shadow-claw@1.33.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

shadow-claw@1.33.0: Suspicious npm security report (Warn) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 1,512 file(s), 26.4 MB of source, external domains: 10.0.0.1, 10.0.0.2, 10.0.0.5, 10.9.8.226, 127.0.0.1, 169.254.169.254, 172.16.0.5, 172.20.0.1, 172.20.0.5, 192.168.1.1, 192.168.1.10, 192.168.1.100, 192.168.1.5, 192.168.1.50, a2ui.org, accounts.google.com, actions.google.com, agent-card.github.io, ai.google.dev, aiplatform.googleapis.com, allowed.example.com, another.com, any.example.com, api.example.com, api.external.com, api.figma.com, api.github.com, api.hf.co, api.linear.app, api.login.yahoo.com, api.myservice.com, api.nodemailer.com, api.notion.com, api.openai.com, api.telegram.org, api.test, api.test.example, app.internal, app.vssps.visualstudio.com, attacker.com, attacker.github.io, auth.atlassian.com, auth.example.com, auth.openai.com, bad.example.com, bible-tools.github.io, bit.ly, bridge.example, bridge.example.com, cdn-lfs.huggingface.co

Oversized source lightweight scan

dist/electron/main.cjs2.64 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoHighEntropyStringsMinifiedUrlStrings127.0.0.1accounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.nodemailer.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comethereal.emailexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comlinear.applogin.microsoftonline.commail.google.comnodemailer.comoauth2.googleapis.compeerjs.com

dist/lib/orchestrator-C3TgDZvq.js2.06 MB file, sampled 256 KB

NetworkDynamicRequireHighEntropyStringsUrlStrings127.0.0.1developer.chrome.comdocs.aws.amazon.comgithub.comhuggingface.coollama.comopenrouter.ai

dist/lib/webllm-BwoH9pq3.js6.15 MB file, sampled 256 KB

NetworkHighEntropyStringsUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/agent.worker.js2.09 MB file, sampled 256 KB

FilesystemNetworkDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapp.vssps.visualstudio.comauth.atlassian.comexample.comgithub.comgitlab.comhtml.duckduckgo.comhuggingface.colinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.comwww.w3.orgxt-ml.github.io

dist/public/pdf.worker.js2.06 MB file, sampled 256 KB

NetworkDynamicRequireUrlStringsexample.com

dist/public/webllm-BDMz9yZR.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-_JXFm0yh.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/server.js2.43 MB file, sampled 256 KB

FilesystemNetworkWebSocketHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comlinear.applogin.microsoftonline.comoauth2.googleapis.comslack.comwww.figma.comwww.w3.orgwww.youtube.comxt-ml.github.io

Source & flagged code

19 flagged · loading source

dist/lib/git-BppibnJW.jsView file

15651patternName = generic_password severity = medium line = 15651

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/lib/git-BppibnJW.jsView on unpkg · L15651

bin/version.mjsView file

2L3: import { execSync } from "node:child_process"; L4: import { readFile, writeFile, stat } from "node:fs/promises";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L2

src/server/services/llamafile-manager.tsView file

467console.log( L468: `[Proxy] Shell fallback: /bin/sh -c 'exec "\$0" "\$@"' ${absolutePath} [${args.length} args]`, L469: );

High

Shell

Package source references shell execution.

src/server/services/llamafile-manager.tsView on unpkg · L467

src/components/shadow-claw-file-viewer/iframe-storage-bridge.test.tsView file

26// eslint-disable-next-line no-eval L27: eval(scriptCode); L28: });

High

Eval

Package source references dynamic code evaluation.

src/components/shadow-claw-file-viewer/iframe-storage-bridge.test.tsView on unpkg · L26

bin/cli.mjsView file

178L179: const { startServer } = await import(serverModulePath); L180:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.mjsView on unpkg · L178

src/service-worker/patch-service-worker-trusted-types.test.jsView file

1import { describe, expect, it, jest } from "@jest/globals"; L2: import vm from "node:vm";

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/service-worker/patch-service-worker-trusted-types.test.jsView on unpkg · L1

dist/electron/main.cjsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/electron/main.cjsView on unpkg

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t,n)=>()=>... L2: `).join(`\r ... L21: public_key TEXT NOT NULL, L22: private_key TEXT NOT NULL, L23: subject TEXT NOT NULL ... L85: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L86: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L87: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L98: `)?

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/electron/main.cjsView on unpkg · L1

dist/server.jsView file

127/*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */ L128: if(!globalThis.DOMException)try{let{MessageChannel:e}=H(`worker_threads`),t=new e().port1,n=new ArrayBuffer;t.postMessage(n,[n,n])}catch(e){e.constructor.name===`DOMException`&&(gl... L129: --`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length... L130: \r ... L138: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L139: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,message:e,at:a,text:c}},u=function(e){return e&&e!==o&&l(

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/server.jsView on unpkg · L127

127Trigger-reachable chain: scripts.start -> dist/server.js L127: /*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */ L128: if(!globalThis.DOMException)try{let{MessageChannel:e}=H(`worker_threads`),t=new e().port1,n=new ArrayBuffer;t.postMessage(n,[n,n])}catch(e){e.constructor.name===`DOMException`&&(gl... L129: --`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length... L130: \r ... L138: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L139: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server.jsView on unpkg · L127

bin/build/build.mjsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. build:clean", { cwd: toolchainroot }); await run("npm run -s rolldown", { cwd: toolchainroot }); } await cp(toolchaindist, distpublicdir, { recursive: true }); const contentassets = join(contentroot, "assets"); if (await pathexists(contentassets)) { if (copyallassets) { await cp(contentassets, distpublicdir, { recursive: true, force: true }); } else { if (await pathexists(join(contentassets, "icons"))) { await cp( join(contentassets, "icons"), join(distpublicdir, "assets/icons"), { recursive: true, force: true }, );

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/build/build.mjsView on unpkg

dist/lib/orchestrator-C3TgDZvq.jsView file

20Cross-file remote execution chain: dist/lib/orchestrator-C3TgDZvq.js spawns dist/lib/git-BppibnJW.js; helper contains network access plus dynamic code execution. L20: import { a as require_define_data_property, c as require_hasown, d as require_type, f as require_es_object_atoms, h as require_stream_browserify, i as require_has_property_descript... L21: import { n as require_inflate, o as require_zstream, r as require_deflate, t as require_constants } from "./constants-DsXVuJVP.js"; L22: import { a as upsertEmailConnection, i as listEmailConnections, n as deleteEmailConnection, o as getEmailPluginManifest, r as getEmailConnection, s as listEmailPluginManifests, t a... ... L32: label: "OpenRouter API Keys", L33: href: "https://openrouter.ai/keys" L34: }, ... L1016: let output = ""; L1017: i

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/lib/orchestrator-C3TgDZvq.jsView on unpkg · L20

dist/public/webllm-_JXFm0yh.jsView file

•path = dist/public/webllm-_JXFm0yh.js kind = oversized_source_file sizeBytes = 6027733 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/public/webllm-_JXFm0yh.jsView on unpkg

dist/lib/bundler-CsL7hHMq.jsView file

1823patternName = generic_password severity = medium line = 1823

Medium

Secret Pattern

Hardcoded password in dist/lib/bundler-CsL7hHMq.js

dist/lib/bundler-CsL7hHMq.jsView on unpkg · L1823

src/subsystems/git/git.tsView file

844patternName = generic_password severity = medium line = 844

Medium

Secret Pattern

Hardcoded password in src/subsystems/git/git.ts

src/subsystems/git/git.tsView on unpkg · L844