shieldcortex@4.54.11: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

shieldcortex@4.54.11: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

29 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

README.mdView file

•shieldcortex scan "ignore previous instructions"

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

dist/database/init.jsView file

8import { fileURLToPath } from 'url'; L9: import { execSync } from 'child_process'; L10: import { runMigrations } from './migrations.js';

High

Child Process

Package source references child process execution.

dist/database/init.jsView on unpkg · L8

dist/setup/hooks.jsView file

53stdio: ['pipe', 'inherit', 'inherit'], L54: shell: true, L55: });

High

Shell

Package source references shell execution.

dist/setup/hooks.jsView on unpkg · L53

dist/database/better-sqlite3-guard.jsView file

18import { createRequire } from 'module'; L19: const require = createRequire(import.meta.url); L20: /**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/database/better-sqlite3-guard.jsView on unpkg · L18

hooks/openclaw/cortex-memory/handler.tsView file

53L54: const NOVELTY_CACHE_FILE = path.join(homedir(), ".shieldcortex", "openclaw-memory-cache.json"); L55: const DEFAULT_NOVELTY_THRESHOLD = 0.88; ... L117: try { L118: const raw = JSON.parse(await fs.readFile(NOVELTY_CACHE_FILE, "utf-8")); L119: if (!Array.isArray(raw)) return [];

Low

Weak Crypto

Package source references weak cryptographic algorithms.

hooks/openclaw/cortex-memory/handler.tsView on unpkg · L53

dist/setup/deep-clean.jsView file

19import os from 'os'; L20: import { execSync } from 'child_process'; L21: import { gatewayRestartCommand } from './gateway-restart-command.js'; ... L28: function resolveHome() { L29: const sudoUser = process.env.SUDO_USER; L30: if (sudoUser) { ... L43: } L44: return os.homedir(); L45: } ... L49: try { L50: const parsed = JSON.parse(fs.readFileSync(file, 'utf-8')); L51: return typeof parsed === 'object' && parsed !== null

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/setup/deep-clean.jsView on unpkg · L19

dist/index.jsView file

348║ Starting Next.js dashboard... ║ L349: ║ Dashboard: http://localhost:3030 ║ L350: ║ API: http://localhost:3001 ║ ... L360: if (useStandalone && dashboardPath) { L361: return spawn(process.execPath, ['server.js'], { L362: cwd: dashboardPath.cwd, L363: stdio: ['ignore', 'pipe', 'pipe'], L364: env: { ...process.env, PORT: '3030', HOSTNAME: '127.0.0.1' }, L365: });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L348

dashboard/.next/standalone/dashboard/node_modules/next/dist/compiled/edge-runtime/index.jsView file

1(()=>{var __webpack_modules__={462:e=>{e.exports='"use strict";var c=Object.defineProperty,f=Object.getOwnPropertyDescriptor,y=Object.getOwnPropertyNames,S=Object.prototype.hasOwnP...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dashboard/.next/standalone/dashboard/node_modules/next/dist/compiled/edge-runtime/index.jsView on unpkg · L1

dist/setup/uninstall.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: function blockagentuninstall() { if (isagentcontext()) { console.error('\n[shieldcortex] blocked: uninstall attempted from agent context.'); console.error('sub-agents cannot uninstall shieldcortex.'); console.error('only human operators can uninstall via interactive tty.\n'); return true; } return false; } export async function requireconfirmation(action) { if (process.argv.includes('--confirm')) { return true; } if (!process.stdi

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/setup/uninstall.jsView on unpkg

dist/setup/openclaw.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. join('/home', username); try { if (!fs.statsync(userhome).isdirectory()) continue; } catch { continue; } if (fs.existssync(path.join(userhome, '.openclaw')) || fs.existssync(path.join(userhome, '.claude'))) { return userhome; } } } catch { } } return home; } f

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/setup/openclaw.jsView on unpkg

dist/service/install.jsView file

12Trigger-reachable persistence chain: scripts.start -> dist/index.js -> dist/service/install.js L12: import os from 'os'; L13: import { execSync } from 'child_process'; L14: import { fileURLToPath } from 'url'; ... L16: const __filename = fileURLToPath(import.meta.url); L17: const __dirname = path.dirname(__filename); L18: function detectPlatform() { L19: switch (process.platform) { L20: case 'darwin': return 'macos'; ... L25: function detectDefaultServiceMode(platform) { L26: if (platform === 'linux' && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY) { L27: return 'worker'; ... L44: // If that absolute path no longer exists, systemd will fail to open it

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/service/install.jsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/service/install.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/service/install.jsView on unpkg

plugins/hermes/shieldcortex/sc_client.pyView file

•path = plugins/hermes/shieldcortex/sc_client.py kind = build_helper sizeBytes = 13461 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/hermes/shieldcortex/sc_client.pyView on unpkg

dashboard/.next/standalone/dashboard/.next/server/app/apple-icon.png.bodyView file

•path = dashboard/.next/standalone/dashboard/.next/server/app/apple-icon.png.body kind = high_entropy_blob sizeBytes = 26212 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dashboard/.next/standalone/dashboard/.next/server/app/apple-icon.png.bodyView on unpkg

plugins/hermes/shieldcortex/tests/test_client_policy.pyView file

•path = [redacted]test_client_policy.py kind = payload_in_excluded_dir sizeBytes = 17732 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/hermes/shieldcortex/tests/test_client_policy.pyView on unpkg

dashboard/.next/standalone/dashboard/node_modules/next/dist/build/next-config-ts/transpile-config.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 41

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dashboard/.next/standalone/dashboard/node_modules/next/dist/build/next-config-ts/transpile-config.js#virtual:normalized:round1View on unpkg

dist/defence/skill-scanner/scan-skill.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/defence/skill-scanner/scan-skill.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/defence/skill-scanner/scan-skill.jsView on unpkg

dashboard/.next/standalone/dashboard/node_modules/@next/env/dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dashboard/.next/standalone/dashboard/node_modules/@next/env/dist/index.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dashboard/.next/standalone/dashboard/node_modules/@next/env/dist/index.jsView on unpkg

dist/api/routes/xray.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/api/routes/xray.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/api/routes/xray.jsView on unpkg

dist/audit/dependency-scanner.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/audit/dependency-scanner.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/audit/dependency-scanner.jsView on unpkg

dist/audit/env-scanner.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/audit/env-scanner.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/audit/env-scanner.jsView on unpkg

dist/integrations/claude-code-version.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/integrations/claude-code-version.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/integrations/claude-code-version.jsView on unpkg

dist/xray/file-scanner.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/xray/file-scanner.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/xray/file-scanner.jsView on unpkg

dist/xray/npm-inspector.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/xray/npm[redacted] matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/xray/npm-inspector.jsView on unpkg

dist/xray/patterns.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/xray/patterns.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/xray/patterns.jsView on unpkg

dist/cli/memory.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = dist/cli/memory.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/memory.jsView on unpkg

dist/defence/fragmentation/entity-extractor.jsView file

•matchType = normalized_sha256 matchedPackage = shieldcortex@5.0.1 matchedPath = [redacted]-extractor.js matchedIdentity = npm:c2hpZWxkY29ydGV4:5.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/defence/fragmentation/entity-extractor.jsView on unpkg

Findings

24 High7 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

HighChild Processdist/database/init.js

HighShelldist/setup/hooks.js

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdashboard/.next/standalone/dashboard/node_modules/next/dist/compiled/edge-runtime/index.js

HighExternal Ai Agent Control Surface Mutationdist/setup/uninstall.js

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/setup/openclaw.js

HighTrigger Reachable Persistencedist/service/install.js

HighShips High Entropy Blobdashboard/.next/standalone/dashboard/.next/server/app/apple-icon.png.body

HighPayload In Excluded Dirplugins/hermes/shieldcortex/tests/test_client_policy.py

HighSemantic Analysis Limiteddashboard/.next/standalone/dashboard/node_modules/next/dist/build/next-config-ts/transpile-config.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/defence/skill-scanner/scan-skill.js

HighKnown Malware Source Similaritydist/service/install.js

HighKnown Malware Source Similaritydashboard/.next/standalone/dashboard/node_modules/@next/env/dist/index.js

HighKnown Malware Source Similaritydist/api/routes/xray.js

HighKnown Malware Source Similaritydist/audit/dependency-scanner.js

HighKnown Malware Source Similaritydist/audit/env-scanner.js

HighKnown Malware Source Similaritydist/integrations/claude-code-version.js

HighKnown Malware Source Similaritydist/xray/file-scanner.js

HighKnown Malware Source Similaritydist/xray/npm-inspector.js

HighKnown Malware Source Similaritydist/xray/patterns.js

HighKnown Malware Source Similaritydist/cli/memory.js

HighKnown Malware Source Similaritydist/defence/fragmentation/entity-extractor.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/database/better-sqlite3-guard.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/setup/deep-clean.js

MediumShips Build Helperplugins/hermes/shieldcortex/sc_client.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptohooks/openclaw/cortex-memory/handler.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings