[1]:null}function mw(t,e,r={}){let n=[],o=new Set;for... L4: `,e-1)+1,n=t.indexOf(` L5: `,e);return[r,n===-1?t.length:n]}function cL(t,e,r){let n=(o,s)=>{o.fingerprint=ds({filePath:r,ruleId:o.ruleId,strategy:o.fingerprintStrategy??"value",value:o.value,context:s,trans... L6: `);for(let s=0;s<o.length;s++){let i=Hw(o[s]);i&&(i.diagnostic!==void 0&&!r.includes(i.diagnostic)&&r.push(i.diagnostic),n(s+1,i),n(s+2,i))}return{lines:

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

out/cli.jsView on unpkg · L2

2Trigger-reachable command-output exfiltration chain: manifest.bin -> out/cli.js L2: "use strict";var XF=Object.create;var uu=Object.defineProperty;var QF=Object.getOwnPropertyDescriptor;var e$=Object.getOwnPropertyNames;var t$=Object.getPrototypeOf,r$=Object.proto... L3: `,e-1)+1;if(e<=r)return null;let n=t.slice(r,e),o=/["'`]?([A-Za-z_$][A-Za-z0-9_$]*)["'`]?\s*(?::=|[:=])\s*$/.exec(n);return o?o[1]:null}function mw(t,e,r={}){let n=[],o=new Set;for... L4: `,e-1)+1,n=t.indexOf(` L5: `,e);return[r,n===-1?t.length:n]}function cL(t,e,r){let n=(o,s)=>{o.fingerprint=ds({filePath:r,ruleId:o.ruleId,strategy:o.fingerprintStrategy??"value",value:o.value,context:s,trans... L6: `);for(let s=0;s<o.length;s++){let i=Hw(o[s]);i&&(i.diagnostic!==void 0&&!r.includes(i.diagnostic)&&r.push(i.diagnostic),n(s+

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

out/cli.jsView on unpkg · L2

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg