Loading npm security reports…

termdock@1.4.199: Malicious npm security report (Block) | LPM Firewall

registry / termdock / 1.4.199

termdock@1.4.199

A complete web-based terminal application with modern UI

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Installing the package automatically changes the host system and its installed dependency tree. It can invoke privileged package-manager commands to install tmux and rebuild node-pty.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation, through postinstall.

Impact

An install can prompt for or use elevated privileges, install software outside the project, delete dependency artifacts, and invoke npx without a separate user action.

Mechanism

Install-time system package installation and dependency mutation.

Attack narrative

The manifest runs scripts/postinstall.mjs on every npm install. On Linux it selects available package managers and executes tmux installation commands, preferring sudo where configured. During the same lifecycle path it modifies node-pty source, removes prebuilt and debug artifacts, and runs npx node-gyp rebuild. These broad, unconsented install-time host and dependency changes are not required npm setup behavior and create a supply-chain execution surface.

AI rationale

This package performs unconsented, automatic host-level package installation and destructive dependency mutation during postinstall. The behavior is concrete install-hook abuse even though no credential exfiltration was found in the inspected paths.

Evidence

package.jsonscripts/postinstall.mjsscripts/ensure-node-pty.cjsnode_modules/node-pty/src/unix/pty.ccnode_modules/node-pty/prebuilds/darwin-${process.arch}node_modules/node-pty/build/Debug~/.termdock/.boot-check-ok

Source & flagged code

32 flagged

package.jsonView file

Lines 24-64json

24 "dev:client": "vite",

25 "dev:server": "cross-env PORT=9835 tsx watch src/server/entry.ts",

26 "build": "npm run clean && npm run build:client && npm run build:server && npm run build:runtime-manifest",

27 "build:desktop": "node scripts/prepare-desktop-tokens.mjs && tsc -p tsconfig.desktop.json && esbuild desktop/preload.cts --bundle --platform=node --format=cjs --external:electron --outfile=.desktop-dist/preload.cjs && esbuild desktop/renderer/services.tsx --bundle --platform=browser --format=iife --minify --outfile=desktop/renderer/services.js",

28 "desktop:dev": "npm run build && npm run build:desktop && electron-forge start",

29 "desktop:prepare": "npm run build && npm run build:desktop && node scripts/prepare-desktop-runtime.mjs",

30 "desktop:make": "node scripts/ensure-macos-appdmg.mjs && npm run desktop:prepare && electron-forge make",

31 "build:client": "vite build && node scripts/precompress-client.mjs",

32 "build:server": "tsc -p tsconfig.server.json && node -e \"require('fs').chmodSync('dist/server/cli.js', 0o755)\"",

33 "build:runtime-manifest": "node scripts/generate-runtime-manifest.mjs",

34 "generate:pwa-assets": "pwa-assets-generator --config pwa-assets.config.ts",

35 "preview": "vite preview",

36 "start": "node dist/server/cli.js",

37 "lint": "tsc --noEmit",

38 "trace:diff": "node scripts/inspect-diff-trace.mjs",

39 "trace:fsio": "node scripts/inspect-fs-io.mjs",

40 "release:classify": "node scripts/classify-release.mjs",

41 "test": "vitest --passWithNoTests",

42 "test:ui": "vitest --ui",

43 "prepublishOnly": "npm run build",

44 "postinstall": "node scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L44

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L44

45 },

46 "dependencies": {

47 "@chainsafe/libp2p-noise": "17.0.0",

48 "@dnd-kit/core": "^6.3.1",

49 "@dnd-kit/sortable": "^10.0.0",

50 "@dnd-kit/utilities": "^3.2.2",

51 "@hello-pangea/dnd": "^18.0.1",

52 "@libp2p/crypto": "5.1.9",

53 "@libp2p/interface": "3.1.0",

54 "@libp2p/peer-id": "6.0.0",

55 "@libp2p/utils": "7.0.7",

56 "@noble/hashes": "2.4.0",

57 "@serenity-kit/opaque": "1.1.0",

58 "@types/cookie-parser": "^1.4.10",

59 "@types/csurf": "^1.11.5",

60 "@types/refractor": "^2.8.0",

61 "@use-gesture/react": "^10.3.1",

62 "@xterm/addon-clipboard": "^0.3.0-beta.287",

63 "@xterm/addon-fit": "^0.12.0-beta.287",

64 "@xterm/addon-image": "^0.10.0-beta.287",

dist/server/certificateWatcher.jsView file

Lines 1-21javascript

1import { EventEmitter } from 'events';

2import { execFile } from 'child_process';

3import { promisify } from 'util';

High

Child Process

Package source references child process execution.

dist/server/certificateWatcher.jsView on unpkg · L1

dist/server/utils/bootCheck.jsView file

Lines 31-71javascript

31 }

32 catch { /* not in PATH */ }

33 // macOS non-interactive SSH 的 PATH 不包含 Homebrew 路径，手动检查

34 const extraPaths = [

35 '/opt/homebrew/bin',

36 '/usr/local/bin'

dist/client/assets/passwordBootstrap-DwalkAEW.jsView file

Lines 1-3javascript

1import{m as JA,w as oA,n as y,aT as EA,aH as cA,D as z,a0 as hA,bY as DA,p as GA,b_ as AA,bx as G,bS as wA,s as aA,aG

dist/server/utils/ensureNodePty.jsView file

Lines 1-10javascript

1import { createRequire } from 'node:module';

2// Both src/server/utils and dist/server/utils resolve to the shipped scripts.

3const require = createRequire(import.meta.url);

4export function

dist/server/routes/terminal.jsView file

Lines 1-34javascript

1import { ensureNodePty } from '../utils/ensureNodePty.js';

2import { PtySpawnBackoff, PtySpawnDeferredError } from '../utils/ptySpawnBackoff.js';

3import { collaborationGroupRoutes } from '../agent/collaborationGroupRoutes.js';

4import { TerminalClientAttachment } from '../utils/terminalClientAttachment.js'

dist/server/cli.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// libuv 线程池默认只有 4 个线程，慢/挂起的异步 IO（fs.promises、crypto 等）

3// 会把池耗尽，表现为整个服务的 IO 全部卡死。必须在任何异步 fs 调用之前

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。

5process.env.UV_THREADPOOL_SIZE ||= '16';

6import { config as loadDotenv } from 'dotenv';

scripts/postinstall.mjsView file

10L11: import { execSync, spawnSync } from 'child_process'; L12: import { createRequire } from 'module'; ... L31: const r = spawnSync(cmd, [], { shell: true, timeout: timeoutMs, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }); L32: return { ok: r.status === 0, stdout: r.stdout, stderr: r.stderr }; L33: } catch { ... L51: const { ensureNodePty } = require_('./ensure-node-pty.cjs'); L52: const PTY_PATH = require_.resolve('node-pty/package.json', { paths: [pkgRoot] }).replace('/package.json', ''); L53: ... L83: const pty = require_(PTY_PATH); L84: const proc = pty.spawn(process.env.SHELL || '/bin/bash', [], { name: 'xterm', cols: 80, rows: 24 }); L85: proc.kill();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.mjsView on unpkg · L10

dist/server/agent/installers.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path'; import { execfile, spawn } from 'node:child_process'; import { agentbyslug, ispluginagent } from './registry.js'; import { loadplugins, resolvehooktarget } from './plugins.js'; export const hook_agents = ['claude', 'codex', 'copilot', 'opencode', 'pi', 'grok', 'kimi']; const display_names = { claude: 'claude code', codex: 'codex', copilot: 'copilot cli', opencode: 'opencode', pi: 'pi', grok: 'grok build', kimi: 'kimi code', };

