shadow-claw@1.40.1: Suspicious npm security report (Warn)

Loading npm security reports…

shadow-claw@1.40.1: Suspicious npm security report (Warn) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 1,912 file(s), 41.9 MB of source, external domains: 10.0.0.1, 10.0.0.2, 10.0.0.5, 10.9.8.226, 127.0.0.1, 169.254.169.254, 169.254.170.2, 172.16.0.5, 172.20.0.1, 172.20.0.5, 192.168.1.1, 192.168.1.10, 192.168.1.100, 192.168.1.5, 192.168.1.50, a2ui.org, accounts.google.com, actions.google.com, agent-card.github.io, agent.example.com, ai.google.dev, aiplatform.googleapis.com, allowed.example.com, another.com, any.example.com, api.anthropic.com, api.example.com, api.external.com, api.figma.com, api.github.com, api.hf.co, api.linear.app, api.login.yahoo.com, api.myservice.com, api.nodemailer.com, api.notion.com, api.openai.com, api.telegram.org, api.test, api.test.example, api.weather.com, app.internal, app.vssps.visualstudio.com, attacker.com, attacker.github.io, auth.atlassian.com, auth.example.com, auth.openai.com, bad.example.com, bible-tools.github.io

Oversized source lightweight scan

dist/cli/chunk-CvKmsXS02.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/cli/chunk-DtbwZG_D2.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/headless-agent.js6.96 MB file, sampled 256 KB

FilesystemNetworkWebSocketDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapp.vssps.visualstudio.comauth.atlassian.comdeepwiki.comexample.comgithub.comgitlab.comhuggingface.colinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.comwww.w3.orgxt-ml.github.io

dist/lib/webllm-BwoH9pq3.js6.15 MB file, sampled 256 KB

NetworkHighEntropyStringsUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-BDMz9yZR.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-_JXFm0yh.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/server.js11.7 MB file, sampled 256 KB

FilesystemNetworkDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comhuggingface.cojson-schema.orglinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.com

Source & flagged code

17 flagged

bin/version.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

3/**

4 * @fileoverview CLI runner for version command, delegating to src/cli/tools/version.js.

5 */

7import { execFileSync } from "node:child_process";

8import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

9import { dirname, join } from "node:path";

10import process from "node:process";

11import { fileURLToPath } from "node:url";

13const __dirname = dirname(fileURLToPath(import.meta.url));

14const distTarget = join(__dirname, "../dist/cli/tools/version.js");

16if (!existsSync(distTarget)) {

17 const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";

18 execFileSync(npmCmd, ["run", "-s", "build:cli"], {

19 cwd: join(__dirname, ".."),

20 stdio: "inherit",

21 });

22}

24const { runVersion } = await import("../dist/cli/tools/version.js");

26runVersion().catch((err) => {

dist/cli/chunk-BT1xXZn72.jsView file

Lines 1-40javascript

1import{t as e}from"./chunk-DxIsgrAF.js";import{t}from"./chunk-DFh_pp_7.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-BQCWtrzh.js";import

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View file

1import{t as e}from"./chunk-CKTtKg5g2.js";import t from"process";function n(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:... L2: `);n.register(`data:text/javascript,${encodeURIComponent(e)}`),a.importHooksRegistered=!0}}catch(e){console.debug(`[DefenseInDepthBox] Could not register import() hooks:`,e instanc...

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

dist/cli/chunk-C5PuRV08.jsView file

Lines 1-1javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{existsSync as t}from"node:fs";import n from"node:path";import{pathToFileURL as r}from"node:url";import i

dist/electron/main.cjsView file

84${t} L85: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L86: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L87: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L98: `)?{tag:t,value:``}:{tag:t,value:e}}let c=Object.create(null);for(let e of i)e.trim()===``&&e.includes(` L99: `)||(c[`#text`]=`#text`in c?c[`#text`]+e:e);for(let e of a)e.tag in c?Array.isArray(c[e.tag])?c[e.tag].push(e.value):c[e.tag]=[c[e.tag],e.value]:c[e.tag]=e.value;for(let[e,t]of Obj... L

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L84

84Trigger-reachable chain: manifest.main -> dist/electron/main.cjs L84: ${t} L85: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L86: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L87: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L98: `)?{tag:t,value:``}:{tag:t,value:e}}let c=Object.create(null);for(let e of i)e.trim()===``&&e.includes(` L99: `)||(c[`#text`]=`#text`in c?c[`#text`]+e:e);for(let e of a)e.tag in c?Array.isArray(c[e.tag])?c[e.tag].push(e.value):c[e

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L84

dist/cli/chunk-Bc9nRNyN.jsView file

Lines 1-11javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{C as t,S as n,_ as r,a as i,b as a,d as o,f as s,g as c,h as l,i as u,l

src/cli/commands/agent.tsView file

87!process.stdin.isTTY && L88: Boolean(process.stderr.isTTY || process.stdout.isTTY); L89: const isTTY = ... L98: : Boolean( L99: process.env.CI && L100: !["0", "false"].includes(process.env.CI.toLowerCase()), ... L108: workspaceDir: workspace, L109: contentRoot: process.cwd(), L110: cacheDir: options.cacheDir, ... L132: const defaultConfig = { L133: $schema: "https://json-schema.org/draft/2020-12/schema", L134: site: {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L87

dist/cli/chunk-D57WTK9e2.jsView file

1import{a as e,i as t,t as n}from"./chunk-8V8biNmG.js";import{n as r,t as i}from"./chunk-Drx4e34U.js";import a from"process";import{Buffer as o}from"buffer";import{createWriteStream... L2: `)||n,code:r,status:t},e.data.error)}return Object.assign({message:n,code:r,status:t},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};function i(e,t){switch(e)... ... L9: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L10: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,message:e,at:a,text:c}},u=function(e){return e&&e!==o&&l(`Expected '`+e+`' instead of '`+o+`'`),o=c.charAt(a),a+=1,o},d=fun... L11: /*! safe-buffer. MIT License. Feross A

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-D57WTK9e2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

1import{i as e,n as t,r as n,t as r}from"./rolldown-runtime-aKtaBQYM.js";import{i,n as a,r as o,t as s}from"./txPromise-C2iYogHX.js";import{t as c}from"./getConfig-4saf0Tkq.js";cons... L2: /*! @license DOMPurify 3.4.13 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.13/L... ... L186: L187: `.substring(0,i)+r}function Nd(e){return e!=null&&(typeof e==`string`||e.nodeType&&(e.nodeType===1||e.nodeType===9||e.nodeType===11))}var Pd=Pa(),Fd=Object.create,Id=Object.defineP... L188: ... L978: `,0;let a=Math.max(...n.map(([e])=>typeof e==`number`?e:0))+1+r;if(a<0)return e.state.expansionStderr=(e.state.expansionStderr||``)+`bash: line ${i}: ${t.array}: bad array subscrip... L979: `,0;r=a}let i=`$

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-DC1icYX22.jsView file

28Cross-file remote execution chain: dist/cli/chunk-DC1icYX22.js spawns dist/cli/chunk-BDSNQ5RN2.js; helper contains network access plus dynamic code execution. L28: Available modules: L29: fs, path, child_process, process, console, L30: os, url, assert, util, events, buffer, stream, ... L43: child_process: L44: execSync(cmd) throws on non-zero exit, returns stdout L45: spawnSync(cmd, args) returns { stdout, stderr, status } ... L49: L50: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L51: EOL, cpus(), endianness() L52: L53: url: URL, URLSearchParams, parse(), format() L54:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-DC1icYX22.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12245210 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-BDSNQ5RN2.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-BDSNQ5RN2.js#virtual:normalized:round1View on unpkg

Source & flagged code

17 flagged · loading source

bin/version.mjsView file

6L7: import { execFileSync } from "node:child_process"; L8: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

dist/cli/chunk-BT1xXZn72.jsView file

20`).trim(),n=``,r=t.length===0,i=!1,a=e=>{if(i||!e)return e;let t=e.replace(/^\s*ASSISTANT:\s*/i,``);return t!==e&&(i=!0),t};return{push(e){let i=String(e||``).replace(/\r\n/g,` L21: `);if(r)return a(i);n+=i;let o=n.trimStart();if(t.startsWith(o)&&o.length<t.length)return``;r=!0;let s=n,c=n.trimStart();return c.startsWith(t)&&(s=c.slice(t.length)),n=``,a(s)},fl... L22:

High

Shell

Package source references shell execution.

