Loading npm security reports…
termdock@1.4.244: Agent extension lifecycle risk – flagged | LPM Firewall
Flagged as agent extension risk
Allowed by default with warning: install-time first-party agent extension setup was detected.
scanned 1mo ago · by lpm-firewall-ai This is a real web-terminal product, not an install-time malware dropper: postinstall only prepares node-pty and tmux, and there is no lifecycle self-dependency. It still warrants a warning because it can rewrite several AI-agent hook configs and read local agent tokens as first-party extension setup.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm install runs postinstall; starting the Termdock server refreshes stale hooks; users install hooks through the CLI or HTTP API.
Impact
Agent hook files can be rewritten and local agent credentials can be used against official provider APIs without a second password prompt.
Mechanism
first-party agent hook installers plus local token discovery
AI rationale
This is a real web-terminal product, not an install-time malware dropper: postinstall only prepares node-pty and tmux, and there is no lifecycle self-dependency. It still warrants a warning because it can rewrite several AI-agent hook configs and read local agent tokens as first-party extension setup.
Evidence
package.json scripts/postinstall.mjs dist/server/agent/installers.js dist/server/routes/terminal.js dist/server/quota/tokenDiscovery.js ~/.claude/settings.json ~/.codex/hooks.json ~/.copilot/hooks/termdock.json ~/.config/opencode/plugins/termdock.js ~/.pi/agent/extensions/termdock/index.ts ~/.grok/hooks/termdock.json ~/.kimi-code/config.toml ~/.termdock/.boot-check-ok
Network endpoints6
api.anthropic.com /api/oauth/usageapi.openai.com /v1/organization/usageapi.github.com /copilot/usage
public snapshot AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
npm postinstall rebuilds node-pty and may auto-install tmux, including sudo package-manager commands. Built-in installers write Termdock hook commands into Claude, Codex, Copilot, OpenCode, Pi, Grok, and Kimi config paths. Starting the Termdock server rewrites already-installed stale hooks in those agent configs. Quota code reads OAuth tokens and API keys from local agent credential files. Users can install those hooks later through the HTTP API and CLI. Evidence against
postinstall does not write agent configs; it only rebuilds node-pty, installs tmux, and writes ~/.termdock/.boot-check-ok. Hook writes are marker-guarded, skip user-authored entries, and are invoked by CLI or API, not by the npm install hook. package.json has no runtime self-dependency on termdock; quota calls official provider APIs. Scanner similarity hits large product files of this same web terminal, not a hidden dropper. Behavioral surface
Source ChildProcess Crypto EnvironmentVars Eval
31 flagged · loading source • scripts.postinstall = node scripts/postinstall.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/postinstall.mjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg dist/server/utils/kicadBoardInspection.js View file 1 import { execFile } from 'child_process';
L2: const KICAD_INSPECTION_SCRIPT = String.raw `
High Child Process
Package source references child process execution.
dist/server/utils/kicadBoardInspection.js View on unpkg · L1 3 Critical 24 High 7 Medium 6 Low
Critical Download Execute .desktop-dist/main.js
Critical Trojan Source Unicode dist/client/assets/terminal-C7X98Amf.js
Critical Trigger Reachable Dangerous Capability .desktop-dist/main.js
High Install Time Lifecycle Scripts package.json
High Child Process dist/server/utils/kicadBoardInspection.js
High Shell dist/server/utils/bootCheck.js
High Eval dist/client/assets/passwordBootstrap-CnQozPhg.js
High Same File Env Network Execution dist/server/ptyhost/manager.js
High Sandbox Evasion Gated Capability scripts/postinstall.mjs
High Trigger Reachable External Ai Agent Control Surface Mutation dist/server/agent/installers.js
Affected versions and remediation This report applies to termdock@1.4.244 .
See all versions of termdock for other recorded verdicts.