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/server/agent/installers.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/installers.jsView on unpkg

dist/client/assets/terminal-C7X98Amf.jsView file

4contains invisible/control Unicode U+200E (left-to-right mark) `)})),this._register(this._bufferService.onResize(()=>this.queueSync())),this._register(this._bufferService.buffers.onBufferActivate(()=>{this._latestYDisp=void 0,this.queueSync()})),this._register(this._bufferService.onScroll(()=>this._syn

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/client/assets/terminal-C7X98Amf.jsView on unpkg · L4

scripts/ensure-node-pty.cjsView file

15source = source.replace(' int stat_loc;', ' int stat_loc = 0;'); L16: source = source.replace(' }\n#else\n while (true)', ' }\n if (kq >= 0) close(kq);\n#else\n while (true)'); L17: source = source.replace('throw Napi::Error::New(napiEnv, "posix_spawnp failed.");',

Critical

Protestware

Package source matches protestware-related patterns.

scripts/ensure-node-pty.cjsView on unpkg · L15

51console.log('Rebuilding node-pty with the Termdock macOS FD cleanup fix...'); L52: const result = spawnSync('npx', ['--yes', 'node-gyp', 'rebuild'], { L53: cwd: ptyRoot, stdio: 'inherit', timeout: 180_000,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/ensure-node-pty.cjsView on unpkg · L51

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/client/sw-encrypted-background.js.brView file

•path = dist/client/sw-encrypted-background.js.br kind = high_entropy_blob sizeBytes = 64490 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/sw-encrypted-background.js.brView on unpkg

•path = dist/client/sw-encrypted-background.js.br kind = compressed_blob sizeBytes = 64490 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/client/sw-encrypted-background.js.brView on unpkg

dist/client/assets/chunk-TICWLB2K-B10O7y1x.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/client/assets/chunk-TICWLB2K-B10O7y1x.js#virtual:normalized:round1View on unpkg

dist/server/agent/pluginPackages.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = [redacted].js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/pluginPackages.jsView on unpkg

dist/server/utils/npmUpdate.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/server/utils/npmUpdate.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/npmUpdate.jsView on unpkg

dist/client/assets/DiffViewer-DyC8uspo.jsView file

•matchType = token_shingles matchedPackage = termdock@1.4.181 matchedPath = dist/client/assets/DiffViewer-Bg272xI5.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/DiffViewer-DyC8uspo.jsView on unpkg

dist/server/agent/titleNamerCatalog.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/titleNamerCatalog.jsView on unpkg

dist/server/ptyhost/manager.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/server/ptyhost/manager.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

dist/client/assets/index-UqXCGE5m.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/client/assets/index-UqXCGE5m.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/index-UqXCGE5m.jsView on unpkg

dist/server/utils/gitStatus.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/server/utils/gitStatus.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/gitStatus.jsView on unpkg

dist/client/assets/diagram-VX7I27RA-BO1XNjDC.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/client/assets/diagram-VX7I27RA-BUjfRaI7.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/diagram-VX7I27RA-BO1XNjDC.jsView on unpkg

dist/client/assets/flowDiagram-HODETNUW-C34wUKry.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = dist/client/assets/flowDiagram-HODETNUW-nKpOA9LA.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/flowDiagram-HODETNUW-C34wUKry.jsView on unpkg

Source & flagged code

32 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/server/certificateWatcher.jsView file

1import { EventEmitter } from 'events'; L2: import { execFile } from 'child_process'; L3: import { promisify } from 'util';

High

Child Process

Package source references child process execution.

dist/server/certificateWatcher.jsView on unpkg · L1

dist/server/utils/bootCheck.jsView file

51const r = spawnSync(cmd, [], { L52: shell: true, L53: timeout: timeoutMs,

High

Shell

Package source references shell execution.

dist/server/utils/bootCheck.jsView on unpkg · L51

dist/client/assets/passwordBootstrap-DwalkAEW.jsView file

1import{m as JA,w as oA,n as y,aT as EA,aH as cA,D as z,a0 as hA,bY as DA,p as GA,b_ as AA,bx as G,bS as wA,s as aA,aG as ZA}from"./app-DiV950OT.js";import"./react-XDCjal2T.js";impo... L2: ${g.stack}`:Q}function iA(g,A){return g=g>>>0,u().subarray(g/1,g/1+A)}let K=null;function l(){return(K===null||K.buffer.detached===!0||K.buffer.detached===void 0&&K.buffer!==k.memo...

