sneakoscope@8.3.1: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

sneakoscope@8.3.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/bin/sks.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/bin/sks.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/core/codex/managed-proxy-env.jsView file

43patternName = generic_password severity = medium line = 43 matchedText = parsed.p...ed';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/core/codex/managed-proxy-env.jsView on unpkg · L43

dist/core/fsx.jsView file

5import crypto from 'node:crypto'; L6: import { spawn } from 'node:child_process'; L7: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/core/fsx.jsView on unpkg · L5

dist/core/release/release-gate-batch-runner.jsView file

60return new Promise((resolve) => { L61: const child = spawn(gate.command, { cwd: root, shell: true, env: hermetic.env, stdio: ['ignore', 'pipe', 'pipe'], detached: process.platform !== 'win32' }); L62: let stdoutTail = '';

High

Shell

Package source references shell execution.

dist/core/release/release-gate-batch-runner.jsView on unpkg · L60

dist/core/super-search/doctor.jsView file

84const smokeModule = './local-http-smoke.js'; L85: const smokeRuntime = await import(smokeModule); L86: const runner = smokeRuntime['run' + 'SuperSearchLocalHttpSmoke'];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/core/super-search/doctor.jsView on unpkg · L84

dist/core/codex-lb/desktop-bridge/server.jsView file

1import { createHash, randomInt, timingSafeEqual } from 'node:crypto'; L2: import http, {} from 'node:http'; L3: import net, {} from 'node:net'; ... L32: const actual = createHash('sha256').update(capability).digest(); L33: const expected = Buffer.from(input.clientCapabilitySha256, 'hex'); L34: if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) { ... L48: const accept = createHash('sha1').update(`${key}258EAFA5-E914-47DA-95CA-C5AB0DC85B11`).digest('base64'); L49: socket.write('HTTP/1.1 101 Switching Protocols\r\n' L50: + 'Upgrade: websocket\r\nConnection: Upgrade\r\n'

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/codex-lb/desktop-bridge/server.jsView on unpkg · L1

dist/core/install/installed-package-smoke.jsView file

36const stubBin = path.join(tmp, 'bin'); L37: const launchctlLog = path.join(tmp, 'launchctl-calls.log'); L38: const launchctlStub = path.join(stubBin, process.platform === 'win32' ? 'launchctl.cmd' : 'launchctl'); L39: const npmUserConfig = path.join(tmp, 'npmrc'); ... L133: TMPDIR: runtimeTmp, L134: PATH: `${stubBin}${path.delimiter}${String(process.env.PATH || '')}`, L135: NODE_DISABLE_COMPILE_CACHE: '1', ... L159: const packageLocalStampPresent = await regularFileExists(packageLocalStamp); L160: const installOutput = `${install.stdout}\n${install.command.stderr_tail}`; L161: const optInGuidancePresent = /Automatic bootstrap was not run/.test(installOutput) ... L313: try { L314: const parsed = JSON.parse(await fs.readFile(receipt, 'utf8'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/core/install/installed-package-smoke.jsView on unpkg · L36

dist/cli/command-manifest-lite.jsView file

90Install-time code directly mutates a foreign AI-agent control surface: L90: { name: 'wiki', summary: 'Manage TriWiki and image voxel ledgers', maturity: 'beta', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, L91: { name: 'memory', summary: 'Project TriWiki memory into managed AGENTS.md blocks or run memory GC', maturity: 'beta' }, L92: { name: 'gc', summary: 'Compact/prune runtime state', maturity: 'labs', sk[redacted]: true, allowedDuringActiveRoute: true, diagnostic: true }, Write operation from dist/cli/install-helpers.js: L144: await fsp.access(stamp).catch(async () => { L145: await fsp.writeFile(stamp, `${JSON.stringify(stampLib.buildStampPayload(), null, 2)}\n`); L146: console.log('SKS build stamp: restored inside the installed package for update self-verific

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/command-manifest-lite.jsView on unpkg · L90

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView file

•path = dist/native/sks-[redacted].pdf kind = high_entropy_blob sizeBytes = 8488 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView on unpkg

dist/core/release/release-cache-key.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/core/release/release-cache-key.jsView on unpkg

dist/core/codex-control/codex-current-feature-probes.jsView file

•matchType = normalized_sha256 matchedPackage = sneakoscope@6.5.1 matchedPath = dist/core/codex-control/codex-0140-feature-probes.js matchedIdentity = npm:c25lYWtvc2NvcGU:6.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/codex-control/codex-current-feature-probes.jsView on unpkg