start-claude: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

start-claude: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

bin/start-gemini.mjsView file

1#!/usr/bin/env node L2: import { randomUUID, createHash, createHmac, getRandomValues, createPrivateKey, createPublicKey, sign } from 'node:crypto'; L3: import process$3, { versions, env } from 'node:process'; L4: import { createRequire } from 'node:module'; L5: import childProcess, { execFile as execFile$1, spawn as spawn$1, exec as exec$1 } from 'node:child_process'; L6: import * as fs from 'node:fs'; L7: import fs__default, { existsSync, mkdirSync, writeFileSync as writeFileSync$1, rmSync, readFileSync as readFileSync$1, ReadStream, lstatSync, fstatSync, statSync, accessSync, const... L8: import * as http from 'node:http'; L9: import http__default from 'node:http'; ... L53: * Constructs the CommanderError class L54: * @param {number} exitCode suggested exit code which could be used w

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

bin/start-gemini.mjsView on unpkg · L1

249L250: const require$6 = createRequire(import.meta.url); L251: function __require$5() { return require$6("node:events"); }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/start-gemini.mjsView on unpkg · L249

52492try { L52493: return new Function('config', `return ${expression}`)(config); L52494: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

bin/start-gemini.mjsView on unpkg · L52492

1#!/usr/bin/env node L2: import { randomUUID, createHash, createHmac, getRandomValues, createPrivateKey, createPublicKey, sign } from 'node:crypto'; L3: import process$3, { versions, env } from 'node:process'; L4: import { createRequire } from 'node:module'; L5: import childProcess, { execFile as execFile$1, spawn as spawn$1, exec as exec$1 } from 'node:child_process'; L6: import * as fs from 'node:fs'; L7: import fs__default, { existsSync, mkdirSync, writeFileSync as writeFileSync$1, rmSync, readFileSync as readFileSync$1, ReadStream, lstatSync, fstatSync, statSync, accessSync, const... L8: import * as http from 'node:http'; L9: import http__default from 'node:http'; ... L53: * Constructs the CommanderError class L54: * @param {number} exitCode suggested exit code which could be used w

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/start-gemini.mjsView on unpkg · L1

bin/cli.cjsView file

•path = bin/cli.cjs kind = oversized_source_file sizeBytes = 4913553 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/cli.cjsView on unpkg

•path = bin/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 4913553 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/cli.cjsView on unpkg

Source & flagged code

6 flagged

bin/start-gemini.mjsView file

1#!/usr/bin/env node L2: import { randomUUID, createHash, createHmac, getRandomValues, createPrivateKey, createPublicKey, sign } from 'node:crypto'; L3: import process$3, { versions, env } from 'node:process'; L4: import { createRequire } from 'node:module'; L5: import childProcess, { execFile as execFile$1, spawn as spawn$1, exec as exec$1 } from 'node:child_process'; L6: import * as fs from 'node:fs'; L7: import fs__default, { existsSync, mkdirSync, writeFileSync as writeFileSync$1, rmSync, readFileSync as readFileSync$1, ReadStream, lstatSync, fstatSync, statSync, accessSync, const... L8: import * as http from 'node:http'; L9: import http__default from 'node:http'; ... L53: * Constructs the CommanderError class L54: * @param {number} exitCode suggested exit code which could be used w

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

bin/start-gemini.mjsView on unpkg · L1

249L250: const require$6 = createRequire(import.meta.url); L251: function __require$5() { return require$6("node:events"); }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/start-gemini.mjsView on unpkg · L249

52492try { L52493: return new Function('config', `return ${expression}`)(config); L52494: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

bin/start-gemini.mjsView on unpkg · L52492

1#!/usr/bin/env node L2: import { randomUUID, createHash, createHmac, getRandomValues, createPrivateKey, createPublicKey, sign } from 'node:crypto'; L3: import process$3, { versions, env } from 'node:process'; L4: import { createRequire } from 'node:module'; L5: import childProcess, { execFile as execFile$1, spawn as spawn$1, exec as exec$1 } from 'node:child_process'; L6: import * as fs from 'node:fs'; L7: import fs__default, { existsSync, mkdirSync, writeFileSync as writeFileSync$1, rmSync, readFileSync as readFileSync$1, ReadStream, lstatSync, fstatSync, statSync, accessSync, const... L8: import * as http from 'node:http'; L9: import http__default from 'node:http'; ... L53: * Constructs the CommanderError class L54: * @param {number} exitCode suggested exit code which could be used w

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/start-gemini.mjsView on unpkg · L1

bin/cli.cjsView file

•path = bin/cli.cjs kind = oversized_source_file sizeBytes = 4913553 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/cli.cjsView on unpkg

•path = bin/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 4913553 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/cli.cjsView on unpkg