shadow-claw@1.35.0: Manual Review npm security report (Allow) | LPM Firewall

Loading npm security reports…

shadow-claw@1.35.0: Manual Review npm security report (Allow) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 1,841 file(s), 35.3 MB of source, external domains: 10.0.0.1, 10.0.0.2, 10.0.0.5, 10.9.8.226, 127.0.0.1, 169.254.169.254, 172.16.0.5, 172.20.0.1, 172.20.0.5, 192.168.1.1, 192.168.1.10, 192.168.1.100, 192.168.1.5, 192.168.1.50, a2ui.org, accounts.google.com, actions.google.com, agent-card.github.io, ai.google.dev, aiplatform.googleapis.com, allowed.example.com, another.com, any.example.com, api.example.com, api.external.com, api.figma.com, api.github.com, api.hf.co, api.linear.app, api.login.yahoo.com, api.myservice.com, api.nodemailer.com, api.notion.com, api.openai.com, api.telegram.org, api.test, api.test.example, api.weather.com, app.internal, app.vssps.visualstudio.com, attacker.com, attacker.github.io, auth.atlassian.com, auth.example.com, auth.openai.com, bad.example.com, bible-tools.github.io, bit.ly, bridge.example, bridge.example.com

Oversized source lightweight scan

dist/cli/chunk-CvKmsXS0.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/cli/chunk-D_-GW0aJ.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/electron/main.cjs2.65 MB file, sampled 256 KB

FilesystemNetworkChildProcessCryptoHighEntropyStringsMinifiedUrlStrings127.0.0.1accounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.nodemailer.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comethereal.emailexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comlinear.applogin.microsoftonline.commail.google.comnodemailer.comoauth2.googleapis.compeerjs.com

dist/headless-agent.js6.79 MB file, sampled 256 KB

FilesystemNetworkDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netdeepwiki.comexample.comgithub.comgitlab.comhuggingface.colinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.comwww.w3.orgxt-ml.github.io

dist/lib/webllm-BwoH9pq3.js6.15 MB file, sampled 256 KB

NetworkHighEntropyStringsUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/pdf.worker.js2.06 MB file, sampled 256 KB

NetworkDynamicRequireUrlStringsexample.com

dist/public/webllm-BDMz9yZR.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/server.js2.44 MB file, sampled 256 KB

FilesystemNetworkWebSocketHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comlinear.applogin.microsoftonline.comoauth2.googleapis.comslack.comwww.figma.comwww.w3.orgwww.youtube.comxt-ml.github.io

Source & flagged code

18 flagged · loading source

dist/lib/bundler-CsL7hHMq.jsView file

1823patternName = generic_password severity = medium line = 1823

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/lib/bundler-CsL7hHMq.jsView on unpkg · L1823

bin/version.mjsView file

6L7: import { execFileSync } from "node:child_process"; L8: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

src/server/services/llamafile-manager.tsView file

640console.log( L641: `[Proxy] Shell fallback: /bin/sh -c 'exec "\$0" "\$@"' ${absolutePath} [${args.length} args]`, L642: );

High

Shell

Package source references shell execution.

src/server/services/llamafile-manager.tsView on unpkg · L640

src/components/shadow-claw-file-viewer/iframe-storage-bridge.test.tsView file

26// eslint-disable-next-line no-eval L27: eval(scriptCode); L28: });

High

Eval

Package source references dynamic code evaluation.

src/components/shadow-claw-file-viewer/iframe-storage-bridge.test.tsView on unpkg · L26

src/shell/vm.tsView file

743// Use local v86 module from assets L744: const v86Module = await import(bootConfig.libUrl); L745: if (!isCurrentBoot(bootToken)) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/shell/vm.tsView on unpkg · L743

src/worker/utils/native-eval-executor.tsView file

18TextEncoder, L19: TextDecoder, L20: JSON, ... L28: clearTimeout, L29: data: data ?? "", L30: $PIPE_DATA: data ?? "",

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/worker/utils/native-eval-executor.tsView on unpkg · L18

dist/electron/main.cjsView file

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t,n)=>()=>... L2: `).join(`\r ... L21: public_key TEXT NOT NULL, L22: private_key TEXT NOT NULL, L23: subject TEXT NOT NULL ... L85: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L86: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L87: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L98: `)?

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/electron/main.cjsView on unpkg · L1

dist/server.jsView file

127/*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */ L128: if(!globalThis.DOMException)try{let{MessageChannel:e}=H(`worker_threads`),t=new e().port1,n=new ArrayBuffer;t.postMessage(n,[n,n])}catch(e){e.constructor.name===`DOMException`&&(gl... L129: --`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length... L130: \r ... L138: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L139: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,message:e,at:a,text:c}},u=function(e){return e&&e!==o&&l(

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/server.jsView on unpkg · L127

127Trigger-reachable chain: scripts.start -> dist/server.js L127: /*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */ L128: if(!globalThis.DOMException)try{let{MessageChannel:e}=H(`worker_threads`),t=new e().port1,n=new ArrayBuffer;t.postMessage(n,[n,n])}catch(e){e.constructor.name===`DOMException`&&(gl... L129: --`+e;let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++)t[n]=e.charCodeAt(n),this.boundaryChars[t[n]]=!0;this.boundary=t,this.lookbehind=new Uint8Array(this.boundary.length... L130: \r ... L138: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L139: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server.jsView on unpkg · L127

src/cli/commands/agent.tsView file

91const raw = await readFile(p, "utf8"); L92: const parsed = JSON.parse(raw); L93: if (parsed && typeof parsed === "object") { ... L116: const resolved = await resolveCacheDir({ L117: contentRoot: process.cwd(), L118: cacheDir: options.cacheDir, ... L124: stdin: options.stdin, L125: stdout: options.stdout, L126: }); ... L158: : Boolean( L159: process.env.CI && L160: !["0", "false"].includes(process.env.CI.toLowerCase()),

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L91

dist/cli/chunk-cSDRY3hS.jsView file

28Cross-file remote execution chain: dist/cli/chunk-cSDRY3hS.js spawns dist/cli/chunk-CNTNsToa.js; helper contains network access plus dynamic code execution. L28: Available modules: L29: fs, path, child_process, process, console, L30: os, url, assert, util, events, buffer, stream, ... L43: child_process: L44: execSync(cmd) throws on non-zero exit, returns stdout L45: spawnSync(cmd, args) returns { stdout, stderr, status } ... L49: L50: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L51: EOL, cpus(), endianness() L52: L53: url: URL, URLSearchParams, parse(), format() L54:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-cSDRY3hS.jsView on unpkg · L28

dist/cli/chunk-CvKmsXS0.jsView file

•path = dist/cli/chunk-CvKmsXS0.js kind = oversized_source_file sizeBytes = 6027408 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli/chunk-CvKmsXS0.jsView on unpkg

dist/cli/chunk-DoHbMaWn.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-DoHbMaWn.jsView on unpkg

dist/lib/git-COWGgQY_.jsView file

15651patternName = generic_password severity = medium line = 15651

Medium

Secret Pattern

Hardcoded password in dist/lib/git-COWGgQY_.js

dist/lib/git-COWGgQY_.jsView on unpkg · L15651

src/subsystems/git/git.tsView file

844patternName = generic_password severity = medium line = 844

Medium

Secret Pattern

Hardcoded password in src/subsystems/git/git.ts

src/subsystems/git/git.tsView on unpkg · L844