sneakoscope@8.1.2: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

sneakoscope@8.1.2: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/bin/sks.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/bin/sks.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/codex/managed-proxy-env.jsView file

43patternName = generic_password severity = medium line = 43 matchedText = parsed.p...ed';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/core/codex/managed-proxy-env.jsView on unpkg · L43

dist/core/fsx.jsView file

5import crypto from 'node:crypto'; L6: import { spawn } from 'node:child_process'; L7: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/core/fsx.jsView on unpkg · L5

dist/core/release/release-gate-batch-runner.jsView file

59return new Promise((resolve) => { L60: const child = spawn(gate.command, { cwd: root, shell: true, env: hermetic.env, stdio: ['ignore', 'ignore', 'ignore'], detached: process.platform !== 'win32' }); L61: let timedOut = false;

High

Shell

Package source references shell execution.

dist/core/release/release-gate-batch-runner.jsView on unpkg · L59

dist/core/super-search/doctor.jsView file

84const smokeModule = './local-http-smoke.js'; L85: const smokeRuntime = await import(smokeModule); L86: const runner = smokeRuntime['run' + 'SuperSearchLocalHttpSmoke'];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/super-search/doctor.jsView on unpkg · L84

dist/core/codex-lb/desktop-controller.jsView file

2import fsp from 'node:fs/promises'; L3: import net from 'node:net'; L4: import os from 'node:os'; ... L723: const envTimeout = Number(input.env?.SKS_CODEX_LB_IMAGE_PROBE_TIMEOUT_MS L724: || process.env.SKS_CODEX_LB_IMAGE_PROBE_TIMEOUT_MS L725: || 0); ... L1048: } L1049: const home = input.home || input.env?.HOME || process.env.HOME || os.homedir(); L1050: const receiptDir = input.receiptDir || codexLbMigrationReceiptDir(home); ... L1231: } L1232: const key = randomBytes(16).toString('base64'); L1233: const expectedAccept = createHash('sha1')

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/codex-lb/desktop-controller.jsView on unpkg · L2

dist/core/install/installed-package-smoke.jsView file

36const stubBin = path.join(tmp, 'bin'); L37: const launchctlLog = path.join(tmp, 'launchctl-calls.log'); L38: const launchctlStub = path.join(stubBin, process.platform === 'win32' ? 'launchctl.cmd' : 'launchctl'); L39: const npmUserConfig = path.join(tmp, 'npmrc'); ... L133: TMPDIR: runtimeTmp, L134: PATH: `${stubBin}${path.delimiter}${String(process.env.PATH || '')}`, L135: NODE_DISABLE_COMPILE_CACHE: '1', ... L159: const packageLocalStampPresent = await regularFileExists(packageLocalStamp); L160: const installOutput = `${install.stdout}\n${install.command.stderr_tail}`; L161: const optInGuidancePresent = /Automatic bootstrap was not run/.test(installOutput) ... L314: try { L315: const parsed = JSON.parse(await fs.readFile(receipt, 'utf8'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/core/install/installed-package-smoke.jsView on unpkg · L36

dist/cli/command-manifest-lite.jsView file

91Install-time code directly mutates a foreign AI-agent control surface: L91: { name: 'wiki', summary: 'Manage TriWiki and image voxel ledgers', maturity: 'beta', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, L92: { name: 'memory', summary: 'Project TriWiki memory into managed AGENTS.md blocks or run memory GC', maturity: 'beta' }, L93: { name: 'gc', summary: 'Compact/prune runtime state', maturity: 'labs', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, Write operation from dist/commands/doctor.js: L94: migration = { L95: schema: 'sk[redacted]', L96: ok: false, ... L156: const status = input.providerStatus || {}; L157: const configPath = String(status.config_path || path.join(home, '.codex', 'config.toml')); L158: const configText = await (d

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/command-manifest-lite.jsView on unpkg · L91

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView file

•path = dist/native/sks-[redacted].pdf kind = high_entropy_blob sizeBytes = 8488 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView on unpkg

dist/core/codex-control/codex-current-feature-probes.jsView file

•matchType = normalized_sha256 matchedPackage = sneakoscope@6.5.1 matchedPath = dist/core/codex-control/codex-0140-feature-probes.js matchedIdentity = npm:c25lYWtvc2NvcGU:6.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/codex-control/codex-current-feature-probes.jsView on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 92-132json

