Loading npm security reports…

termdock@1.4.66: Malicious npm security report (Block) | LPM Firewall

registry / termdock / 1.4.66

termdock@1.4.66

A complete web-based terminal application with modern UI

AI Security Review

scanned 18d ago · by lpm-firewall-ai

Package installation executes privileged system package-manager commands to install tmux when it is missing. CLI and server startup repeat package installation and can rewrite existing AI-agent hooks.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation runs postinstall; later CLI or server startup runs boot and hook refresh checks.

Impact

It can alter dependency contents, install system software without consent, prompt for or use elevated privileges, and modify existing agent control integrations.

Mechanism

Shell commands delete dependency prebuilds, invoke npx rebuild, and run system package managers including sudo. Startup can reinstall stale hooks for configured agent integrations.

Attack narrative

Installing the package automatically launches a shell-driven postinstall. If tmux is missing, it attempts sudo-backed installs through several system package managers; it also deletes PTY prebuilds and invokes an unpinned npx rebuild. The same system mutation is retried on normal CLI startup, while server startup refreshes stale third-party agent hooks. These are unconsented lifecycle and startup mutations outside ordinary dependency installation.

AI rationale

The automatic postinstall and startup paths execute privileged system mutations and unpinned tooling without an explicit user command. The behavior is concrete install-hook abuse, not merely a declared terminal capability.

Evidence

package.jsonscripts/postinstall.mjsdist/server/utils/bootCheck.jsdist/server/routes/terminal.jsdist/server/agent/installers.jsnode_modules/node-pty/prebuilds/*

Source & flagged code

26 flagged

package.jsonView file

Lines 24-64json

24 "dev:client": "vite",

25 "dev:server": "cross-env PORT=9835 tsx watch src/server/entry.ts",

26 "build": "npm run clean && npm run build:client && npm run build:server && npm run build:runtime-manifest",

27 "build:desktop": "node scripts/prepare-desktop-tokens.mjs && tsc -p tsconfig.desktop.json",

28 "desktop:dev": "npm run build && npm run build:desktop && electron-forge start",

29 "desktop:prepare": "npm run build && npm run build:desktop && node scripts/prepare-desktop-runtime.mjs",

30 "desktop:make": "npm run desktop:prepare && electron-forge make",

31 "build:client": "vite build",

32 "build:server": "tsc -p tsconfig.server.json && node -e \"require('fs').chmodSync('dist/server/cli.js', 0o755)\"",

33 "build:runtime-manifest": "node scripts/generate-runtime-manifest.mjs",

34 "generate:pwa-assets": "pwa-assets-generator --config pwa-assets.config.ts",

35 "preview": "vite preview",

36 "start": "node dist/server/cli.js",

37 "lint": "tsc --noEmit",

38 "trace:diff": "node scripts/inspect-diff-trace.mjs",

39 "trace:fsio": "node scripts/inspect-fs-io.mjs",

40 "release:classify": "node scripts/classify-release.mjs",

41 "test": "vitest --passWithNoTests",

42 "test:ui": "vitest --ui",

43 "prepublishOnly": "npm run build",

44 "postinstall": "node scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L44

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L44

45 },

46 "dependencies": {

47 "@dnd-kit/core": "^6.3.1",

48 "@dnd-kit/sortable": "^10.0.0",

49 "@dnd-kit/utilities": "^3.2.2",

50 "@hello-pangea/dnd": "^18.0.1",

51 "@parcel/watcher": "^2.5.6",

52 "@types/cookie-parser": "^1.4.10",

53 "@types/csurf": "^1.11.5",

54 "@types/refractor": "^2.8.0",

55 "@use-gesture/react": "^10.3.1",

56 "@xterm/addon-clipboard": "^0.3.0-beta.287",

57 "@xterm/addon-fit": "^0.12.0-beta.287",

58 "@xterm/addon-image": "^0.10.0-beta.287",

59 "@xterm/addon-ligatures": "^0.11.0-beta.287",

60 "@xterm/addon-progress": "^0.3.0-beta.287",

61 "@xterm/addon-search": "^0.17.0-beta.287",

62 "@xterm/addon-serialize": "^0.15.0-beta.287",

63 "@xterm/addon-unicode11": "^0.10.0-beta.287",

64 "@xterm/addon-web-links": "^0.13.0-beta.287",

dist/server/certificateWatcher.jsView file

Lines 1-21javascript

1import { EventEmitter } from 'events';

