shadow-claw@1.49.0: Manual Review npm security report (Allow)

Loading npm security reports…

shadow-claw@1.49.0: Manual Review npm security report (Allow) | LPM Firewall

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 1,943 file(s), 44.7 MB of source, external domains: 10.0.0.1, 10.0.0.2, 10.0.0.5, 10.9.8.226, 127.0.0.1, 169.254.169.254, 169.254.170.2, 172.16.0.5, 172.20.0.1, 172.20.0.5, 192.168.1.1, 192.168.1.10, 192.168.1.100, 192.168.1.5, 192.168.1.50, a2ui.org, accounts.google.com, actions.google.com, ae.api.openai.com, agent-card.github.io, agent.example.com, ai.google.dev, aiplatform.googleapis.com, allowed.example.com, another.com, any.example.com, api.anthropic.com, api.example.com, api.external.com, api.figma.com, api.github.com, api.hf.co, api.linear.app, api.login.yahoo.com, api.myservice.com, api.nodemailer.com, api.notion.com, api.openai.com, api.telegram.org, api.test, api.test.example, api.weather.com, app.internal, app.vssps.visualstudio.com, attacker.com, attacker.github.io, auth.atlassian.com, auth.example.com, auth.openai.com, bad.example.com

Oversized source lightweight scan

dist/cli/chunk-BM8q9kx8.js5.74 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/cli/chunk-m59jzvxR.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/headless-agent.js7.24 MB file, sampled 256 KB

FilesystemNetworkWebSocketDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapp.vssps.visualstudio.comauth.atlassian.comdeepwiki.comexample.comgithub.comgitlab.comhuggingface.colinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.comwww.w3.orgxt-ml.github.io

dist/lib/webllm-B1HzRy_S.js6.16 MB file, sampled 256 KB

NetworkHighEntropyStringsUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-BHNjOhwY.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/public/webllm-DmZ8TVhC.js5.75 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringshuggingface.coraw.githubusercontent.comwebgpureport.org

dist/server.js11.8 MB file, sampled 256 KB

FilesystemNetworkDynamicRequireHighEntropyStringsMinifiedUrlStringsaccounts.google.comapi.figma.comapi.linear.appapi.login.yahoo.comapi.notion.comapi.telegram.orgapp.vssps.visualstudio.comauth.atlassian.comcdn.jsdelivr.netcdnjs.cloudflare.comexample.comfonts.googleapis.comfonts.gstatic.comgithub.comgitlab.comhuggingface.cojson-schema.orglinear.applogin.microsoftonline.comoauth2.googleapis.comopenrouter.airouter.huggingface.coslack.comwww.figma.com

Source & flagged code

18 flagged

bin/version.mjsView file

6L7: import { execFileSync } from "node:child_process"; L8: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

dist/cli/chunk-C497uyLU.jsView file

Lines 1-40javascript

1import{t as e}from"./chunk-BChOKoxf.js";import{t}from"./chunk-gAdqVxWq.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-Cpdoq2Nw.js";import{c as s,o as c,u as l}from"./chunk-DW669wmz.js";import{_ as u,b as d,g as f,l as p,r as m,s as h,y as g}from"./chunk-BmrxLZJc.js";import{i as _,n as v,r as y}from"./chunk-D-kV2FND.js";import{n as b,t as x}from"./chunk-DjKQO7aV.js";import{t as S}from"./chunk-CcMGBEzH.js";import{t as C}from"./chunk-Dg3-wX3i.js";import{A as w,B as T,C as E,D as ee,E as te,F as D,G as O,H as k,I as A,J as ne,K as re,L as j,M,N as ie,O as ae,P as oe,R as N,S as se,T as ...