Review the evidence and your use of termdock@1.4.244 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-17 08:05:52.073Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
api.x.ai
api.kimi.com /coding/v1/usages
registry.npmjs.org
Filesystem
Network
Shell
WebSocket
Supply chain HighEntropyStrings Minified PossibleObfuscation Telemetry UrlStrings
Manifest No manifest risk signals triggered.
scanned 236 file(s), 10.3 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.kimi.com, api.openai.com, api.x.ai, bit.ly, brew.sh, bugzilla.mozilla.org, chatgpt.com, chevrotain.io, en.wikipedia.org, generativelanguage.googleapis.com, github.com, jcgt.org, langium.org, nodejs.org, reactjs.org, redux.js.org, registry.npmjs.org, term.example.com, termdock-preview.invalid, termdock.invalid, www.w3.org
51 const r = spawnSync(cmd, [], {
L52: shell: true,
L53: timeout: timeoutMs,
High Shell
Package source references shell execution.
dist/server/utils/bootCheck.js View on unpkg · L51 • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/utils/bootCheck.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/utils/bootCheck.js View on unpkg dist/client/assets/passwordBootstrap-CnQozPhg.js View file 1 import{p as JA,F as oA,q as y,bd as EA,a$ as cA,J as z,a5 as hA,cs as DA,s as GA,cw as AA,bY as G,ck as wA,w as aA,a_ as ZA}from"./app-D3aiC8mC.js";import"./react-XDCjal2T.js";impo...
L2: ${g.stack}`:Q}function iA(g,A){return g=g>>>0,u().subarray(g/1,g/1+A)}let K=null;function l(){return(K===null||K.buffer.detached===!0||K.buffer.detached===void 0&&K.buffer!==k.memo...
High Eval
Package source references dynamic code evaluation.
dist/client/assets/passwordBootstrap-CnQozPhg.js View on unpkg · L1 16 Trigger-reachable persistence chain: manifest.exports -> dist/server/entry.js -> dist/server/routes/terminal.js
L16: import QRCode from 'qrcode';
L17: import { execFile, spawn } from 'child_process';
L18: import { createHash, randomBytes, randomUUID } from 'crypto';
...
L69: const execFileAsync = promisify(execFile);
L70: const TERMDOCK_DIR = `${os.homedir()}/.termdock`;
L71: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`);
...
L85: const raw = await fs.promises.readFile(filePath, 'utf-8');
L86: return JSON.parse(raw);
L87: }
...
L117: const require_ = createRequire(import.meta.url);
L118: // dist/server/routes/terminal.js → ../../../package.json
L119: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));
High Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/server/routes/terminal.js View on unpkg · L16 • matchType = token_shingles
matchedPackage = termdock@1.4.233
matchedPath = dist/server/routes/terminal.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/routes/terminal.js View on unpkg 16 import QRCode from 'qrcode';
L17: import { execFile, spawn } from 'child_process';
L18: import { createHash, randomBytes, randomUUID } from 'crypto';
...
L69: const execFileAsync = promisify(execFile);
L70: const TERMDOCK_DIR = `${os.homedir()}/.termdock`;
L71: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`);
...
L85: const raw = await fs.promises.readFile(filePath, 'utf-8');
L86: return JSON.parse(raw);
L87: }
...
L117: const require_ = createRequire(import.meta.url);
L118: // dist/server/routes/terminal.js → ../../../package.json
L119: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));
Medium Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/server/routes/terminal.js View on unpkg · L16 264 // must not die with (or be reaped by) this server.
L265: const child = spawn(command, args, {
L266: detached: true,
L267: stdio: 'ignore',
L268: env: process.env,
L269: });
...
L274: return new Promise((resolvePromise, rejectPromise) => {
L275: const conn = net.createConnection(ptyHostSocketPath());
L276: const timer = setTimeout(() => {
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/server/ptyhost/manager.js View on unpkg · L264 • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/ptyhost/manager.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/ptyhost/manager.js View on unpkg 6 import { app, BrowserWindow, clipboard, dialog, ipcMain, Menu, net, nativeImage, Notification, powerMonitor, screen, session, shell, Tray, } from 'electron';
L7: import { execFile, spawn } from 'node:child_process';
L8: import crypto from 'node:crypto';
...
L10: import fs from 'node:fs';
L11: import http from 'node:http';
L12: import https from 'node:https';
...
