sneakoscope@8.2.0: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

sneakoscope@8.2.0: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/bin/sks.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/bin/sks.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/codex/managed-proxy-env.jsView file

43patternName = generic_password severity = medium line = 43 matchedText = parsed.p...ed';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/core/codex/managed-proxy-env.jsView on unpkg · L43

dist/core/fsx.jsView file

5import crypto from 'node:crypto'; L6: import { spawn } from 'node:child_process'; L7: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/core/fsx.jsView on unpkg · L5

dist/core/release/release-gate-batch-runner.jsView file

60return new Promise((resolve) => { L61: const child = spawn(gate.command, { cwd: root, shell: true, env: hermetic.env, stdio: ['ignore', 'pipe', 'pipe'], detached: process.platform !== 'win32' }); L62: let stdoutTail = '';

High

Shell

Package source references shell execution.

dist/core/release/release-gate-batch-runner.jsView on unpkg · L60

dist/core/super-search/doctor.jsView file

84const smokeModule = './local-http-smoke.js'; L85: const smokeRuntime = await import(smokeModule); L86: const runner = smokeRuntime['run' + 'SuperSearchLocalHttpSmoke'];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/super-search/doctor.jsView on unpkg · L84

dist/core/codex-lb/desktop-bridge/server.jsView file

1import { createHash, randomInt, timingSafeEqual } from 'node:crypto'; L2: import http, {} from 'node:http'; L3: import net, {} from 'node:net'; ... L32: const actual = createHash('sha256').update(capability).digest(); L33: const expected = Buffer.from(input.clientCapabilitySha256, 'hex'); L34: if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) { ... L48: const accept = createHash('sha1').update(`${key}258EAFA5-E914-47DA-95CA-C5AB0DC85B11`).digest('base64'); L49: socket.write('HTTP/1.1 101 Switching Protocols\r\n' L50: + 'Upgrade: websocket\r\nConnection: Upgrade\r\n'

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/codex-lb/desktop-bridge/server.jsView on unpkg · L1

dist/core/install/installed-package-smoke.jsView file

36const stubBin = path.join(tmp, 'bin'); L37: const launchctlLog = path.join(tmp, 'launchctl-calls.log'); L38: const launchctlStub = path.join(stubBin, process.platform === 'win32' ? 'launchctl.cmd' : 'launchctl'); L39: const npmUserConfig = path.join(tmp, 'npmrc'); ... L133: TMPDIR: runtimeTmp, L134: PATH: `${stubBin}${path.delimiter}${String(process.env.PATH || '')}`, L135: NODE_DISABLE_COMPILE_CACHE: '1', ... L159: const packageLocalStampPresent = await regularFileExists(packageLocalStamp); L160: const installOutput = `${install.stdout}\n${install.command.stderr_tail}`; L161: const optInGuidancePresent = /Automatic bootstrap was not run/.test(installOutput) ... L314: try { L315: const parsed = JSON.parse(await fs.readFile(receipt, 'utf8'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/core/install/installed-package-smoke.jsView on unpkg · L36

dist/cli/command-manifest-lite.jsView file

91Install-time code directly mutates a foreign AI-agent control surface: L91: { name: 'wiki', summary: 'Manage TriWiki and image voxel ledgers', maturity: 'beta', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, L92: { name: 'memory', summary: 'Project TriWiki memory into managed AGENTS.md blocks or run memory GC', maturity: 'beta' }, L93: { name: 'gc', summary: 'Compact/prune runtime state', maturity: 'labs', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, Write operation from dist/cli/install-helpers.js: L144: await fsp.access(stamp).catch(async () => { L145: await fsp.writeFile(stamp, `${JSON.stringify(stampLib.buildStampPayload(), null, 2)}\n`); L146: console.log('SKS build stamp: restored inside the installed package for update self-verific

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/command-manifest-lite.jsView on unpkg · L91

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView file

•path = dist/native/sks-[redacted].pdf kind = high_entropy_blob sizeBytes = 8488 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView on unpkg

dist/core/codex-control/codex-current-feature-probes.jsView file

•matchType = normalized_sha256 matchedPackage = sneakoscope@6.5.1 matchedPath = dist/core/codex-control/codex-0140-feature-probes.js matchedIdentity = npm:c25lYWtvc2NvcGU:6.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/codex-control/codex-current-feature-probes.jsView on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 91-131json

91 "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",

92 "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",

93 "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",

94 "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",

95 "release:check": "npm run release:check:affected",

96 "release:metadata": "node ./dist/scripts/release-metadata-check.js",

97 "release:version-truth": "node ./dist/scripts/release-version-truth-check.js",

98 "release:dist-freshness": "node ./dist/scripts/release-dist-freshness-check.js",

99 "release:provenance": "node ./dist/scripts/release-provenance-check.js",

100 "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",

101 "release:file-ownership": "node ./dist/scripts/release-file-ownership-check.js",

102 "release:macos-menubar-proof": "node ./dist/scripts/release-macos-menubar-proof.js",

103 "release:main-push-guard": "node ./dist/scripts/release-main-push-guard.js",

104 "release:main-push-receipt": "node ./dist/scripts/release-main-push-receipt.js",

105 "release:pack-receipt": "node ./dist/scripts/release-pack-receipt.js",

106 "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",

107 "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",

108 "typecheck": "tsc -p tsconfig.json --noEmit",

109 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

110 "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",

111 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L111

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L111

112 "postinstall:global-doctor-blackbox": "node ./dist/scripts/postinstall-global-doctor-blackbox.js",

113 "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",

114 "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",

115 "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",

116 "doctor:supabase-mcp-repair-blackbox": "node ./dist/scripts/doctor-supabase-mcp-repair-blackbox.js",

117 "native-capability:postcheck": "node ./dist/scripts/native-capability-postcheck-check.js",

118 "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",

119 "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",

120 "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",

121 "runtime:terminal-current": "node ./dist/scripts/runtime-current-terminal-check.js",

122 "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",

123 "migration:upgrade-safety": "node ./dist/scripts/current-upgrade-matrix-check.js",

124 "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",

125 "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",

126 "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",

127 "changelog:check": "node ./dist/scripts/changelog-check.js",

128 "cli-entrypoint:check": "node ./dist/scripts/check-cli-entrypoint.js",

129 "legacy-free:check": "node ./dist/scripts/check-legacy-free.js",

130 "architecture:check": "node ./dist/scripts/check-architecture.js",

131 "route-modularity:check": "node ./dist/scripts/check-route-modularity.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 40-80javascript

40 const result = await runOne(root, runId, reportRoot, gate);

41 results.push(result);

42 if (input.reportRoot)

43 writeChildResult(input.reportRoot, result);

44 }

dist/core/super-search/doctor.jsView file

Lines 64-97javascript

64 next_actions: diagnostics.next_actions,

65 evidence_paths: [...diagnostics.evidence_paths, ...(smoke || smokeFreshness.available ? [path.relative(process.cwd(), smokeReportPath)] : [])],

66 warnings: [...

dist/core/codex-lb/desktop-bridge/server.jsView file

Lines 1-21javascript

1import { createHash, randomInt, timingSafeEqual } from 'node:crypto';

2import http, {} from 'node:http';

3import net, {} from 'node:net';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/codex-lb/desktop-bridge/server.jsView on unpkg · L1

dist/core/install/installed-package-smoke.jsView file

Lines 16-56javascript

16 { argv: ['--agent', 'fixture', '--json'], expected_reason: 'unknown_command' },

17 { argv: ['--naruto', '--json'], expected_reason: 'unknown_command' },

18

dist/cli/command-manifest-lite.jsView file

91Install-time code directly mutates a foreign AI-agent control surface: L91: { name: 'wiki', summary: 'Manage TriWiki and image voxel ledgers', maturity: 'beta', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, L92: { name: 'memory', summary: 'Project TriWiki memory into managed AGENTS.md blocks or run memory GC', maturity: 'beta' }, L93: { name: 'gc', summary: 'Compact/prune runtime state', maturity: 'labs', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, Write operation from dist/cli/install-helpers.js: L144: await fsp.access(stamp).catch(async () => { L145: await fsp.writeFile(stamp, `${JSON.stringify(stampLib.buildStampPayload(), null, 2)}\n`); L146: console.log('SKS build stamp: restored inside the installed package for update self-verific

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/command-manifest-lite.jsView on unpkg · L91

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView file

•path = dist/native/sks-[redacted].pdf kind = high_entropy_blob sizeBytes = 8488 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView on unpkg

dist/core/codex-control/codex-current-feature-probes.jsView file

•matchType = normalized_sha256 matchedPackage = sneakoscope@6.5.1 matchedPath = dist/core/codex-control/codex-0140-feature-probes.js matchedIdentity = npm:c25lYWtvc2NvcGU:6.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/codex-control/codex-current-feature-probes.jsView on unpkg