2`:``)+n),e&&!i&&(i=e.message),r(i)});t&&a.stdin&&(a.stdin.write(t),a.stdin.end())});j(ct),globalThis.__headlessBashExecutor=ct;function lt(e,t,n){let r=t.input_tokens||0,i=t.output_tokens||0,a=t.cache_read_input_tokens||0,o=t.cache_creation_input_tokens||0;return{type:`token-usage`,payload:{groupId:e,inputTokens:r,outputTokens:i,cacheReadTokens:a,cacheCreationTokens:o,totalTokens:r+i+a+o,contextLimit:n}}}function W(e,t,n,r){N(F(e,t,n,r))}async function*ut(e,t){let n=e.getReader(),r=new TextDecoder,i=``;try{for(;!t?.aborted;){let{done:e,value:t}=await n.read();if(e)break;i+=r.decode(t,{stream:! ...

4`);i=a.pop()||``;for(let e of a){let t=e.split(`

5`);for(let e of t)if(e&&!e.startsWith(`:`)&&e.startsWith(`data: `)){let t=e.slice(6).trim();if(t===`[DONE]`)continue;try{yield JSON.parse(t)}catch{}}}}}finally{n.releaseLock()}}const dt=6e4,ft=/* @__PURE__ */ new Map;function pt(e){let t=ft.get(e);if(t)return t;let n={recentCalls:[],nextAllowedAt:0,remoteLimit:null,remoteRemaining:null,remoteResetAt:null};return ft.set(e,n),n}function G(){return Date.now()}function mt(e){if(!e)return null;let t=Number(e.trim());return Number.isFinite(t)?t:null}function ht(e){if(!e)return null;let t=e.trim(),n=Number(t);if(Number.isFinite(n))return n<=0?null:Ma ...

6`)].join(`

7`);i=i?i+e:e}i&&r.push({role:`system`,content:i});let a=[];for(let e of t)if(e.role===`user`){let t=Array.isArray(e.content)?e.content.map(e=>e?.type===`text`?e.text:e?.type===`tool_result`?`[TOOL_RESULT ${e.tool_use_id}] ${String(e.content||``)}`:``).filter(Boolean).join(`

8`):String(e.content||``);t&&a.push(t)}else e.role;return{preface:r,turns:a}}async function Nt(e,t,n,r,i,a,o,s,c,l){if(!wt()){await a({type:`response`,payload:{groupId:t,text:`⚠️ LiteRT-LM requires WebGPU and WebAssembly.Suspending. These are not both available in this browser.`}});return}await a(F(t,`info`,`Starting`,`Provider: LiteRT-LM (Browser · WebGPU) · Model: ${s}`)),await a({type:`model-download-progress`,payload:{groupId:t,status:`running`,progress:0,message:`Loading LiteRT-LM model: ${s}…`}});let u=e=>(e/1048576).toFixed(0),d=-1,f=(e,n,r)=>{let i=n?e/n:null,o=i==null?-1:Math.floor(i*1 ...

9`);else{let e=g[g.length-1]??``;b=[...i,``,`Based on the above tool results, please respond to the original request.`,e?`Original request: "${e}"`:``].filter(Boolean).join(`

10`)}continue}let i;i=r?.type===`response`&&r.response?I(r.response,`litert_lm`):I(n,`litert_lm`),await a({type:`streaming-done`,payload:{groupId:t,text:i}}),await a({type:`response`,payload:{groupId:t,text:i}});return}await a({type:`response`,payload:{groupId:t,text:`⚠️ LiteRT-LM reached the maximum number of tool-calling iterations without producing a final response.`}})}const Pt=new class{chunkCallbacks=/* @__PURE__ */ new Map;loadRejects=/* @__PURE__ */ new Map;loadResolves=/* @__PURE__ */ new Map;pendingRejects=/* @__PURE__ */ new Map;pendingResolves=/* @__PURE__ */ new Map;progressCallback ...

11`):``}function It(e){let t=I(String(e||``),`transformers_js`).trim();if(!t)return null;let n=t.match(/<tool_call>([\s\S]*?)<\/tool_call>/);if(n)try{let e=JSON.parse(n[1]);if(e.name)return{type:`tool_use`,tool_calls:[{name:e.name,input:e.arguments||e.parameters||{}}]}}catch{}try{return JSON.parse(t)}catch{let e=t.indexOf(`{`),n=t.lastIndexOf(`}`);if(e>=0&&n>e)try{return JSON.parse(t.slice(e,n+1))}catch{return null}return null}}async function Lt(e,t,n,r,i,a,o,s,c,l){let u=s||[],d=await S(e,m.TRANSFORMERS_JS_BACKEND)||`auto`,f=await S(e,m.TRANSFORMERS_JS_DTYPE_STRATEGY)||`auto`;await a(F(t,`info` ...

12`).trim():JSON.stringify(e.content).trim()).filter(Boolean);return t.length===0?``:t.join(`

14`).slice(0,1e4)}function Kt(e){let t=e.trim();return t?`Tool result:\n${t}`:``}let qt=null;function Jt(e){qt=e}let Yt=null;function Xt(e){Yt=e}async function Zt(t,n,r){let{apiKey:o,assistantName:s,contextCompression:c=!1,contextLimit:u,enabledTools:f,groupId:p,isScheduledTask:m=!1,maxIterations:h,maxTokens:g,memory:_,messages:v,model:y,provider:b,providerHeaders:x={},providerRuntimeOverrides:S,reasoning:C,rateLimitAutoAdapt:T=!0,rateLimitCallsPerMinute:E=0,storageHandle:D,streaming:O=!1,subagentModelSelectionMode:A,subagentMaxTokens:re,subagentPinnedModel:j,subagentPinnedProvider:M,systemPromp ...

16`)}const Sn=He(import.meta.url),Cn=B.dirname(Sn),wn=Re(import.meta.url),Tn=`.llamafile`,En=parseInt(process.env.LLAMAFILE_CTX_SIZE||`8192`,10),Dn=/* @__PURE__ */ new Set([`localhost`,`127.0.0.1`,`::1`]),On=/* @__PURE__ */ new Set;function kn(e,t){if(!(e.exitCode!==null||e.signalCode!==null||e.killed)){if(process.platform===`win32`){if(typeof e.pid==`number`)try{let t=wn("node:child_process");typeof t.execFileSync==`function`&&t.execFileSync(`taskkill`,[`/PID`,String(e.pid),`/T`,`/F`],{stdio:`ignore`,windowsHide:!0})}catch{}}else try{if(typeof e.pid==`

17`)}function Bn(e){let t=Array.isArray(e.messages)?e.messages:[];if(t.length===0)return``;let n=[];for(let e of t){if(!e||typeof e!=`object`)continue;let t=e,r=typeof t.role==`string`&&t.role.trim()?t.role.trim().toUpperCase():`USER`,i=zn(t.content).trim();i&&n.push(`${r}: ${i}`)}return n.length===0?``:(n.push(`ASSISTANT:`),n.join(`

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli/chunk-C497uyLU.jsView on unpkg · L1

19`))}function Vn(e){let t=String(e||``).replace(/\r\n/g,`

20`).trim(),n=``,r=t.length===0,i=!1,a=e=>{if(i||!e)return e;let t=e.replace(/^\s*ASSISTANT:\s*/i,``);return t!==e&&(i=!0),t};return{push(e){let i=String(e||``).replace(/\r\n/g,`

21`);if(r)return a(i);n+=i;let o=n.trimStart();if(t.startsWith(o)&&o.length<t.length)return``;r=!0;let s=n,c=n.trimStart();return c.startsWith(t)&&(s=c.slice(t.length)),n=``,a(s)},flush(){if(r)return``;r=!0;let e=a(n);return n=``,e}}}function Hn(e){let t=e.replace(/<\s*turn\|>\s*|<\|end_of_turn\|>|<\|eot_id\|>/gi,``).trim(),n=t.match(/^call\s*:\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*\{([\s\S]*)\}\s*$/);if(n?.[1])return{name:n[1],input:nn(n[2]?.trim()||``)};let r=t.match(/^<\s*execute_tool\s*>