L29: const projectRoot = path.resolve(currentDir, '..');
L30: const termdockDir = path.join(os.homedir(), '.termdock');
L31: const desktopConfigPath = path.join(termdockDir, 'desktop.json');
...
L56: function triggerLocalNetworkPermission() {
L57: if (process.platform !== 'darwin')
L58: return;
Critical Download Execute
Source downloads or fetches remote code and executes it.
.desktop-dist/main.js View on unpkg · L6 6 Trigger-reachable chain: manifest.main -> .desktop-dist/main.js
L6: import { app, BrowserWindow, clipboard, dialog, ipcMain, Menu, net, nativeImage, Notification, powerMonitor, screen, session, shell, Tray, } from 'electron';
L7: import { execFile, spawn } from 'node:child_process';
L8: import crypto from 'node:crypto';
...
L10: import fs from 'node:fs';
L11: import http from 'node:http';
L12: import https from 'node:https';
...
L29: const projectRoot = path.resolve(currentDir, '..');
L30: const termdockDir = path.join(os.homedir(), '.termdock');
L31: const desktopConfigPath = path.join(termdockDir, 'desktop.json');
...
L56: function triggerLocalNetworkPermission() {
L57: if (process.platform !== 'darwin')
L58: return;
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
.desktop-dist/main.js View on unpkg · L6 10 L11: import { execSync, spawnSync } from 'child_process';
L12: import { createRequire } from 'module';
...
L31: const r = spawnSync(cmd, [], { shell: true, timeout: timeoutMs, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
L32: return { ok: r.status === 0, stdout: r.stdout, stderr: r.stderr };
L33: } catch {
...
L51: const { ensureNodePty } = require_('./ensure-node-pty.cjs');
L52: const PTY_PATH = require_.resolve('node-pty/package.json', { paths: [pkgRoot] }).replace('/package.json', '');
L53:
...
L83: const pty = require_(PTY_PATH);
L84: const proc = pty.spawn(process.env.SHELL || '/bin/bash', [], { name: 'xterm', cols: 80, rows: 24 });
L85: proc.kill();
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/postinstall.mjs View on unpkg · L10 • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = scripts/postinstall.mjs
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/postinstall.mjs View on unpkg • Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import fs from 'node:fs';
import os from 'node:os';
import path from 'node:path';
import { execfile, spawn } from 'node:child_process';
import { agentbyslug, ispluginagent } from './registry.js';
import { loadplugins, resolvehooktarget } from './plugins.js';
export const hook_agents = ['claude', 'codex', 'copilot', 'opencode', 'pi', 'grok', 'kimi'];
const display_names = {
claude: 'claude code',
codex: 'codex',
copilot: 'copilot cli',
opencode: 'opencode',
pi: 'pi',
grok: 'grok build',
kimi: 'kimi code',
};
High Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/server/agent/installers.js View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/agent/installers.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/installers.js View on unpkg dist/client/assets/terminal-C7X98Amf.js View file 4 contains invisible/control Unicode U+200E (left-to-right mark)
`)})),this._register(this._bufferService.onResize(()=>this.queueSync())),this._register(this._bufferService.buffers.onBufferActivate(()=>{this._latestYDisp=void 0,this.queueSync()})),this._register(this._bufferService.onScroll(()=>this._syn
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/assets/terminal-C7X98Amf.js View on unpkg · L4 4 Detached bundled service listener: dist/server/cli.js spawns dist/server/entry.js; helper exposes a broad-bound HTTP listener.
L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。
L5: process.env.UV_THREADPOOL_SIZE ||= '16';
L6: import { config as loadDotenv } from 'dotenv';
...
L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高
L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true });
L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true });
...
L23: import { getMissingCertificateNames } from './utils/certificateNames.js';
L24: import http from 'http';
L25: import https from 'https';
...
L28: import { createHash, randomUUID } from 'crypto';
L29: import { spawn, spawnSync, execFile } from 'child_process';
L30: import { promisify } from 'util';
High Spawned Bundled Service Listener
Source launches a detached bundled service that exposes a broad-bound HTTP listener.
dist/server/cli.js View on unpkg · L4 51 console.log('Rebuilding node-pty with the Termdock macOS FD cleanup fix...');
L52: const result = spawnSync('npx', ['--yes', 'node-gyp', 'rebuild'], {
L53: cwd: ptyRoot, stdio: 'inherit', timeout: 180_000,
High Runtime Package Install
Package source invokes a package manager install command at runtime.
scripts/ensure-node-pty.cjs View on unpkg · L51 dist/client/shell-integration/termdock.bash View file • path = dist/client/shell-integration/termdock.bash
kind = build_helper
sizeBytes = 3514
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
dist/client/shell-integration/termdock.bash View on unpkg dist/client/sw-encrypted-background.js.br View file • path = dist/client/sw-encrypted-background.js.br
kind = high_entropy_blob
sizeBytes = 64690
magicHex = [redacted]
High Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dist/client/sw-encrypted-background.js.br View on unpkg • path = dist/client/sw-encrypted-background.js.br
kind = compressed_blob
sizeBytes = 64690
magicHex = [redacted]
Medium Ships Compressed Blob
Package ships compressed or archive-like blobs.
dist/client/sw-encrypted-background.js.br View on unpkg dist/client/assets/chunk-TICWLB2K-CUxOG8CH.js#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/client/assets/chunk-TICWLB2K-CUxOG8CH.js#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = scripts/prepare-desktop-runtime.mjs
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/prepare-desktop-runtime.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = [redacted].js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/pluginPackages.js View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/utils/npmUpdate.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/utils/npmUpdate.js View on unpkg dist/client/assets/DiffViewer-BrYrQJYY.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/client/assets/DiffViewer-D17tBMWn.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/DiffViewer-BrYrQJYY.js View on unpkg dist/server/agent/titleNamerCatalog.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = [redacted].js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/titleNamerCatalog.js View on unpkg dist/client/assets/index-UqXCGE5m.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/client/assets/index-UqXCGE5m.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/index-UqXCGE5m.js View on unpkg dist/server/agent/localSessionContext.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = [redacted].js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/localSessionContext.js View on unpkg High
Spawned Bundled Service Listener
dist/server/cli.js
High Trigger Reachable Persistence dist/server/routes/terminal.js
High Runtime Package Install scripts/ensure-node-pty.cjs
High Ships High Entropy Blob dist/client/sw-encrypted-background.js.br
High Semantic Analysis Limited dist/client/assets/chunk-TICWLB2K-CUxOG8CH.js#virtual:normalized:round1
High Known Malware Source Similarity dist/server/utils/bootCheck.js
High Known Malware Source Similarity scripts/postinstall.mjs
High Known Malware Source Similarity dist/server/routes/terminal.js
High Known Malware Source Similarity scripts/prepare-desktop-runtime.mjs
High Known Malware Source Similarity dist/server/agent/pluginPackages.js
High Known Malware Source Similarity dist/server/utils/npmUpdate.js
High Known Malware Source Similarity dist/client/assets/DiffViewer-BrYrQJYY.js
High Known Malware Source Similarity dist/server/agent/installers.js
High Known Malware Source Similarity dist/server/agent/titleNamerCatalog.js
High Known Malware Source Similarity dist/server/ptyhost/manager.js
High Known Malware Source Similarity dist/client/assets/index-UqXCGE5m.js
High Known Malware Source Similarity dist/server/agent/localSessionContext.js
Medium Ambiguous Install Lifecycle Script package.json
Medium Install Persistence dist/server/routes/terminal.js
Medium Ships Build Helper dist/client/shell-integration/termdock.bash
Medium Ships Compressed Blob dist/client/sw-encrypted-background.js.br
Medium Structural Risk Force Deep Review
Low Non Install Lifecycle Scripts
Entrypoints main → .desktop-dist/main.js exports map bin → td, termdock
Runtime node >=22.0.0
Artifact 31.1 MB · 775 files 2 signature(s)
Install lifecycle postinstall prepublishOnly
Behavioral surface ChildProcess Crypto EnvironmentVars Eval Filesystem Network Shell WebSocket HighEntropyStrings Minified PossibleObfuscation Telemetry UrlStrings Manifest: clean
31 flagged • scripts.postinstall = node scripts/postinstall.mjs
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg • scripts.postinstall = node scripts/postinstall.mjs
Medium Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.json View on unpkg dist/server/utils/kicadBoardInspection.js View file 1 import { execFile } from 'child_process';
L2: const KICAD_INSPECTION_SCRIPT = String.raw `
High Child Process
Package source references child process execution.
dist/server/utils/kicadBoardInspection.js View on unpkg · L1 Lines 31-71 javascript
32 catch { /* not in PATH */ }
33 // macOS non-interactive SSH 的 PATH 不包含 Homebrew 路径，手动检查
dist/client/assets/passwordBootstrap-CnQozPhg.js View file Lines 1-3 javascript
1 import {p as JA,F as oA,q as y,bd as EA,a$ as cA,J as z,a5 as hA,cs as DA,s as GA,cw as AA,bY as G,ck as wA,w as aA,a_
Lines 1-36 javascript
1 import { assertPeerRegistrationAuthority } from '../agent/collaborationPeerTransport.js' ;
2 import { progressRoutes } from '../notifications/progressRoutes.js' ;
3 import { ensureNodePty } from '../utils/ensureNodePty.js' ;
4 import { PtySpawnBackoff, PtySpawnDeferredError } from '../utils/ptySpawnBackoff.js'
264 // must not die with (or be reaped by) this server.
L265: const child = spawn(command, args, {
L266: detached: true,
L267: stdio: 'ignore',
L268: env: process.env,
L269: });
...
L274: return new Promise((resolvePromise, rejectPromise) => {
L275: const conn = net.createConnection(ptyHostSocketPath());
L276: const timer = setTimeout(() => {
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/server/ptyhost/manager.js View on unpkg · L264 • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/ptyhost/manager.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/ptyhost/manager.js View on unpkg 6 import { app, BrowserWindow, clipboard, dialog, ipcMain, Menu, net, nativeImage, Notification, powerMonitor, screen, session, shell, Tray, } from 'electron';
L7: import { execFile, spawn } from 'node:child_process';
L8: import crypto from 'node:crypto';
...
L10: import fs from 'node:fs';
L11: import http from 'node:http';
L12: import https from 'node:https';
...
L29: const projectRoot = path.resolve(currentDir, '..');
L30: const termdockDir = path.join(os.homedir(), '.termdock');
L31: const desktopConfigPath = path.join(termdockDir, 'desktop.json');
...
L56: function triggerLocalNetworkPermission() {
L57: if (process.platform !== 'darwin')
L58: return;
Critical Download Execute
Source downloads or fetches remote code and executes it.
.desktop-dist/main.js View on unpkg · L6 6 Trigger-reachable chain: manifest.main -> .desktop-dist/main.js
L6: import { app, BrowserWindow, clipboard, dialog, ipcMain, Menu, net, nativeImage, Notification, powerMonitor, screen, session, shell, Tray, } from 'electron';
L7: import { execFile, spawn } from 'node:child_process';
L8: import crypto from 'node:crypto';
...
L10: import fs from 'node:fs';
L11: import http from 'node:http';
L12: import https from 'node:https';
...
L29: const projectRoot = path.resolve(currentDir, '..');
L30: const termdockDir = path.join(os.homedir(), '.termdock');
L31: const desktopConfigPath = path.join(termdockDir, 'desktop.json');
...
L56: function triggerLocalNetworkPermission() {
L57: if (process.platform !== 'darwin')
L58: return;
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
.desktop-dist/main.js View on unpkg · L6 10 L11: import { execSync, spawnSync } from 'child_process';
L12: import { createRequire } from 'module';
...
L31: const r = spawnSync(cmd, [], { shell: true, timeout: timeoutMs, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
L32: return { ok: r.status === 0, stdout: r.stdout, stderr: r.stderr };
L33: } catch {
...
L51: const { ensureNodePty } = require_('./ensure-node-pty.cjs');
L52: const PTY_PATH = require_.resolve('node-pty/package.json', { paths: [pkgRoot] }).replace('/package.json', '');
L53:
...