2import { execFile } from 'child_process';

3import { promisify } from 'util';

High

Child Process

Package source references child process execution.

dist/server/certificateWatcher.jsView on unpkg · L1

dist/server/utils/bootCheck.jsView file

Lines 30-70javascript

30 }

31 catch { /* not in PATH */ }

32 // macOS non-interactive SSH 的 PATH 不包含 Homebrew 路径，手动检查

33 const extraPaths = [

34 '/opt/homebrew/bin',

35 '/usr/local/bin'

dist/server/utils/version.jsView file

Lines 1-34javascript

1import path from 'node:path';

2import { createRequire } from 'node:module';

3import { fileURLToPath } from 'node:url';

4const currentDir = path.

dist/server/routes/terminal.jsView file

Lines 1-27javascript

1import express from 'express';

2import fs from 'fs';

3import os from 'os';

4import path from 'path';

dist/server/cli.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// libuv 线程池默认只有 4 个线程，慢/挂起的异步 IO（fs.promises、crypto 等）

3// 会把池耗尽，表现为整个服务的 IO 全部卡死。必须在任何异步 fs 调用之前

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。

5process.env.UV_THREADPOOL_SIZE ||= '16';

6import { config as loadDotenv } from 'dotenv';

dist/server/agent/installers.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path'; import { execfile } from 'node:child_process'; import { agentbyslug, ispluginagent } from './registry.js'; import { loadplugins, resolvehooktarget } from './plugins.js'; export const hook_agents = ['claude', 'codex', 'copilot', 'opencode', 'pi', 'grok', 'kimi']; const display_names = { claude: 'claude code', codex: 'codex', copilot: 'copilot cli', opencode: 'opencode', pi: 'pi', grok: 'grok build', kimi: 'kimi code', };

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/server/utils/hunkApply.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server/utils/hunkApply.js#virtual:normalized:round1View on unpkg

scripts/postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.83 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:dGVybWRvY2s:1.4.83 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

scripts/prepare-desktop-runtime.mjsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.83 matchedPath = scripts/prepare-desktop-runtime.mjs matchedIdentity = npm:dGVybWRvY2s:1.4.83 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/prepare-desktop-runtime.mjsView on unpkg

dist/server/ptyhost/manager.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/ptyhost/manager.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

dist/client/assets/index-Ca-rq7yX.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/client/assets/index-UqXCGE5m.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/index-Ca-rq7yX.jsView on unpkg

dist/server/ptyHost.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.83 matchedPath = dist/server/ptyHost.js matchedIdentity = npm:dGVybWRvY2s:1.4.83 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyHost.jsView on unpkg

dist/server/utils/gitStatus.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/server/utils/gitStatus.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/gitStatus.jsView on unpkg

dist/client/assets/chunk-EX3LRPZG-DEtfNjsH.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/client/assets/chunk-IMKFNOWR-C_QAjdvx.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/chunk-EX3LRPZG-DEtfNjsH.jsView on unpkg

dist/client/assets/diagram-G47NLZAW-gFduWt1a.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = dist/client/assets/diagram-VX7I27RA-BJHjGgyM.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/diagram-G47NLZAW-gFduWt1a.jsView on unpkg

dist/client/assets/flowDiagram-23GEKE2U-CRJAvHMP.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.83 matchedPath = dist/client/assets/flowDiagram-23GEKE2U-BA0jWtlM.js matchedIdentity = npm:dGVybWRvY2s:1.4.83 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/flowDiagram-23GEKE2U-CRJAvHMP.jsView on unpkg