92 "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",

93 "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",

94 "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",

95 "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",

96 "release:check": "npm run release:check:affected",

97 "release:metadata": "node ./dist/scripts/release-metadata-check.js",

98 "release:version-truth": "node ./dist/scripts/release-version-truth-check.js",

99 "release:dist-freshness": "node ./dist/scripts/release-dist-freshness-check.js",

100 "release:provenance": "node ./dist/scripts/release-provenance-check.js",

101 "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",

102 "release:file-ownership": "node ./dist/scripts/release-file-ownership-check.js",

103 "release:macos-menubar-proof": "node ./dist/scripts/release-macos-menubar-proof.js",

104 "release:main-push-guard": "node ./dist/scripts/release-main-push-guard.js",

105 "release:main-push-receipt": "node ./dist/scripts/release-main-push-receipt.js",

106 "release:pack-receipt": "node ./dist/scripts/release-pack-receipt.js",

107 "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",

108 "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",

109 "typecheck": "tsc -p tsconfig.json --noEmit",

110 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

111 "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",

112 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L112

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L112

113 "postinstall:global-doctor-blackbox": "node ./dist/scripts/postinstall-global-doctor-blackbox.js",

114 "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",

115 "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",

116 "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",

117 "doctor:supabase-mcp-repair-blackbox": "node ./dist/scripts/doctor-supabase-mcp-repair-blackbox.js",

118 "native-capability:postcheck": "node ./dist/scripts/native-capability-postcheck-check.js",

119 "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",

120 "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",

121 "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",

122 "runtime:terminal-current": "node ./dist/scripts/runtime-current-terminal-check.js",

123 "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",

124 "migration:upgrade-safety": "node ./dist/scripts/current-upgrade-matrix-check.js",

125 "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",

126 "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",

127 "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",

128 "changelog:check": "node ./dist/scripts/changelog-check.js",

129 "cli-entrypoint:check": "node ./dist/scripts/check-cli-entrypoint.js",

130 "legacy-free:check": "node ./dist/scripts/check-legacy-free.js",

131 "architecture:check": "node ./dist/scripts/check-architecture.js",

132 "route-modularity:check": "node ./dist/scripts/check-route-modularity.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 39-79javascript

39 const result = await runOne(root, runId, reportRoot, gate);

40 results.push(result);

41 if (input.reportRoot)

42 writeChildResult(input.reportRoot, result);

43 }

dist/core/super-search/doctor.jsView file

Lines 64-97javascript

64 next_actions: diagnostics.next_actions,

65 evidence_paths: [...diagnostics.evidence_paths, ...(smoke || smokeFreshness.available ? [path.relative(process.cwd(), smokeReportPath)] : [])],

66 warnings: [...

dist/core/codex-lb/desktop-controller.jsView file

Lines 1-22javascript

1import { createHash, randomBytes } from 'node:crypto';

2import fsp from 'node:fs/promises';

3import net from 'node:net';

4import os from 'node:os'

dist/core/install/installed-package-smoke.jsView file

Lines 16-56javascript

16 { argv: ['--agent', 'fixture', '--json'], expected_reason: 'unknown_command' },

17 { argv: ['--naruto', '--json'], expected_reason: 'unknown_command' },

18

dist/cli/command-manifest-lite.jsView file

91Install-time code directly mutates a foreign AI-agent control surface: L91: { name: 'wiki', summary: 'Manage TriWiki and image voxel ledgers', maturity: 'beta', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, L92: { name: 'memory', summary: 'Project TriWiki memory into managed AGENTS.md blocks or run memory GC', maturity: 'beta' }, L93: { name: 'gc', summary: 'Compact/prune runtime state', maturity: 'labs', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, Write operation from dist/commands/doctor.js: L94: migration = { L95: schema: 'sk[redacted]', L96: ok: false, ... L156: const status = input.providerStatus || {}; L157: const configPath = String(status.config_path || path.join(home, '.codex', 'config.toml')); L158: const configText = await (d

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/command-manifest-lite.jsView on unpkg · L91

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView file

•path = dist/native/sks-[redacted].pdf kind = high_entropy_blob sizeBytes = 8488 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView on unpkg

dist/core/codex-control/codex-current-feature-probes.jsView file

•matchType = normalized_sha256 matchedPackage = sneakoscope@6.5.1 matchedPath = dist/core/codex-control/codex-0140-feature-probes.js matchedIdentity = npm:c25lYWtvc2NvcGU:6.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/codex-control/codex-current-feature-probes.jsView on unpkg