Loading npm security reports…

termdock@1.4.122: Malicious npm security report (Block) | LPM Firewall

registry / termdock / 1.4.122

termdock@1.4.122

A complete web-based terminal application with modern UI

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package runs system-modifying commands without an explicit user command. Starting the CLI can repeat the rebuild and installation behavior and rewrites stale external agent hooks.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation, or a normal termdock CLI/server start when required software is absent or hooks are stale.

Impact

It can delete dependency artifacts, fetch and execute build tooling, request elevated package installation, and alter external agent configuration.

Mechanism

Lifecycle shell execution, package-manager installation, native rebuild, and agent-hook rewriting.

Attack narrative

A package installation automatically runs a postinstall script that removes native dependency artifacts, invokes npx to rebuild them, and attempts to install tmux through operating-system package managers, including sudo paths. The same behavior is repeated on normal CLI startup. Separately, server startup refreshes hooks in external AI-agent configuration files. These are unconsented, broad host and toolchain changes rather than ordinary package setup.

Rationale

The automatic postinstall and normal startup paths modify dependencies and the host system, including privileged package-manager attempts. The package also automatically maintains hooks in external AI-agent control surfaces.

Evidence

package.jsonscripts/postinstall.mjsdist/server/utils/bootCheck.jsdist/server/cli.jsdist/server/routes/terminal.jsdist/server/agent/installers.jsnode_modules/node-pty/prebuilds

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/server/certificateWatcher.jsView file

1import { EventEmitter } from 'events'; L2: import { execFile } from 'child_process'; L3: import { promisify } from 'util';

High

Child Process

Package source references child process execution.

dist/server/certificateWatcher.jsView on unpkg · L1

dist/server/utils/bootCheck.jsView file

50const r = spawnSync(cmd, [], { L51: shell: true, L52: timeout: timeoutMs,

High

Shell

Package source references shell execution.

dist/server/utils/bootCheck.jsView on unpkg · L50

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/utils/bootCheck.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/bootCheck.jsView on unpkg

dist/server/routes/terminal.jsView file

7Trigger-reachable persistence chain: manifest.exports -> dist/server/entry.js -> dist/server/routes/terminal.js L7: import QRCode from 'qrcode'; L8: import { execFile, spawn } from 'child_process'; L9: import { createHash, randomUUID } from 'crypto'; ... L46: const execFileAsync = promisify(execFile); L47: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L48: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`); ... L54: const raw = await fs.promises.readFile(filePath, 'utf-8'); L55: return JSON.parse(raw); L56: } ... L86: const require_ = createRequire(import.meta.url); L87: // dist/server/routes/terminal.js → ../../../package.json L88: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/server/routes/terminal.jsView on unpkg · L7

7import QRCode from 'qrcode'; L8: import { execFile, spawn } from 'child_process'; L9: import { createHash, randomUUID } from 'crypto'; ... L46: const execFileAsync = promisify(execFile); L47: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L48: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`); ... L54: const raw = await fs.promises.readFile(filePath, 'utf-8'); L55: return JSON.parse(raw); L56: } ... L86: const require_ = createRequire(import.meta.url); L87: // dist/server/routes/terminal.js → ../../../package.json L88: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/server/routes/terminal.jsView on unpkg · L7

dist/server/cli.jsView file

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L13: import fs from 'fs'; L14: import http from 'http'; L15: import https from 'https'; ... L18: import { createHash, randomUUID } from 'crypto'; L19: import { spawn, spawnSync, execFile } from 'child_process'; L20: import { promisify } from 'util';

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/server/cli.jsView on unpkg · L4

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); L13: import fs from 'fs'; L14: import http from 'http'; L15: import https from 'https'; ... L18: import { createHash, randomUUID } from 'crypto'; L19: import { spawn, spawnSync, execFile } from 'child_process'; L20: import { promisify } from 'util';

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/server/cli.jsView on unpkg · L4

4Trigger-reachable chain: scripts.start -> dist/server/cli.js L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); L13: import fs from 'fs'; L14: import http from 'http'; L15: import https from 'https'; ... L18: import { createHash, randomUUID } from 'crypto'; L19: import { spawn, spawnSync, execFile } from 'child_process'; L20: import { promisify } from 'util';

dist/server/agent/installers.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path'; import { execfile, spawn } from 'node:child_process'; import { agentbyslug, ispluginagent } from './registry.js'; import { loadplugins, resolvehooktarget } from './plugins.js'; export const hook_agents = ['claude', 'codex', 'copilot', 'opencode', 'pi', 'grok', 'kimi']; const display_names = { claude: 'claude code', codex: 'codex', copilot: 'copilot cli', opencode: 'opencode', pi: 'pi', grok: 'grok build', kimi: 'kimi code', };

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/agent/installers.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/installers.jsView on unpkg

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/server/utils/hunkApply.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server/utils/hunkApply.js#virtual:normalized:round1View on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

scripts/prepare-desktop-runtime.mjsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = scripts/prepare-desktop-runtime.mjs matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/prepare-desktop-runtime.mjsView on unpkg

dist/server/agent/pluginPackages.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = [redacted].js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/pluginPackages.jsView on unpkg

dist/server/routes/filesystem.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/routes/filesystem.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/routes/filesystem.jsView on unpkg

dist/server/utils/npmUpdate.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/utils/npmUpdate.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/npmUpdate.jsView on unpkg

dist/server/agent/titleNamerCatalog.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = [redacted].js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/titleNamerCatalog.jsView on unpkg

dist/server/ptyhost/manager.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/ptyhost/manager.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

dist/client/assets/index-Ca-rq7yX.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/client/assets/index-Ca-rq7yX.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/index-Ca-rq7yX.jsView on unpkg

dist/server/ptyHost.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/ptyHost.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyHost.jsView on unpkg

dist/server/utils/gitStatus.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.115 matchedPath = dist/server/utils/gitStatus.js matchedIdentity = npm:dGVybWRvY2s:1.4.115 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/gitStatus.jsView on unpkg