dist/client/assets/wardleyDiagram-EHGQE667-DDq3NCpq.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.268 matchedPath = [redacted]-VM6X3IG4-BFSHgvns.js matchedIdentity = npm:dGVybWRvY2s:1.4.268 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/wardleyDiagram-EHGQE667-DDq3NCpq.jsView on unpkg

dist/client/workbox-9c191d2f.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.83 matchedPath = dist/client/workbox-9c191d2f.js matchedIdentity = npm:dGVybWRvY2s:1.4.83 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/workbox-9c191d2f.jsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/server/certificateWatcher.jsView file

1import { EventEmitter } from 'events'; L2: import { execFile } from 'child_process'; L3: import { promisify } from 'util';

High

Child Process

Package source references child process execution.

dist/server/certificateWatcher.jsView on unpkg · L1

dist/server/utils/bootCheck.jsView file

50const r = spawnSync(cmd, [], { L51: shell: true, L52: timeout: timeoutMs,

High

Shell

Package source references shell execution.

dist/server/utils/bootCheck.jsView on unpkg · L50

•matchType = normalized_sha256 matchedPackage = termdock@1.4.83 matchedPath = dist/server/utils/bootCheck.js matchedIdentity = npm:dGVybWRvY2s:1.4.83 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/bootCheck.jsView on unpkg

dist/server/utils/version.jsView file

19try { L20: const require_ = createRequire(import.meta.url); L21: const packagePath = path.resolve(currentDir, '..', '..', '..', 'package.json');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server/utils/version.jsView on unpkg · L19

dist/server/routes/terminal.jsView file

7Trigger-reachable persistence chain: manifest.exports -> dist/server/entry.js -> dist/server/routes/terminal.js L7: import QRCode from 'qrcode'; L8: import { execFile, spawn } from 'child_process'; L9: import { randomUUID } from 'crypto'; ... L31: const execFileAsync = promisify(execFile); L32: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L33: async function readJsonFileIfExists(filePath) { ... L35: const raw = await fs.promises.readFile(filePath, 'utf-8'); L36: return JSON.parse(raw); L37: } ... L53: const require_ = createRequire(import.meta.url); L54: // dist/server/routes/terminal.js → ../../../package.json L55: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/server/routes/terminal.jsView on unpkg · L7

7import QRCode from 'qrcode'; L8: import { execFile, spawn } from 'child_process'; L9: import { randomUUID } from 'crypto'; ... L31: const execFileAsync = promisify(execFile); L32: const TERMDOCK_DIR = `${os.homedir()}/.termdock`; L33: async function readJsonFileIfExists(filePath) { ... L35: const raw = await fs.promises.readFile(filePath, 'utf-8'); L36: return JSON.parse(raw); L37: } ... L53: const require_ = createRequire(import.meta.url); L54: // dist/server/routes/terminal.js → ../../../package.json L55: const pkg = require_(path.join(__dirname || '', '..', '..', '..', 'package.json'));

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/server/routes/terminal.jsView on unpkg · L7

dist/server/cli.jsView file

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L13: import fs from 'fs'; L14: import http from 'http'; L15: import https from 'https'; ... L18: import { createHash, randomUUID } from 'crypto'; L19: import { spawn, execFile } from 'child_process'; L20: import { promisify } from 'util';

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/server/cli.jsView on unpkg · L4

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); L13: import fs from 'fs'; L14: import http from 'http'; L15: import https from 'https'; ... L18: import { createHash, randomUUID } from 'crypto'; L19: import { spawn, execFile } from 'child_process'; L20: import { promisify } from 'util';

Critical

Download Execute

Source downloads or fetches remote code and executes it.