High

Eval

Package source references dynamic code evaluation.

dist/client/assets/passwordBootstrap-DwalkAEW.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = termdock@1.4.181 matchedPath = [redacted]-CppLqzUc.js matchedIdentity = npm:dGVybWRvY2s:1.4.181 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/passwordBootstrap-DwalkAEW.jsView on unpkg

dist/server/utils/ensureNodePty.jsView file

2// Both src/server/utils and dist/server/utils resolve to the shipped scripts. L3: const require = createRequire(import.meta.url); L4: export function ensureNodePty() {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server/utils/ensureNodePty.jsView on unpkg · L2

dist/server/routes/terminal.jsView file

14Trigger-reachable persistence chain: manifest.exports -> dist/server/entry.js -> dist/server/routes/terminal.js L14: import QRCode from 'qrcode'; L15: import { execFile, spawn } from 'child_process'; L16: import { createHash, randomBytes, randomUUID } from 'crypto'; ... L67: const execFileAsync = promisify(execFile); L68: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L69: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`); ... L83: const raw = await fs.promises.readFile(filePath, 'utf-8'); L84: return JSON.parse(raw); L85: } ... L115: const require_ = createRequire(import.meta.url); L116: // dist/server/routes/terminal.js → ../../../package.json L117: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/server/routes/terminal.jsView on unpkg · L14

14import QRCode from 'qrcode'; L15: import { execFile, spawn } from 'child_process'; L16: import { createHash, randomBytes, randomUUID } from 'crypto'; ... L67: const execFileAsync = promisify(execFile); L68: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L69: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`); ... L83: const raw = await fs.promises.readFile(filePath, 'utf-8'); L84: return JSON.parse(raw); L85: } ... L115: const require_ = createRequire(import.meta.url); L116: // dist/server/routes/terminal.js → ../../../package.json L117: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/server/routes/terminal.jsView on unpkg · L14

dist/server/cli.jsView file

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); ... L19: import fs from 'fs'; L20: import http from 'http'; L21: import https from 'https'; ... L24: import { createHash, randomUUID } from 'crypto'; L25: import { spawn, spawnSync, execFile } from 'child_process'; L26: import { promisify } from 'util';

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/server/cli.jsView on unpkg · L4

4Trigger-reachable chain: scripts.start -> dist/server/cli.js L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); ... L19: import fs from 'fs'; L20: import http from 'http'; L21: import https from 'https'; ... L24: import { createHash, randomUUID } from 'crypto'; L25: import { spawn, spawnSync, execFile } from 'child_process'; L26: import { promisify } from 'util';

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/server/cli.jsView on unpkg · L4

4Detached bundled service listener: dist/server/cli.js spawns dist/server/entry.js; helper exposes a broad-bound HTTP listener. L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); ... L19: import fs from 'fs'; L20: import http from 'http'; L21: import https from 'https'; ... L24: import { createHash, randomUUID } from 'crypto'; L25: import { spawn, spawnSync, execFile } from 'child_process'; L26: import { promisify } from 'util';

scripts/postinstall.mjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.mjsView on unpkg · L10

dist/server/agent/installers.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/installers.jsView on unpkg

dist/client/assets/terminal-C7X98Amf.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/client/assets/terminal-C7X98Amf.jsView on unpkg · L4

scripts/ensure-node-pty.cjsView file

Critical

Protestware

Package source matches protestware-related patterns.