High

Shell

Package source references shell execution.

dist/cli/chunk-C497uyLU.jsView on unpkg · L20

23`),t.end(),e();return}let r=T.flush();x+=r;let i=Hn(x.trim());i?(bn(t,s.model,i),xn(t,s.model,`tool_calls`),t.end(),e()):(r&&!C&&!t.writableEnded&&yn(t,s.model,r),xn(t,s.model),t.end(),e())}),_.on(`error`,n=>{if(S=!0,D(),k(),E(),C){e();return}let r=`Child process error: ${n instanceof Error?n.message:String(n)}`;t.headersSent?(t.write(`data: ${JSON.stringify({error:{type:`server_error`,message:r}})}

25`),t.end(),e()):(t.status(500).json({error:`Failed to execute llamafile: ${r}`}),e())})):(_.stdout.on(`data`,e=>{b+=e.toString(`utf8`),x+=T.push(e.toString(`utf8`))}),_.stderr.on(`data`,e=>{y+=e.toString(`utf8`)}),_.on(`close`,n=>{if(D(),k(),E(),C){e();return}if(n!==0){let r=y.trim()||`llamafile exited with status ${n}`;t.status(500).json({error:r}),e();return}x+=T.flush();let r=x.trim(),i=Hn(r);t.json({id:`chatcmpl-llamafile-${Date.now()}`,object:`chat.completion`,created:Math.floor(Date.now()/1e3),model:s.model,choices:[{index:0,message:i?{role:`assistant`,content:null,tool_calls:[{id:`call_ ...

26`);for(let e of t){let t=e.trim();if(!t||!t.startsWith(`data:`))continue;let n=t.slice(5).trim();if(n!==`[DONE]`)try{let e=JSON.parse(n);e.error?.message&&(g=e.error.message);let t=e.choices?.[0]?.delta;t?.content&&(h+=t.content,o?.(t.content)),Array.isArray(t?.tool_calls)&&_.push(...t.tool_calls);let r=e.choices?.[0]?.finish_reason;r&&(v=r)}catch{}}return!0},end(){if(b)return;if(b=!0,this.writableEnded=!0,g){r(Error(g));return}let i={role:`assistant`,content:h};_.length>0&&(i.tool_calls=_),t({id:`chatcmpl-${e()}`,object:`chat.completion`,created:Math.floor(Date.now()/1e3),model:n,choices:[{in ...

27 "use strict";

28 ${e}

29 })()`;return{ok:!0,value:await Promise.race([tt(a,i,{timeout:t}),new Promise((e,n)=>setTimeout(()=>n(/* @__PURE__ */ Error(`Execution timed out after ${t/1e3}s`)),t))])}}catch(e){return{ok:!1,error:e&&e.message?e.message:String(e)}}};ie(qn),globalThis.__headlessEvalExecutor=qn;const Jn=()=>new t({transport:`webrtc`});A(Jn),globalThis.__peerClientFactory=Jn;async function Yn(e,t,n,r={}){let i=[],a=[];for(let o of n)try{r.onStep?.(o);let s=Xn(o.input||{},a,n),c=await z(e,o.name,s,t,{isScheduledTask:!r.isManual,isTaskExecution:r.isTaskExecution});a.push(c),o.suppressOutput||i.push(`**Tool \`$ ...

30`):e&&typeof e==`object`?e:e??``}let Q=null,Qn=null;const $=(e,t,n,r)=>{try{e.exec(`ALTER TABLE ${t} ADD COLUMN ${n} ${r}`)}catch{}};function $n(e=`database/agent.db`){let t=e===`:memory:`?e:B.resolve(e);if(Q&&Qn===t)return Q;er();let n=new nt(e);return n.exec(`

31 CREATE TABLE IF NOT EXISTS messages (

32 id TEXT PRIMARY KEY,

33 groupId TEXT NOT NULL,

34 timestamp INTEGER NOT NULL,

35 content TEXT NOT NULL,

36 sender TEXT NOT NULL,

37 channel TEXT NOT NULL DEFAULT 'chat',

38 isFromMe INTEGER NOT NULL DEFAULT 0,

39 isTrigger INTEGER NOT NULL DEFAULT 0,

40 attachments TEXT,

Long lines were clipped for display.

dist/cli/chunk-BU-vs0np.js#virtual:string-array:round1View file

1import{t as e}from"./chunk-mjuZTMQB.js";import t from"process";function n(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`... L2: `);n.register(`data:text/javascript,${encodeURIComponent(e)}`),a.importHooksRegistered=!0}}catch(e){console.debug(`[DefenseInDepthBox] Could not register import() hooks:`,e instanc...

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BU-vs0np.js#virtual:string-array:round1View on unpkg · L1

dist/cli/chunk-DKmoa1-u.jsView file

Lines 1-1javascript

1import{t as e}from"./chunk-uAI_Zi6n.js";import{existsSync as t}from"node:fs";import n from"node:path";import{pathToFileURL as r}from"node:url";import i

dist/electron/main.cjsView file

99${t} L100: ${i(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L101: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=/* @__PURE__ */ new Date,signingRegion:n,s... L102: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L113: `)?{tag:t,value:``}:{tag:t,value:e}}let c={};for(let e of i)e.trim()===``&&e.includes(` L114: `)||(c[`#text`]=`#text`in c?c[`#text`]+e:e);for(let e of a)e.tag===`__proto__`&&l(c),e.tag in c?Array.isArray(c[e.tag])?c[e.tag].push(e.value):c[e.tag]=[c[e.tag],e.value]:c[e.tag]=... L115: Multipl

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L99

99Trigger-reachable chain: manifest.main -> dist/electron/main.cjs L99: ${t} L100: ${i(s)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let n of e.split(`/`))n?.length!==0&&n!==`.`&&(n===`..`?t.pop():t.push(n));let n=`${e?.startsWith(`/`)?`/`:`... L101: `);return this.signString(h,{signingDate:n,signingRegion:c,signingService:o,eventStreamCredentials:s})}async signMessage(e,{signingDate:t=/* @__PURE__ */ new Date,signingRegion:n,s... L102: See https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html ... L113: `)?{tag:t,value:``}:{tag:t,value:e}}let c={};for(let e of i)e.trim()===``&&e.includes(` L114: `)||(c[`#text`]=`#text`in c?c[`#text`]+e:e);for(let e of a)e.tag===`__proto__`&&l(c),e.tag in c?Array.isArray(c[e.tag])?c[e.tag].pus

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L99

dist/cli/chunk-C2wXTI2R.jsView file

Lines 1-19javascript

1import{i as e,n as t,t as n}from"./chunk-CwYF3Rm8.js";import{n as r,t as i}from"./chunk-DpWnkQpI.js";function a(e,t,n

src/cli/commands/agent.tsView file

98!process.stdin.isTTY && L99: Boolean(process.stderr.isTTY || process.stdout.isTTY); L100: const isTTY = ... L109: : Boolean( L110: process.env.CI && L111: !["0", "false"].includes(process.env.CI.toLowerCase()), ... L119: workspaceDir: workspace, L120: contentRoot: process.cwd(), L121: cacheDir: options.cacheDir, ... L143: const defaultConfig = { L144: $schema: "https://json-schema.org/draft/2020-12/schema", L145: site: {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L98

dist/cli/chunk-DxC9rzb2.jsView file

1import{i as e,o as t,t as n}from"./chunk-B--rR4-3.js";import{n as r,t as i}from"./chunk-DpWnkQpI.js";import a from"process";import{Buffer as o}from"buffer";import{createWriteStream... L2: `)||n,code:r,status:t},e.data.error)}return Object.assign({message:n,code:r,status:t},e.data.error)}}return{message:n,code:e.status,status:e.statusText}}};function i(e,t){switch(e)... ... L9: `+f+`}`:`{`+p.join(`,`)+`}`,t=f,u}}typeof r.stringify!=`function`&&(r.stringify=function(e,n,r){var a;if(t=``,i=``,typeof r==`number`)for(a=0;a<r;a+=1)i+=` `;else typeof r==`string... L10: `,r:`\r`,t:` `},c,l=function(e){throw{name:`SyntaxError`,message:e,at:a,text:c}},u=function(e){return e&&e!==o&&l(`Expected '`+e+`' instead of '`+o+`'`),o=c.charAt(a),a+=1,o},d=fun... L11: /*! safe-buffer. MIT License. Feross A

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-DxC9rzb2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

1import{i as e,n as t,r as n,t as r}from"./rolldown-runtime-DBVvNlSN.js";import{i,n as a,r as o,t as s}from"./txPromise-DlzJBj9N.js";import{t as c}from"./getConfig-DSieAlsi.js";cons... L2: /*! @license DOMPurify 3.4.16 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.16/L... ... L238: L239: `.substring(0,i)+r}function Jd(e){return e!=null&&(typeof e==`string`||e.nodeType&&(e.nodeType===1||e.nodeType===9||e.nodeType===11))}var Yd=Ya(),Xd=Object.create,Zd=Object.defineP... L240: ... L1032: `,0;let a=Math.max(...n.map(([e])=>typeof e==`number`?e:0))+1+r;if(a<0)return e.state.expansionStderr=(e.state.expansionStderr||``)+`bash: line ${i}: ${t.array}: bad array subscrip... L1033: `,0;r=a}let i=

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-BmlqXKZq.jsView file

28Cross-file remote execution chain: dist/cli/chunk-BmlqXKZq.js spawns dist/cli/chunk-BU-vs0np.js; helper contains network access plus dynamic code execution. L28: Available modules: L29: fs, path, child_process, process, console, L30: os, url, assert, util, events, buffer, stream, ... L43: child_process: L44: execSync(cmd) throws on non-zero exit, returns stdout L45: spawnSync(cmd, args) returns { stdout, stderr, status } ... L49: L50: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L51: EOL, cpus(), endianness() L52: L53: url: URL, URLSearchParams, parse(), format() L54:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-BmlqXKZq.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12409305 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-B9hwXAdM.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 24

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-B9hwXAdM.js#virtual:string-array:round1View on unpkg

dist/cli/chunk-48riq6i6.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = shadow-claw@1.42.3 matchedIdentity = npm:c2hhZG93LWNsYXc:1.42.3 similarity = 0.392 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/chunk-48riq6i6.jsView on unpkg

Source & flagged code

18 flagged · loading source

bin/version.mjsView file

6L7: import { execFileSync } from "node:child_process"; L8: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/version.mjsView on unpkg · L6

dist/cli/chunk-C497uyLU.jsView file

20`).trim(),n=``,r=t.length===0,i=!1,a=e=>{if(i||!e)return e;let t=e.replace(/^\s*ASSISTANT:\s*/i,``);return t!==e&&(i=!0),t};return{push(e){let i=String(e||``).replace(/\r\n/g,` L21: `);if(r)return a(i);n+=i;let o=n.trimStart();if(t.startsWith(o)&&o.length<t.length)return``;r=!0;let s=n,c=n.trimStart();return c.startsWith(t)&&(s=c.slice(t.length)),n=``,a(s)},fl... L22:

High

Shell

Package source references shell execution.