dist/server/cli.jsView on unpkg · L4

4Trigger-reachable chain: scripts.start -> dist/server/cli.js L4: // 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。 L5: process.env.UV_THREADPOOL_SIZE ||= '16'; L6: import { config as loadDotenv } from 'dotenv'; ... L10: // dotenv 不会覆盖已存在的环境变量，因此系统环境变量和命令行参数优先级最高 L11: loadDotenv({ path: resolve(os.homedir(), '.termdock', '.env'), quiet: true }); L12: loadDotenv({ path: resolve(process.cwd(), '.env'), quiet: true }); L13: import fs from 'fs'; L14: import http from 'http'; L15: import https from 'https'; ... L18: import { createHash, randomUUID } from 'crypto'; L19: import { spawn, execFile } from 'child_process'; L20: import { promisify } from 'util';

dist/server/agent/installers.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/server/utils/hunkApply.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server/utils/hunkApply.js#virtual:normalized:round1View on unpkg

scripts/postinstall.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

scripts/prepare-desktop-runtime.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/prepare-desktop-runtime.mjsView on unpkg

dist/server/ptyhost/manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

dist/client/assets/index-Ca-rq7yX.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/index-Ca-rq7yX.jsView on unpkg

dist/server/ptyHost.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyHost.jsView on unpkg

dist/server/utils/gitStatus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/gitStatus.jsView on unpkg

dist/client/assets/chunk-EX3LRPZG-DEtfNjsH.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/chunk-EX3LRPZG-DEtfNjsH.jsView on unpkg

dist/client/assets/diagram-G47NLZAW-gFduWt1a.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/diagram-G47NLZAW-gFduWt1a.jsView on unpkg

dist/client/assets/flowDiagram-23GEKE2U-CRJAvHMP.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/flowDiagram-23GEKE2U-CRJAvHMP.jsView on unpkg

dist/client/assets/wardleyDiagram-EHGQE667-DDq3NCpq.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/wardleyDiagram-EHGQE667-DDq3NCpq.jsView on unpkg

dist/client/workbox-9c191d2f.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/workbox-9c191d2f.jsView on unpkg

Source & flagged code

26 flagged

package.jsonView file

Lines 24-64json

24 "dev:client": "vite",

25 "dev:server": "cross-env PORT=9835 tsx watch src/server/entry.ts",

26 "build": "npm run clean && npm run build:client && npm run build:server && npm run build:runtime-manifest",

27 "build:desktop": "node scripts/prepare-desktop-tokens.mjs && tsc -p tsconfig.desktop.json",

28 "desktop:dev": "npm run build && npm run build:desktop && electron-forge start",

29 "desktop:prepare": "npm run build && npm run build:desktop && node scripts/prepare-desktop-runtime.mjs",

30 "desktop:make": "npm run desktop:prepare && electron-forge make",

31 "build:client": "vite build",

32 "build:server": "tsc -p tsconfig.server.json && node -e \"require('fs').chmodSync('dist/server/cli.js', 0o755)\"",

33 "build:runtime-manifest": "node scripts/generate-runtime-manifest.mjs",

34 "generate:pwa-assets": "pwa-assets-generator --config pwa-assets.config.ts",

35 "preview": "vite preview",

36 "start": "node dist/server/cli.js",

37 "lint": "tsc --noEmit",

38 "trace:diff": "node scripts/inspect-diff-trace.mjs",

39 "trace:fsio": "node scripts/inspect-fs-io.mjs",

40 "release:classify": "node scripts/classify-release.mjs",

41 "test": "vitest --passWithNoTests",

42 "test:ui": "vitest --ui",

43 "prepublishOnly": "npm run build",

44 "postinstall": "node scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L44

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L44

45 },

46 "dependencies": {

47 "@dnd-kit/core": "^6.3.1",

48 "@dnd-kit/sortable": "^10.0.0",

49 "@dnd-kit/utilities": "^3.2.2",

50 "@hello-pangea/dnd": "^18.0.1",

51 "@parcel/watcher": "^2.5.6",

52 "@types/cookie-parser": "^1.4.10",

53 "@types/csurf": "^1.11.5",

54 "@types/refractor": "^2.8.0",

55 "@use-gesture/react": "^10.3.1",

56 "@xterm/addon-clipboard": "^0.3.0-beta.287",

57 "@xterm/addon-fit": "^0.12.0-beta.287",

58 "@xterm/addon-image": "^0.10.0-beta.287",

59 "@xterm/addon-ligatures": "^0.11.0-beta.287",

60 "@xterm/addon-progress": "^0.3.0-beta.287",

61 "@xterm/addon-search": "^0.17.0-beta.287",

62 "@xterm/addon-serialize": "^0.15.0-beta.287",

63 "@xterm/addon-unicode11": "^0.10.0-beta.287",

64 "@xterm/addon-web-links": "^0.13.0-beta.287",

dist/server/certificateWatcher.jsView file

Lines 1-21javascript

1import { EventEmitter } from 'events';

2import { execFile } from 'child_process';

3import { promisify } from 'util';

High

Child Process

Package source references child process execution.

dist/server/certificateWatcher.jsView on unpkg · L1

dist/server/utils/bootCheck.jsView file

Lines 30-70javascript

30 }

31 catch { /* not in PATH */ }

32 // macOS non-interactive SSH 的 PATH 不包含 Homebrew 路径，手动检查

33 const extraPaths = [

34 '/opt/homebrew/bin',

35 '/usr/local/bin'

dist/server/utils/version.jsView file

Lines 1-34javascript

1import path from 'node:path';

2import { createRequire } from 'node:module';

3import { fileURLToPath } from 'node:url';

4const currentDir = path.

dist/server/routes/terminal.jsView file

Lines 1-27javascript

1import express from 'express';

2import fs from 'fs';

3import os from 'os';

4import path from 'path';

dist/server/cli.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// libuv 线程池默认只有 4 个线程，慢/挂起的异步 IO（fs.promises、crypto 等）

3// 会把池耗尽，表现为整个服务的 IO 全部卡死。必须在任何异步 fs 调用之前

4// 设置（同步 fs 不占线程池，所以放在文件体顶部仍然足够早）。

5process.env.UV_THREADPOOL_SIZE ||= '16';

6import { config as loadDotenv } from 'dotenv';

dist/server/agent/installers.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/agent/installers.jsView on unpkg

dist/client/shell-integration/termdock.bashView file

•path = dist/client/shell-integration/termdock.bash kind = build_helper sizeBytes = 3514 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/client/shell-integration/termdock.bashView on unpkg

dist/server/utils/hunkApply.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server/utils/hunkApply.js#virtual:normalized:round1View on unpkg

scripts/postinstall.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.mjsView on unpkg

scripts/prepare-desktop-runtime.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/prepare-desktop-runtime.mjsView on unpkg

dist/server/ptyhost/manager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyhost/manager.jsView on unpkg

dist/client/assets/index-Ca-rq7yX.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/index-Ca-rq7yX.jsView on unpkg

dist/server/ptyHost.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/ptyHost.jsView on unpkg

dist/server/utils/gitStatus.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/utils/gitStatus.jsView on unpkg

dist/client/assets/chunk-EX3LRPZG-DEtfNjsH.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/chunk-EX3LRPZG-DEtfNjsH.jsView on unpkg

dist/client/assets/diagram-G47NLZAW-gFduWt1a.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/diagram-G47NLZAW-gFduWt1a.jsView on unpkg

dist/client/assets/flowDiagram-23GEKE2U-CRJAvHMP.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/flowDiagram-23GEKE2U-CRJAvHMP.jsView on unpkg

dist/client/assets/wardleyDiagram-EHGQE667-DDq3NCpq.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/assets/wardleyDiagram-EHGQE667-DDq3NCpq.jsView on unpkg

dist/client/workbox-9c191d2f.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client/workbox-9c191d2f.jsView on unpkg

termdock@1.4.66

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code