scripts/ensure-node-pty.cjsView on unpkg · L15

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/ensure-node-pty.cjsView on unpkg · L51

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/client/sw-encrypted-background.js.brView file

•path = dist/client/sw-encrypted-background.js.br kind = high_entropy_blob sizeBytes = 64490 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/sw-encrypted-background.js.brView on unpkg

•path = dist/client/sw-encrypted-background.js.br kind = compressed_blob sizeBytes = 64490 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/client/sw-encrypted-background.js.brView on unpkg

dist/client/assets/chunk-TICWLB2K-B10O7y1x.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/client/assets/chunk-TICWLB2K-B10O7y1x.js#virtual:normalized:round1View on unpkg

dist/server/agent/pluginPackages.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/pluginPackages.jsView on unpkg

dist/server/utils/npmUpdate.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/npmUpdate.jsView on unpkg

dist/client/assets/DiffViewer-DyC8uspo.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/DiffViewer-DyC8uspo.jsView on unpkg

dist/server/agent/titleNamerCatalog.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/titleNamerCatalog.jsView on unpkg

dist/server/ptyhost/manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

dist/client/assets/index-UqXCGE5m.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/index-UqXCGE5m.jsView on unpkg

dist/server/utils/gitStatus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/gitStatus.jsView on unpkg

dist/client/assets/diagram-VX7I27RA-BO1XNjDC.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/diagram-VX7I27RA-BO1XNjDC.jsView on unpkg

dist/client/assets/flowDiagram-HODETNUW-C34wUKry.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/flowDiagram-HODETNUW-C34wUKry.jsView on unpkg

Findings

4 Critical23 High8 Medium6 Low

CriticalDownload Executedist/server/cli.js

CriticalTrojan Source Unicodedist/client/assets/terminal-C7X98Amf.js

CriticalTrigger Reachable Dangerous Capabilitydist/server/cli.js

CriticalProtestwarescripts/ensure-node-pty.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/server/certificateWatcher.js

HighShelldist/server/utils/bootCheck.js

HighEvaldist/client/assets/passwordBootstrap-DwalkAEW.js

HighSandbox Evasion Gated Capabilityscripts/postinstall.mjs

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/server/agent/installers.js

HighSpawned Bundled Service Listenerdist/server/cli.js

HighTrigger Reachable Persistencedist/server/routes/terminal.js

HighRuntime Package Installscripts/ensure-node-pty.cjs

HighShips High Entropy Blobdist/client/sw-encrypted-background.js.br

HighSemantic Analysis Limiteddist/client/assets/chunk-TICWLB2K-B10O7y1x.js#virtual:normalized:round1

HighKnown Malware Source Similaritydist/server/cli.js

HighKnown Malware Source Similaritydist/server/agent/pluginPackages.js

HighKnown Malware Source Similaritydist/server/utils/npmUpdate.js

HighKnown Malware Source Similaritydist/client/assets/DiffViewer-DyC8uspo.js

HighKnown Malware Source Similaritydist/server/agent/installers.js

HighKnown Malware Source Similaritydist/server/agent/titleNamerCatalog.js

HighKnown Malware Source Similaritydist/server/ptyhost/manager.js

HighKnown Malware Source Similaritydist/client/assets/index-UqXCGE5m.js

HighKnown Malware Source Similaritydist/server/utils/gitStatus.js

HighKnown Malware Source Similaritydist/client/assets/diagram-VX7I27RA-BO1XNjDC.js

HighKnown Malware Source Similaritydist/client/assets/flowDiagram-HODETNUW-C34wUKry.js

HighKnown Malware Source Similaritydist/client/assets/passwordBootstrap-DwalkAEW.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/server/utils/ensureNodePty.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/server/routes/terminal.js

MediumShips Build Helperdist/client/shell-integration/termdock.bash

MediumShips Compressed Blobdist/client/sw-encrypted-background.js.br

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings