registry / termdock / 1.4.316

termdock@1.4.316

A complete web-based terminal application with modern UI

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Source confirms automatic refresh of stale Termdock hooks in agent configurations, which warrants a warning for agent extension lifecycle risk. The inspected behavior is consistent with terminal setup and does not establish malicious intent or a concrete attack.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Loading terminal routes at server startup; npm postinstall during package installation.

Impact

Agent configuration files may be updated automatically; tmux may be installed on the host.

Mechanism

Stale built-in agent hooks are reinstalled, and the postinstall script may invoke system package managers to install tmux.

AI rationale

Evidence

dist/server/routes/terminal.jsdist/server/agent/installers.jspackage.jsonscripts/postinstall.mjsagent configuration filessystem package-managed tmux installation

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The server refreshes stale agent hooks when terminal routes load.
That refresh installs Termdock hooks into supported agent configurations.
The package also runs a postinstall script that may install tmux using system package managers.

Evidence against

The agent hook API exposes installation as an explicit POST action.
The inspected behavior is package-aligned terminal and agent-hook setup; no exfiltration or remote payload execution was established.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 306 file(s), 11.8 MB of source, external domains: 127.0.0.1, 192.168.1.23, api.anthropic.com, api.github.com, api.kimi.com, api.openai.com, api.x.ai, bit.ly, brew.sh, bugzilla.mozilla.org, chatgpt.com, chevrotain.io, computer.example, en.wikipedia.org, generativelanguage.googleapis.com, github.com, jcgt.org, langium.org, reactjs.org, redux.js.org, registry.npmjs.org, term.example.com, termdock-preview.invalid, termdock.invalid, unpkg.com, www.w3.org

Source & flagged code

32 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/client/assets/app-BCTEfclM.jsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client/assets/app-BCTEfclM.jsView on unpkg · L2

dist/server/supervisor.jsView file

23*/ L24: import { spawn } from 'node:child_process'; L25: import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist/server/supervisor.jsView on unpkg · L23

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/supervisor.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/supervisor.jsView on unpkg

dist/server/utils/bootCheck.jsView file

51const r = spawnSync(cmd, [], { L52: shell: true, L53: timeout: timeoutMs,

High

Shell

Package source references shell execution.

dist/server/utils/bootCheck.jsView on unpkg · L51

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/utils/bootCheck.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/bootCheck.jsView on unpkg

dist/client/assets/diffWorker-BP4IBsm9.jsView file

20?| L21: |(?![\\s\\S])))+`,"m"),alias:i}}),Object.defineProperty(r.languages.diff,"PREFIXES",{value:n})})(t)}return Sn}var vn,ql;function me(){if(ql)return vn;ql=1,vn=e,e.displayName="marku... L22: \r]*'|"(?:\\.|[^\\\\"\r

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/client/assets/diffWorker-BP4IBsm9.jsView on unpkg · L20

dist/server/utils/version.jsView file

19try { L20: const require_ = createRequire(import.meta.url); L21: const packagePath = path.resolve(currentDir, '..', '..', '..', 'package.json');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server/utils/version.jsView on unpkg · L19

dist/server/routes/terminal.jsView file

28Trigger-reachable persistence chain: manifest.exports -> dist/server/entry.js -> dist/server/routes/terminal.js L28: import QRCode from 'qrcode'; L29: import { execFile, spawn } from 'child_process'; L30: import { createHash, randomBytes, randomUUID } from 'crypto'; ... L93: const execFileAsync = promisify(execFile); L94: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L95: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`); ... L111: const raw = await fs.promises.readFile(filePath, 'utf-8'); L112: return JSON.parse(raw); L113: } ... L143: const require_ = createRequire(import.meta.url); L144: // dist/server/routes/terminal.js → ../../../package.json L145: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/server/routes/terminal.jsView on unpkg · L28

28import QRCode from 'qrcode'; L29: import { execFile, spawn } from 'child_process'; L30: import { createHash, randomBytes, randomUUID } from 'crypto'; ... L93: const execFileAsync = promisify(execFile); L94: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L95: const automationStore = new AutomationStore(`${TERMDOCK_DIR}/automations.json`); ... L111: const raw = await fs.promises.readFile(filePath, 'utf-8'); L112: return JSON.parse(raw); L113: } ... L143: const require_ = createRequire(import.meta.url); L144: // dist/server/routes/terminal.js → ../../../package.json L145: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/server/routes/terminal.jsView on unpkg · L28

dist/server/ptyhost/manager.jsView file

264// must not die with (or be reaped by) this server. L265: const child = spawn(command, args, { L266: detached: true, L267: stdio: 'ignore', L268: env: process.env, L269: }); ... L274: return new Promise((resolvePromise, rejectPromise) => { L275: const conn = net.createConnection(ptyHostSocketPath()); L276: const timer = setTimeout(() => {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/server/ptyhost/manager.jsView on unpkg · L264

•matchType = normalized_sha256 matchedPackage = termdock@1.4.66 matchedPath = dist/server/ptyhost/manager.js matchedIdentity = npm:dGVybWRvY2s:1.4.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

scripts/postinstall.mjsView file

10L11: import { execSync, spawnSync } from 'child_process'; L12: import { createRequire } from 'module'; ... L31: const r = spawnSync(cmd, [], { shell: true, timeout: timeoutMs, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }); L32: return { ok: r.status === 0, stdout: r.stdout, stderr: r.stderr }; L33: } catch { ... L51: const { ensureNodePty } = require_('./ensure-node-pty.cjs'); L52: const PTY_PATH = require_.resolve('node-pty/package.json', { paths: [pkgRoot] }).replace('/package.json', ''); L53: ... L83: const pty = require_(PTY_PATH); L84: const proc = pty.spawn(process.env.SHELL || '/bin/bash', [], { name: 'xterm', cols: 80, rows: 24 }); L85: proc.kill();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.mjsView on unpkg · L10

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/server/agent/installers.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path'; import { execfile, spawn } from 'node:child_process'; import { agentbyslug, ispluginagent } from './registry.js'; import { loadplugins, resolvehooktarget } from './plugins.js'; export const hook_agents = ['claude', 'codex', 'copilot', 'opencode', 'pi', 'grok', 'kimi']; const display_names = { claude: 'claude code', codex: 'codex', copilot: 'copilot cli', opencode: 'opencode', pi: 'pi', grok: 'grok build', kimi: 'kimi code', };

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/agent/installers.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/installers.jsView on unpkg

dist/client/assets/terminal-C7X98Amf.jsView file

4contains invisible/control Unicode U+200E (left-to-right mark) `)})),this._register(this._bufferService.onResize(()=>this.queueSync())),this._register(this._bufferService.buffers.onBufferActivate(()=>{this._latestYDisp=void 0,this.queueSync()})),this._register(this._bufferService.onScroll(()=>this._syn

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/client/assets/terminal-C7X98Amf.jsView on unpkg · L4

dist/server/cli.jsView file

4Detached bundled service listener: dist/server/cli.js spawns dist/server/entry.js; helper exposes a broad-bound HTTP listener. L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); ... L28: import { getMissingCertificateNames } from './utils/certificateNames.js'; L29: import http from 'http'; L30: import https from 'https'; ... L33: import { createHash, randomUUID } from 'crypto'; L34: import { spawn, spawnSync, execFile } from 'child_process'; L35: import { promisify } from 'util';

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

dist/server/cli.jsView on unpkg · L4

scripts/ensure-node-pty.cjsView file

51console.log('Rebuilding node-pty with the Termdock macOS FD cleanup fix...'); L52: const result = spawnSync('npx', ['--yes', 'node-gyp', 'rebuild'], { L53: cwd: ptyRoot, stdio: 'inherit', timeout: 180_000,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/ensure-node-pty.cjsView on unpkg · L51

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/client/sw-encrypted-background.js.brView file

•path = dist/client/sw-encrypted-background.js.br kind = high_entropy_blob sizeBytes = 65011 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/sw-encrypted-background.js.brView on unpkg

•path = dist/client/sw-encrypted-background.js.br kind = compressed_blob sizeBytes = 65011 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/client/sw-encrypted-background.js.brView on unpkg

scripts/android-bitrate/bitrate.jarView file

•path = scripts/android-bitrate/bitrate.jar kind = nested_archive_needs_inspection sizeBytes = 2609 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

scripts/android-bitrate/bitrate.jarView on unpkg

dist/client/assets/chunk-TICWLB2K-fubKwUCg.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/client/assets/chunk-TICWLB2K-fubKwUCg.js#virtual:normalized:round1View on unpkg

dist/server/agent/pluginPackages.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = [redacted].js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/pluginPackages.jsView on unpkg

dist/server/android/adb.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/android/adb.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/android/adb.jsView on unpkg

dist/server/android/scrcpy.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/android/scrcpy.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/android/scrcpy.jsView on unpkg

dist/server/utils/npmUpdate.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/utils/npmUpdate.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/npmUpdate.jsView on unpkg

dist/client/assets/DiffViewer-DZfgjOBh.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/client/assets/DiffViewer-CYEoT3NM.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/DiffViewer-DZfgjOBh.jsView on unpkg

dist/server/agent/titleNamerCatalog.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/agent/titleNamerCatalog.jsView on unpkg

dist/server/android/recording.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/android/recording.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/android/recording.jsView on unpkg

Source & flagged code

32 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/client/assets/app-BCTEfclM.jsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/client/assets/app-BCTEfclM.jsView on unpkg · L2

Findings

1 Critical23 High9 Medium8 Low

CriticalTrojan Source Unicodedist/client/assets/terminal-C7X98Amf.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/server/supervisor.js

HighShelldist/server/utils/bootCheck.js

HighSame File Env Network Executiondist/server/ptyhost/manager.js

HighSandbox Evasion Gated Capabilityscripts/postinstall.mjs

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/server/agent/installers.js

HighSpawned Bundled Service Listenerdist/server/cli.js

HighTrigger Reachable Persistencedist/server/routes/terminal.js

HighRuntime Package Installscripts/ensure-node-pty.cjs

High

Affected versions and remediation

This report applies to termdock@1.4.316.

See all versions of termdock for other recorded verdicts.

Review the evidence and your use of termdock@1.4.316 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 02:38:17.727Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.