dist/cli/chunk-BT1xXZn72.jsView on unpkg · L20

1import{t as e}from"./chunk-DxIsgrAF.js";import{t}from"./chunk-DFh_pp_7.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-BQCWtrzh.js";import{c as s,o as c,u as l}from"./ch... L2: `:``)+n),e&&!i&&(i=e.message),r(i)});t&&a.stdin&&(a.stdin.write(t),a.stdin.end())});M(it),globalThis.__headlessBashExecutor=it;function at(e,t,n){let r=t.input_tokens||0,i=t.output... L3: L4: `);i=a.pop()||``;for(let e of a){let t=e.split(` L5: `);for(let e of t)if(!(!e||e.startsWith(`:`))&&e.startsWith(`data: `)){let t=e.slice(6).trim();if(t===`[DONE]`)continue;try{yield JSON.parse(t)}catch{}}}}}finally{n.releaseLock()}}... L6: `)].join(` ... L15: L16: `)}const hn=Re(import.meta.url),gn=z.dirname(hn),_n=Fe(import.meta.url),vn=`.llamafile`,yn=parseInt(H.env.LLAMAFILE_CTX_SIZE||`8192`,10),bn=new Set(

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli/chunk-BT1xXZn72.jsView on unpkg · L1

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View file

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

dist/cli/chunk-C5PuRV08.jsView file

1import{t as e}from"./chunk-uAI_Zi6n.js";import{existsSync as t}from"node:fs";import n from"node:path";import{pathToFileURL as r}from"node:url";import i from"node:process";const a=e...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/chunk-C5PuRV08.jsView on unpkg · L1

dist/electron/main.cjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L84

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L84

dist/cli/chunk-Bc9nRNyN.jsView file

1import{t as e}from"./chunk-uAI_Zi6n.js";import{C as t,S as n,_ as r,a as i,b as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,o as p,p as m,r as h,x as g,y as ee}from"./chunk-... L2: globstar while`,e,d,t,f,p),this.matchOne(e.slice(d),t.slice(f),n))return this.debug(`globstar found match!`,d,s,p),!0;if(p===`.`||p===`..`||!r.dot&&p.charAt(0)===`.`){this.debug(`d... L3: >>> no match, partial?`,e,d,t,f),d===s))}let i;if(typeof l==`string`?(i=u===l,this.debug(`string match`,l,u,i)):(i=l.test(u),this.debug(`pattern match`,l,u,i)),!i)return!1}if(a===s... L4: `+e.slice(n)}const oo=[`pages/resources/`,`pages/deps/`,`resources/`,`deps/`,`pages/assets/`,`pages/main/assets/`];function so(e){for(let t of oo)if(e.startsWith(t))return e.slice(...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli/chunk-Bc9nRNyN.jsView on unpkg · L1

src/cli/commands/agent.tsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L87

dist/cli/chunk-D57WTK9e2.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-D57WTK9e2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-DC1icYX22.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-DC1icYX22.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12245210 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-BDSNQ5RN2.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-BDSNQ5RN2.js#virtual:normalized:round1View on unpkg

Source & flagged code

17 flagged

bin/version.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

3/**

4 * @fileoverview CLI runner for version command, delegating to src/cli/tools/version.js.

5 */

7import { execFileSync } from "node:child_process";

8import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

9import { dirname, join } from "node:path";

10import process from "node:process";

11import { fileURLToPath } from "node:url";

13const __dirname = dirname(fileURLToPath(import.meta.url));

14const distTarget = join(__dirname, "../dist/cli/tools/version.js");

16if (!existsSync(distTarget)) {

17 const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";

18 execFileSync(npmCmd, ["run", "-s", "build:cli"], {

19 cwd: join(__dirname, ".."),

20 stdio: "inherit",

21 });

22}

24const { runVersion } = await import("../dist/cli/tools/version.js");

26runVersion().catch((err) => {

dist/cli/chunk-BT1xXZn72.jsView file

Lines 1-40javascript

1import{t as e}from"./chunk-DxIsgrAF.js";import{t}from"./chunk-DFh_pp_7.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-BQCWtrzh.js";import

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View file

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

dist/cli/chunk-C5PuRV08.jsView file

Lines 1-1javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{existsSync as t}from"node:fs";import n from"node:path";import{pathToFileURL as r}from"node:url";import i

dist/electron/main.cjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L84

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L84

dist/cli/chunk-Bc9nRNyN.jsView file

Lines 1-11javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{C as t,S as n,_ as r,a as i,b as a,d as o,f as s,g as c,h as l,i as u,l

src/cli/commands/agent.tsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L87

dist/cli/chunk-D57WTK9e2.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-D57WTK9e2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-DC1icYX22.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-DC1icYX22.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12245210 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-BDSNQ5RN2.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-BDSNQ5RN2.js#virtual:normalized:round1View on unpkg

shadow-claw@1.40.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code