shadow-claw@1.46.0: Manual Review npm security report (Allow)

Loading npm security reports…

shadow-claw@1.46.0: Manual Review npm security report (Allow) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 1,931 file(s), 42.3 MB of source, external domains: 10.0.0.1, 10.0.0.2, 10.0.0.5, 10.9.8.226, 127.0.0.1, 169.254.169.254, 169.254.170.2, 172.16.0.5, 172.20.0.1, 172.20.0.5, 192.168.1.1, 192.168.1.10, 192.168.1.100, 192.168.1.5, 192.168.1.50, a2ui.org, accounts.google.com, actions.google.com, agent-card.github.io, agent.example.com, ai.google.dev, aiplatform.googleapis.com, allowed.example.com, another.com, any.example.com, api.anthropic.com, api.example.com, api.external.com, api.figma.com, api.github.com, api.hf.co, api.linear.app, api.login.yahoo.com, api.myservice.com, api.nodemailer.com, api.notion.com, api.openai.com, api.telegram.org, api.test, api.test.example, api.weather.com, app.internal, app.vssps.visualstudio.com, attacker.com, attacker.github.io, auth.atlassian.com, auth.example.com, auth.openai.com, bad.example.com, bible-tools.github.io

Oversized source lightweight scan

dist/cli/chunk-D0UlHLhC2.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/cli/chunk-DtbwZG_D2.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/headless-agent.js6.97 MB file, sampled 256 KB

FilesystemNetworkWebSocketDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapp.vssps.visualstudio.comauth.atlassian.comdeepwiki.comexample.comgithub.comgitlab.comhuggingface.colinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.comwww.w3.orgxt-ml.github.io

dist/lib/webllm-BwoH9pq3.js6.15 MB file, sampled 256 KB

NetworkHighEntropyStringsUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-BDMz9yZR.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-_JXFm0yh.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/server.js11.7 MB file, sampled 256 KB

FilesystemNetworkDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comhuggingface.cojson-schema.orglinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.com

Source & flagged code

17 flagged

bin/version.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

3/**

4 * @fileoverview CLI runner for version command, delegating to src/cli/tools/version.js.

5 */

7import { execFileSync } from "node:child_process";

8import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

9import { dirname, join } from "node:path";

10import process from "node:process";

11import { fileURLToPath } from "node:url";

13const __dirname = dirname(fileURLToPath(import.meta.url));

14const distTarget = join(__dirname, "../dist/cli/tools/version.js");

16if (!existsSync(distTarget)) {

17 const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";

18 execFileSync(npmCmd, ["run", "-s", "build:cli"], {

19 cwd: join(__dirname, ".."),

20 stdio: "inherit",

21 });

22}

24const { runVersion } = await import("../dist/cli/tools/version.js");

26runVersion().catch((err) => {

dist/cli/chunk-BupK8fLP2.jsView file

Lines 1-40javascript

1import{t as e}from"./chunk-DxIsgrAF.js";import{t}from"./chunk-4s88KT_r.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-BQCWtrzh.js";import

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View file

1import{t as e}from"./chunk-CKTtKg5g2.js";import t from"process";function n(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:... L2: `);n.register(`data:text/javascript,${encodeURIComponent(e)}`),a.importHooksRegistered=!0}}catch(e){console.debug(`[DefenseInDepthBox] Could not register import() hooks:`,e instanc...

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

src/worker/utils/native-eval-executor.tsView file

Lines 1-38typescript

1import { runInNewContext } from "node:vm";

2import type { HeadlessEvalExecutor } from "./sandboxedEval.js";

3import { setHeadlessEvalExecutor } from "./sandboxedEval.js";

5/**

dist/electron/main.cjsView file

87${t} L88: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L89: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L90: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L101: `)?{tag:t,value:``}:{tag:t,value:e}}let c=Object.create(null);for(let e of i)e.trim()===``&&e.includes(` L102: `)||(c[`#text`]=`#text`in c?c[`#text`]+e:e);for(let e of a)e.tag in c?Array.isArray(c[e.tag])?c[e.tag].push(e.value):c[e.tag]=[c[e.tag],e.value]:c[e.tag]=e.value;for(let[e,t]of Obj...

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L87

87Trigger-reachable chain: manifest.main -> dist/electron/main.cjs L87: ${t} L88: ${r(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L89: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=new Date,signingRegion:n,signingService:r,... L90: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L101: `)?{tag:t,value:``}:{tag:t,value:e}}let c=Object.create(null);for(let e of i)e.trim()===``&&e.includes(` L102: `)||(c[`#text`]=`#text`in c?c[`#text`]+e:e);for(let e of a)e.tag in c?Array.isArray(c[e.tag])?c[e.tag].push(e.value):c

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L87

dist/cli/chunk-OXLHz5Jg.jsView file

Lines 1-18javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{C as t,S as n,_ as r,a as i,b as a,d as o,f as s,g as c,h as l,i as u,l

src/cli/commands/agent.tsView file

92!process.stdin.isTTY && L93: Boolean(process.stderr.isTTY || process.stdout.isTTY); L94: const isTTY = ... L103: : Boolean( L104: process.env.CI && L105: !["0", "false"].includes(process.env.CI.toLowerCase()), ... L113: workspaceDir: workspace, L114: contentRoot: process.cwd(), L115: cacheDir: options.cacheDir, ... L137: const defaultConfig = { L138: $schema: "https://json-schema.org/draft/2020-12/schema", L139: site: {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L92

dist/cli/chunk-By9miObI2.jsView file

1import{a as e,i as t,t as n}from"./chunk-8V8biNmG.js";import{n as r,t as i}from"./chunk-Drx4e34U2.js";import a from"process";import{Buffer as o}from"buffer";import{createWriteStrea... L2: `)||n,code:r,status:t},e.data.error)}return Object.assign({message:n,code:r,status:t},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};function i(e,t){switch(e)... ... L9: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L10: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,message:e,at:a,text:c}},u=function(e){return e&&e!==o&&l(`Expected '`+e+`' instead of '`+o+`'`),o=c.charAt(a),a+=1,o},d=fun... L11: /*! safe-buffer. MIT License. Feross A

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-By9miObI2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

1import{i as e,n as t,r as n,t as r}from"./rolldown-runtime-aKtaBQYM.js";import{i,n as a,r as o,t as s}from"./txPromise-C2iYogHX.js";import{t as c}from"./getConfig-4saf0Tkq.js";cons... L2: /*! @license DOMPurify 3.4.13 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.13/L... ... L186: L187: `.substring(0,i)+r}function Rd(e){return e!=null&&(typeof e==`string`||e.nodeType&&(e.nodeType===1||e.nodeType===9||e.nodeType===11))}var zd=za(),Bd=Object.create,Vd=Object.defineP... L188: ... L978: `,0;let a=Math.max(...n.map(([e])=>typeof e==`number`?e:0))+1+r;if(a<0)return e.state.expansionStderr=(e.state.expansionStderr||``)+`bash: line ${i}: ${t.array}: bad array subscrip... L979: `,0;r=a}let i=`$

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-DAfYkSQ12.jsView file

28Cross-file remote execution chain: dist/cli/chunk-DAfYkSQ12.js spawns dist/cli/chunk-BDSNQ5RN2.js; helper contains network access plus dynamic code execution. L28: Available modules: L29: fs, path, child_process, process, console, L30: os, url, assert, util, events, buffer, stream, ... L43: child_process: L44: execSync(cmd) throws on non-zero exit, returns stdout L45: spawnSync(cmd, args) returns { stdout, stderr, status } ... L49: L50: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L51: EOL, cpus(), endianness() L52: L53: url: URL, URLSearchParams, parse(), format() L54:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-DAfYkSQ12.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12263383 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-B2vnlJ9A.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-B2vnlJ9A.jsView on unpkg

Source & flagged code

17 flagged · loading source

bin/version.mjsView file

6L7: import { execFileSync } from "node:child_process"; L8: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

dist/cli/chunk-BupK8fLP2.jsView file

20`).trim(),n=``,r=t.length===0,i=!1,a=e=>{if(i||!e)return e;let t=e.replace(/^\s*ASSISTANT:\s*/i,``);return t!==e&&(i=!0),t};return{push(e){let i=String(e||``).replace(/\r\n/g,` L21: `);if(r)return a(i);n+=i;let o=n.trimStart();if(t.startsWith(o)&&o.length<t.length)return``;r=!0;let s=n,c=n.trimStart();return c.startsWith(t)&&(s=c.slice(t.length)),n=``,a(s)},fl... L22:

High

Shell

Package source references shell execution.

dist/cli/chunk-BupK8fLP2.jsView on unpkg · L20

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View file

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

src/worker/utils/native-eval-executor.tsView file

18TextEncoder, L19: TextDecoder, L20: JSON, ... L28: clearTimeout, L29: data: data ?? "", L30: $PIPE_DATA: data ?? "",

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/worker/utils/native-eval-executor.tsView on unpkg · L18

dist/electron/main.cjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L87

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L87

dist/cli/chunk-OXLHz5Jg.jsView file

1import{t as e}from"./chunk-uAI_Zi6n.js";import{C as t,S as n,_ as r,a as i,b as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,o as p,p as m,r as h,t as g,w as _,x as v,y}from"... L2: globstar while`,e,d,t,f,p),this.matchOne(e.slice(d),t.slice(f),n))return this.debug(`globstar found match!`,d,s,p),!0;if(p===`.`||p===`..`||!r.dot&&p.charAt(0)===`.`){this.debug(`d... L3: >>> no match, partial?`,e,d,t,f),d===s))}let i;if(typeof l==`string`?(i=u===l,this.debug(`string match`,l,u,i)):(i=l.test(u),this.debug(`pattern match`,l,u,i)),!i)return!1}if(a===s... L4: <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli/chunk-OXLHz5Jg.jsView on unpkg · L1

src/cli/commands/agent.tsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L92

dist/cli/chunk-By9miObI2.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-By9miObI2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-DAfYkSQ12.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-DAfYkSQ12.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12263383 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-B2vnlJ9A.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-B2vnlJ9A.jsView on unpkg

Source & flagged code

17 flagged

bin/version.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

3/**

4 * @fileoverview CLI runner for version command, delegating to src/cli/tools/version.js.

5 */

7import { execFileSync } from "node:child_process";

8import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

9import { dirname, join } from "node:path";

10import process from "node:process";

11import { fileURLToPath } from "node:url";

13const __dirname = dirname(fileURLToPath(import.meta.url));

14const distTarget = join(__dirname, "../dist/cli/tools/version.js");

16if (!existsSync(distTarget)) {

17 const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";

18 execFileSync(npmCmd, ["run", "-s", "build:cli"], {

19 cwd: join(__dirname, ".."),

20 stdio: "inherit",

21 });

22}

24const { runVersion } = await import("../dist/cli/tools/version.js");

26runVersion().catch((err) => {

dist/cli/chunk-BupK8fLP2.jsView file

Lines 1-40javascript

1import{t as e}from"./chunk-DxIsgrAF.js";import{t}from"./chunk-4s88KT_r.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-BQCWtrzh.js";import

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View file

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/chunk-BDSNQ5RN2.js#virtual:string-array:round1View on unpkg · L1

src/worker/utils/native-eval-executor.tsView file

Lines 1-38typescript

1import { runInNewContext } from "node:vm";

2import type { HeadlessEvalExecutor } from "./sandboxedEval.js";

3import { setHeadlessEvalExecutor } from "./sandboxedEval.js";

5/**

dist/electron/main.cjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L87

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L87

dist/cli/chunk-OXLHz5Jg.jsView file

Lines 1-18javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{C as t,S as n,_ as r,a as i,b as a,d as o,f as s,g as c,h as l,i as u,l

src/cli/commands/agent.tsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L92

dist/cli/chunk-By9miObI2.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-By9miObI2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-DAfYkSQ12.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-DAfYkSQ12.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12263383 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-B2vnlJ9A.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 21

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-B2vnlJ9A.jsView on unpkg

shadow-claw@1.46.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code