L83: const pty = require_(PTY_PATH);
L84: const proc = pty.spawn(process.env.SHELL || '/bin/bash', [], { name: 'xterm', cols: 80, rows: 24 });
L85: proc.kill();
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/postinstall.mjs View on unpkg · L10 • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = scripts/postinstall.mjs
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/postinstall.mjs View on unpkg • Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import fs from 'node:fs';
import os from 'node:os';
import path from 'node:path';
import { execfile, spawn } from 'node:child_process';
import { agentbyslug, ispluginagent } from './registry.js';
import { loadplugins, resolvehooktarget } from './plugins.js';
export const hook_agents = ['claude', 'codex', 'copilot', 'opencode', 'pi', 'grok', 'kimi'];
const display_names = {
claude: 'claude code',
codex: 'codex',
copilot: 'copilot cli',
opencode: 'opencode',
pi: 'pi',
grok: 'grok build',
kimi: 'kimi code',
};
High Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/server/agent/installers.js View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/agent/installers.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/installers.js View on unpkg dist/client/assets/terminal-C7X98Amf.js View file 4 contains invisible/control Unicode U+200E (left-to-right mark)
`)})),this._register(this._bufferService.onResize(()=>this.queueSync())),this._register(this._bufferService.buffers.onBufferActivate(()=>{this._latestYDisp=void 0,this.queueSync()})),this._register(this._bufferService.onScroll(()=>this._syn
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/client/assets/terminal-C7X98Amf.js View on unpkg · L4 4 Detached bundled service listener: dist/server/cli.js spawns dist/server/entry.js; helper exposes a broad-bound HTTP listener.
L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。
L5: process.env.UV_THREADPOOL_SIZE ||= '16';
L6: import { config as loadDotenv } from 'dotenv';
...
L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高
L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true });
L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true });
...
L23: import { getMissingCertificateNames } from './utils/certificateNames.js';
L24: import http from 'http';
L25: import https from 'https';
...
L28: import { createHash, randomUUID } from 'crypto';
L29: import { spawn, spawnSync, execFile } from 'child_process';
L30: import { promisify } from 'util';
High Spawned Bundled Service Listener
Source launches a detached bundled service that exposes a broad-bound HTTP listener.
dist/server/cli.js View on unpkg · L4 51 console.log('Rebuilding node-pty with the Termdock macOS FD cleanup fix...');
L52: const result = spawnSync('npx', ['--yes', 'node-gyp', 'rebuild'], {
L53: cwd: ptyRoot, stdio: 'inherit', timeout: 180_000,
High Runtime Package Install
Package source invokes a package manager install command at runtime.
scripts/ensure-node-pty.cjs View on unpkg · L51 dist/client/shell-integration/termdock.bash View file • path = dist/client/shell-integration/termdock.bash
kind = build_helper
sizeBytes = 3514
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
dist/client/shell-integration/termdock.bash View on unpkg dist/client/sw-encrypted-background.js.br View file • path = dist/client/sw-encrypted-background.js.br
kind = high_entropy_blob
sizeBytes = 64690
magicHex = [redacted]
High Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dist/client/sw-encrypted-background.js.br View on unpkg • path = dist/client/sw-encrypted-background.js.br
kind = compressed_blob
sizeBytes = 64690
magicHex = [redacted]
Medium Ships Compressed Blob
Package ships compressed or archive-like blobs.
dist/client/sw-encrypted-background.js.br View on unpkg dist/client/assets/chunk-TICWLB2K-CUxOG8CH.js#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/client/assets/chunk-TICWLB2K-CUxOG8CH.js#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = scripts/prepare-desktop-runtime.mjs
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/prepare-desktop-runtime.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = [redacted].js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/pluginPackages.js View on unpkg • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/utils/npmUpdate.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/utils/npmUpdate.js View on unpkg dist/client/assets/DiffViewer-BrYrQJYY.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/client/assets/DiffViewer-D17tBMWn.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/DiffViewer-BrYrQJYY.js View on unpkg dist/server/agent/titleNamerCatalog.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = [redacted].js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/titleNamerCatalog.js View on unpkg dist/client/assets/index-UqXCGE5m.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/client/assets/index-UqXCGE5m.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/client/assets/index-UqXCGE5m.js View on unpkg dist/server/agent/localSessionContext.js View file • matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = [redacted].js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/agent/localSessionContext.js View on unpkg ,
37 '/opt/local/bin' , // MacPorts
39 for ( const dir of extraPaths) {
40 const fullPath = path. join (dir, bin);
42 fs. accessSync (fullPath, fs.constants. X_OK );
45 catch { /* not here */ }
49 function runQuiet ( cmd , timeoutMs = 30_000 ) {
51 const r = spawnSync (cmd, [], {
53 timeout: timeoutMs,
High Shell
Package source references shell execution.
dist/server/utils/bootCheck.js View on unpkg · L51 55 stdio: [ 'pipe' , 'pipe' , 'pipe' ],
57 return { ok: r.status === 0 , stdout: r.stdout, stderr: r.stderr };
60 return { ok: false , stdout: '' , stderr: '' };
63 // ---------------------------------------------------------------------------
65 // ---------------------------------------------------------------------------
66 function checkNodePty () {
67 const result = { ok: false , rebuilt: false };
69 const require_ = createRequire ( import . meta .url);
• matchType = normalized_sha256
matchedPackage = termdock@1.4.233
matchedPath = dist/server/utils/bootCheck.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/utils/bootCheck.js View on unpkg as
ZA}
from
"./app-D3aiC8mC.js"
;
import
"./react-XDCjal2T.js"
;
import
"./dnd-BCFAPC0L.js"
;
import
"./terminal-C7X98Amf.js"
;
function
MA
(
g
,
A
,
I
,
Q
){
JA
(g);
const
B
=
oA
({dkLen:
32
,asyncTick:
10
},
Q
),{
c
:
C
,
dkLen
:
E
,
asyncTick
:
D
}
=
B
;
if
(
y
(
C
,
"c"
),
y
(
E
,
"dkLen"
),
y
(
D
,
"asyncTick"
),
C
<
1
)
throw
new
Error
(
'"c" (iterations) must be >= 1'
);
if
(
E
<
1
)
throw
new
Error
(
'"dkLen" must be >= 1'
);
if
(
E
>
(
2
**
32
-
1
)
*
g.outputLen)
throw
new
Error
(
"derived key too long"
);
const
i
=
EA
(
A
,
"password"
);
try
{
const
N
=
EA
(
I
,
"salt"
);
try
{
const
o
=new
...
2 ${g.stack} `:Q}function iA(g,A){return g=g>>>0,u().subarray(g/1,g/1+A)}let K=null;function l(){return(K===null||K.buffer.detached===!0||K.buffer.detached===void 0&&K.buffer!==k.memory.buffer)&&(K=new DataView(k.memory.buffer)),K}function _(g,A){return g=g>>>0,WA(g,A)}let e=null;function u(){return(e===null||e.byteLength===0)&&(e=new Uint8Array(k.memory.buffer)),e}function x(g,A){try{return g.apply(this,A)}catch(I){const Q=t(I);k.__wbindgen_exn_store(Q)}}function j(g){return g==null}function IA(g,A,I){if(I===void 0){const D=v.encode(g),i=A(D.length,1)>>>0;return u().subarray(i,i+D.length).set(D) ...
High Eval
Package source references dynamic code evaluation.
dist/client/assets/passwordBootstrap-CnQozPhg.js View on unpkg · L1 Long lines were clipped for display.
;
5 import { collaborationGroupRoutes } from '../agent/collaborationGroupRoutes.js' ;
6 import { TerminalClientAttachment } from '../utils/terminalClientAttachment.js' ;
7 import { redrawTmuxClient } from '../utils/tmuxClientRedraw.js' ;
8 import { TmuxInitialScreen } from '../utils/tmuxInitialScreen.js' ;
9 import { TerminalOutputDelivery, resolveTerminalReplayCursor } from '../utils/terminalOutputDelivery.js' ;
10 import express from 'express' ;
13 import path from 'path' ;
14 import { createRequire } from 'module' ;
15 import { fileURLToPath } from 'url' ;
16 import QRCode from 'qrcode' ;
17 import { execFile, spawn } from 'child_process' ;
18 import { createHash, randomBytes, randomUUID } from 'crypto' ;
Medium Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/server/routes/terminal.js View on unpkg · L16 19 import { promisify } from 'util' ;
20 import { caffeinateManager } from '../utils/caffeinate.js' ;
21 import { DesktopRuntimeOwnerClient } from '../utils/desktopRuntimeOwner.js' ;
22 import { gitStatusCache } from '../utils/gitStatus.js' ;
23 import { getPtyHostManager } from '../ptyhost/manager.js' ;
24 import { pathValidator } from '../utils/pathValidator.js' ;
25 import { TERMINAL, TMUX } from '../config.js' ;
26 import { localAccessManager } from '../utils/localAccess.js' ;
27 import { normalizeLocalAccessName, getLocaleSetting, setLocaleSetting, getContextDraftHeightSetting, setContextDraftHeightSetting, getAutoRenameAgentsSetting, setAutoRenameAgentsSetting, getAutoRenameNamerSetting, setAutoRenameNamerSetting, getAutoRenameModelsSetting, setAutoRenameModelsSetting, getAutoRenameIntervalMinutesSetting, setAutoRenameIntervalMinutesSetting, getAutoRenamePromptPreferenceSetting, setAutoRenamePromptPreferenceSetting, getAutoRenamePromptPayloadCharsSetting, setAutoRenamePromptPayloadCharsSetting, getNewSessionAgentSlugSetting, setNewSessionAgentSlugSetting, getRunningS ...
28 import { loadContextDraft, saveContextDraft } from '../utils/contextDraft.js' ;
29 import { getOnboardingServerUrl } from '../onboardingServer.js' ;
30 import { inspectLinuxInotifyUsage, isWatchResourceExhaustion } from '../utils/fileWatchPolicy.js' ;
31 import { writeResponseChunk } from '../utils/httpResponse.js' ;
32 import { getFocusSequence, removeClientFocusState, scanFocusTrackingMode, setClientFocusState, } from '../utils/tmuxFocus.js' ;
33 import { extractProgramLabelFromArgs, normalizeProgramName, normalizeTmuxMetadataProgram, selectTmuxForegroundProgram, tmuxMetadataChanged, } from '../utils/tmuxProgramDetection.js' ;
34 import { agentBySlug, buildResumeCommand, detectAgentFromCommand, inferResumeSessionId, listAgents, } from '../agent/registry.js' ;
35 import { applyAgentEvent, agentEventMatchesCurrentAgent, defaultAgentSessionState, parseAgentEvent, } from '../agent/session.js' ;
36 import { canRestoreDeadAgentShell, isConfirmedAgentResumeProcess, normalizePersistedAgentResumeInfo, } from '../agent/resumePersistence.js' ;
Long lines were clipped for display.
16 Trigger-reachable persistence chain: manifest.exports -> dist/server/entry.js -> dist/server/routes/terminal.js
L16: import QRCode from 'qrcode';
L17: import { execFile, spawn } from 'child_process';
L18: import { createHash, randomBytes, randomUUID } from 'crypto';
...
L69: const execFileAsync = promisify(execFile);
L70: const TERMDOCK_DIR = `${os.homedir()}/.termdock`;
L71: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`);
...
L85: const raw = await fs.promises.readFile(filePath, 'utf-8');
L86: return JSON.parse(raw);
L87: }
...
L117: const require_ = createRequire(import.meta.url);
L118: // dist/server/routes/terminal.js → ../../../package.json
L119: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));
High Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/server/routes/terminal.js View on unpkg · L16 • matchType = token_shingles
matchedPackage = termdock@1.4.233
matchedPath = dist/server/routes/terminal.js
matchedIdentity = npm:dGVybWRvY2s:1.4.233
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/server/routes/terminal.js View on unpkg