shadow-claw@1.23.3: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

shadow-claw@1.23.3: Malicious npm security report (Block) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

CopyleftLicenseGitDependency

scanned 1,196 file(s), 15.6 MB of source, external domains: 10.0.0.1, 127.0.0.1, 169.254.169.254, 172.16.0.5, 192.168.1.1, 192.168.1.100, 192.168.1.5, a2ui.org, accounts.google.com, ai.google.dev, aiplatform.googleapis.com, allowed.example.com, another.com, any.example.com, api.example.com, api.figma.com, api.github.com, api.linear.app, api.login.yahoo.com, api.myservice.com, api.nodemailer.com, api.notion.com, api.openai.com, api.telegram.org, api.test, api.test.example, app.vssps.visualstudio.com, attacker.github.io, auth.atlassian.com, auth.example.com, auth.openai.com, bad.example.com, bit.ly, bridge.example, bridge.example.com, cdn-lfs.huggingface.co, cdn.jsdelivr.net, cdnjs.cloudflare.com, console.firebase.google.com, content-firebaseappcheck.googleapis.com, custom.org, deepwiki.com, demo.example.com, dev.azure.com, developer.chrome.com, developer.mozilla.org, different-origin.com, docs.aws.amazon.com, docs.cloud.google.com, docs.expo.dev

Oversized source lightweight scan

dist/electron/main.cjs2.64 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoPossibleObfuscationHighEntropyStringsMinifiedUrlStrings127.0.0.1accounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.nodemailer.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comethereal.emailexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comlinear.applogin.microsoftonline.commail.google.comnodemailer.comoauth2.googleapis.compeerjs.com

dist/public/agent.worker.js2.08 MB file, sampled 256 KB

FilesystemNetworkDynamicRequirePossibleObfuscationHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapp.vssps.visualstudio.comauth.atlassian.comexample.comgithub.comgitlab.comhuggingface.colinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.comwww.w3.orgxt-ml.github.io

dist/public/pdf.worker.js2.06 MB file, sampled 256 KB

NetworkDynamicRequireUrlStringsexample.com

dist/public/webllm-BDMz9yZR.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-CHN5H-Sy.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/server.js2.20 MB file, sampled 256 KB

FilesystemNetworkCryptoHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.nodemailer.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comethereal.emailexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comlinear.applogin.microsoftonline.commail.google.comnodemailer.comoauth2.googleapis.compeerjs.comslack.com

Source & flagged code

17 flagged · loading source

src/subsystems/git/git.tsView file

764patternName = generic_password severity = medium line = 764

Medium

Secret Pattern

Package contains a possible secret pattern.

src/subsystems/git/git.tsView on unpkg · L764

bin/cli.test.mjsView file

1import { execFile } from "node:child_process"; L2: import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/cli.test.mjsView on unpkg · L1

src/server/services/llamafile-manager.tsView file

467console.log( L468: `[Proxy] Shell fallback: /bin/sh -c 'exec "\$0" "\$@"' ${absolutePath} [${args.length} args]`, L469: );

High

Shell

Package source references shell execution.

src/server/services/llamafile-manager.tsView on unpkg · L467

src/components/shadow-claw-file-viewer/iframe-storage-bridge.test.tsView file

26// eslint-disable-next-line no-eval L27: eval(scriptCode); L28: });

High

Eval

Package source references dynamic code evaluation.

src/components/shadow-claw-file-viewer/iframe-storage-bridge.test.tsView on unpkg · L26

bin/cli.mjsView file

2L3: import { exec } from "node:child_process"; L4: import { mkdir, readFile, stat, writeFile } from "node:fs/promises"; ... L12: const __filename = fileURLToPath(import.meta.url); L13: const __dirname = path.dirname(__filename); L14: const toolchainRoot = path.resolve(__dirname, ".."); ... L17: try { L18: const pkgPath = path.join(toolchainRoot, "package.json"); L19: const pkgStr = await readFile(pkgPath, "utf8"); L20: const pkg = JSON.parse(pkgStr); L21: return pkg.version || "1.0.0"; ... L37: const start =

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/cli.mjsView on unpkg · L2

156L157: const { startServer } = await import(serverModulePath); L158:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.mjsView on unpkg · L156

src/service-worker/patch-service-worker-trusted-types.test.jsView file

1import { describe, expect, it, jest } from "@jest/globals"; L2: import vm from "node:vm";

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/service-worker/patch-service-worker-trusted-types.test.jsView on unpkg · L1

dist/electron/main.cjsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/electron/main.cjsView on unpkg

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t,n)=>()=>... L2: `).join(`\r ... L21: public_key TEXT NOT NULL, L22: private_key TEXT NOT NULL, L23: subject TEXT NOT NULL ... L75: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L76: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L77: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L88: `)?

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/electron/main.cjsView on unpkg · L1

dist/server.jsView file

63/*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */ L64: if(!globalThis.DOMException)try{let{MessageChannel:e}=B(`worker_threads`),t=new e().port1,n=new ArrayBuffer;t.postMessage(n,[n,n])}catch(e){e.constructor.name===`DOMException`&&(gl... L65: --`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length... L66: \r ... L74: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L75: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,message:e,at:a,text:c}},u=function(e){return e&&e!==o&&l(`Expec

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/server.jsView on unpkg · L63

63Trigger-reachable chain: scripts.start -> dist/server.js L63: /*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */ L64: if(!globalThis.DOMException)try{let{MessageChannel:e}=B(`worker_threads`),t=new e().port1,n=new ArrayBuffer;t.postMessage(n,[n,n])}catch(e){e.constructor.name===`DOMException`&&(gl... L65: --`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length... L66: \r ... L74: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L75: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,messag

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server.jsView on unpkg · L63

bin/build/build.mjsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ); await run("npm run -s build:clean", { cwd: toolchainroot }); await run("npm run -s rolldown", { cwd: toolchainroot }); } await cp(toolchaindist, distpublicdir, { recursive: true }); const contentassets = join(contentroot, "assets"); if (await pathexists(contentassets)) { if (copyallassets) { await cp(contentassets, distpublicdir, { recursive: true, force: true }); } else { if (await pathexists(join(contentassets, "icons"))) { await cp( join(contentassets, "icons"), join(distpublicdir, "assets/icons"), { recursive: true,

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/build/build.mjsView on unpkg

dist/public/agent.worker.jsView file

1Cross-file remote execution chain: dist/public/agent.worker.js spawns dist/public/git-CkhCJonj.js; helper contains network access plus dynamic code execution. L1: import{i as e,n as t,r as n,t as r}from"./rolldown-runtime-aKtaBQYM.js";const i=new class{loading=!1;models=new Map;getModelInfo(e){return this.models.get(e.toLowerCase())??null}re... L2: /*! @license DOMPurify 3.4.13 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.13/L... ... L8: `).trim(),t}function Hr(e){let t=zr(e,`main`)||zr(e,`article`)||e;return t=Br(t,[`script`,`style`,`noscript`,`svg`,`head`,`nav`,`footer`,`header`,`aside`]),t=t.replace(/<!--[\s\S]*... L9: Reason: VM is still booting in the background...`:``)}if(ri===`comman

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/public/agent.worker.jsView on unpkg · L1

dist/public/webllm-BDMz9yZR.jsView file

•path = dist/public/webllm-BDMz9yZR.js kind = oversized_source_file sizeBytes = 6027766 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/public/webllm-BDMz9yZR.jsView on unpkg