dist/cli/chunk-C497uyLU.jsView on unpkg · L20

1import{t as e}from"./chunk-BChOKoxf.js";import{t}from"./chunk-gAdqVxWq.js";import{a as n,i as r,n as i,r as a,t as o}from"./chunk-Cpdoq2Nw.js";import{c as s,o as c,u as l}from"./ch... L2: `:``)+n),e&&!i&&(i=e.message),r(i)});t&&a.stdin&&(a.stdin.write(t),a.stdin.end())});j(ct),globalThis.__headlessBashExecutor=ct;function lt(e,t,n){let r=t.input_tokens||0,i=t.output... L3: L4: `);i=a.pop()||``;for(let e of a){let t=e.split(` L5: `);for(let e of t)if(e&&!e.startsWith(`:`)&&e.startsWith(`data: `)){let t=e.slice(6).trim();if(t===`[DONE]`)continue;try{yield JSON.parse(t)}catch{}}}}}finally{n.releaseLock()}}con... L6: `)].join(` ... L13: L14: `).slice(0,1e4)}function Kt(e){let t=e.trim();return t?`Tool result:\n${t}`:``}let qt=null;function Jt(e){qt=e}let Yt=null;function Xt(e){Yt=e}async

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli/chunk-C497uyLU.jsView on unpkg · L1

dist/cli/chunk-BU-vs0np.js#virtual:string-array:round1View file

High

Eval

Package source references dynamic code evaluation.

dist/cli/chunk-BU-vs0np.js#virtual:string-array:round1View on unpkg · L1

dist/cli/chunk-DKmoa1-u.jsView file

1import{t as e}from"./chunk-uAI_Zi6n.js";import{existsSync as t}from"node:fs";import n from"node:path";import{pathToFileURL as r}from"node:url";import i from"node:process";const a=e...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/chunk-DKmoa1-u.jsView on unpkg · L1

dist/electron/main.cjsView file

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/electron/main.cjsView on unpkg · L99

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/electron/main.cjsView on unpkg · L99

dist/cli/chunk-C2wXTI2R.jsView file

2`)}};D=/* @__PURE__ */ new WeakMap,O=/* @__PURE__ */ new WeakMap,k=/* @__PURE__ */ new WeakMap,Ae=/* @__PURE__ */ new WeakMap,je=/* @__PURE__ */ new WeakMap,ke=/* @__PURE__ */ new ... L3: `,`\r`]),Pe.NEWLINE_REGEXP=/\r\n|[\n\r]/g;function Fe(e,t,n){for(let r=t;r<n;r++){if(e[r]===10)return{preceding:r,index:r+1,carriage:!1};if(e[r]===13)return{preceding:r,index:r+1,c... L4: `);e.enqueue(i)}catch(t){e.error(t),r().catch(()=>void 0)}},cancel:r})}};$e=async function(e,t){let n=e.return;n&&(o(this,Qe,`f`)||t.abort(),await Reflect.apply(n,e,[]))};function ... ... L8: \r `.includes(e[r]);)r++};return o()},Lo=e=>Fo(e,V.ALL^V.NUM);var H,U,Ro,zo,Bo,W,Vo,Ho,Uo,Wo,Go,Ko,qo,Jo,Yo,Xo;function Zo(e){try{return Lo(e)}catch(t){if(t instanceof Po||t instan... L9: `&&f!==`\r`&&f!==` `&&(s=!0),c)o?o=!1:f=

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli/chunk-C2wXTI2R.jsView on unpkg · L2

src/cli/commands/agent.tsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/cli/commands/agent.tsView on unpkg · L98

dist/cli/chunk-DxC9rzb2.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/cli/chunk-DxC9rzb2.jsView on unpkg · L1

dist/public/agent.worker.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/public/agent.worker.jsView on unpkg · L1

dist/cli/chunk-BmlqXKZq.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/chunk-BmlqXKZq.jsView on unpkg · L28

dist/server.jsView file

•path = dist/server.js kind = oversized_source_file sizeBytes = 12409305 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/server.jsView on unpkg

dist/cli/chunk-B9hwXAdM.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 24

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/chunk-B9hwXAdM.js#virtual:string-array:round1View on unpkg

dist/cli/chunk-48riq6i6.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/chunk-48riq6i6.jsView on unpkg

shadow-claw@1.49.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code