Loading npm security reports…

thinkpool-pair@0.7.286: Suspicious npm security report (Warn) | LPM Firewall

registry / thinkpool-pair / 0.7.286

thinkpool-pair@0.7.286

Share a local coding-agent CLI (Claude Code, Codex, Gemini, Aider, …) into a ThinkPool Code room, live.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 80 file(s), 1.14 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.deepseek.com, api.minimax.io, api.moonshot.ai, api.z.ai, daytvtakmlixpfbbqzjd.supabase.co, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, thinkpool.io, www.apple.com

Source & flagged code

6 flagged

supabase-key.mjsView file

Lines 25-65javascript

25 3 network GET {WEB_BASE}/api/config. The rotation-repair path.

26 4 stale An expired cache beats the literal: it is strictly newer.

27 5 baked The legacy literal. First-ever boot with no network. Never fails.

29 TWO INVARIANTS, both tested in supabase-key.test.mjs:

31 · A service-shaped key is NEVER adopted, from any source. The network is an

32 input we do not control; a compromised or misconfigured config surface

33 must not be able to hand a user's laptop an RLS-bypassing client.

34 · No key material is ever logged. We log the SOURCE and the SHAPE. (C16.) */

36import os from 'node:os'

37import fs from 'node:fs'

38import path from 'node:path'

39import { classifyKey, isClientSafeKey } from './key-shape.mjs'

41export { classifyKey, isClientSafeKey }

43/* The legacy anon key. Public by design (the web bundle ships it), but now a

44 FALLBACK rather than the source of truth. Do not add new readers. */

45export const BAKED_ANON_KEY = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImRheXR2dGFrbWxpeHBmYmJxempkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzgwNTMxNzEsImV4cCI6MjA5MzYyOTE3MX0.zYmz8bHUNEY4STUr2JuXChAsKwxNwkwFHe1Hd0Betqo'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

supabase-key.mjsView on unpkg · L45

Critical

Secret Pattern

Supabase service role key (JWT) in supabase-key.mjs

supabase-key.mjsView on unpkg · L45

47export const DEFAULT_SUPABASE_URL = 'https://daytvtakmlixpfbbqzjd.supabase.co'

48export const DEFAULT_WEB_BASE = 'https://thinkpool.io'

50const CACHE_FILE = path.join(os.homedir(), '.thinkpool-pair', 'supabase-key.json')

51const CACHE_TTL_MS = 6 * 60 * 60 * 1000 // 6h — a rotation reaches a rebooting bridge same-day

52const FETCH_TIMEOUT_MS = 2000 // boot latency budget; the literal is right there

54// ── the on-disk cache ──────────────────────────────────────────────────────

55// Sits beside auth.json / dirs.json / served.json in ~/.thinkpool-pair.

56// Contains no secret (a publishable key), so no chmod dance — unlike auth.json.

57export function readCacheFile() {

58 try {

59 const rec = JSON.parse(fs.readFileSync(CACHE_FILE, 'utf8'))

60 if (!rec || typeof rec.key !== 'string' || typeof rec.url !== 'string') return null

61 return { key: rec.key, url: rec.url, at: Number(rec.at) || 0 }

62 } catch { return null }

63}

65export function writeCacheFile(rec) {

service.mjsView file

Lines 3-43javascript

3 so a customer's bridge survives reboot/logout and auto-restarts

4 on crash, on every platform:

5 • macOS → launchd LaunchAgent (KeepAlive)

6 • Linux → systemd --user unit (Restart=always)

7 • Windows → Startup-folder .cmd running --supervise

plan-meters.mjsView file

Lines 1-22javascript

1/* Plan / rate-limit meters for the /usage report.

2 *

3 * WHERE THE NUMBERS COME FROM. `GET https://api.anthropic.com/api/oauth/usage`

4 * with the Claude Code OAuth access token — the SAME endpoint the CLI's own /usage

5 * screen reads. So the percentages and, critically, the RESET TIMES are the

6 * server's, not ours. We never infer a 5-hour block boundary from transcript

7 * timestamps (the ccusage approach): an inferred reset is a number that looks

8 * authoritative and is wrong, which is exactly the bug this module exists to avoid.

9 *

10 * READ-ONLY, AND DELIBERATELY SO. We read the access token and we never refresh it.

hermes-acp-bootstrap.pyView file

•path = hermes-acp-bootstrap.py kind = build_helper sizeBytes = 23064 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hermes-acp-bootstrap.pyView on unpkg

bridge.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = thinkpool-pair@0.7.285 matchedIdentity = npm:dGhpbmtwb29sLXBhaXI:0.7.285 similarity = 0.975 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bridge.mjsView on unpkg

Source & flagged code

6 flagged · loading source

supabase-key.mjsView file

Source & flagged code

6 flagged

supabase-key.mjsView file

Lines 25-65javascript

25 3 network GET {WEB_BASE}/api/config. The rotation-repair path.

26 4 stale An expired cache beats the literal: it is strictly newer.

27 5 baked The legacy literal. First-ever boot with no network. Never fails.

29 TWO INVARIANTS, both tested in supabase-key.test.mjs:

31 · A service-shaped key is NEVER adopted, from any source. The network is an

32 input we do not control; a compromised or misconfigured config surface

33 must not be able to hand a user's laptop an RLS-bypassing client.

34 · No key material is ever logged. We log the SOURCE and the SHAPE. (C16.) */

36import os from 'node:os'

37import fs from 'node:fs'

38import path from 'node:path'

39import { classifyKey, isClientSafeKey } from './key-shape.mjs'

41export { classifyKey, isClientSafeKey }

43/* The legacy anon key. Public by design (the web bundle ships it), but now a

44 FALLBACK rather than the source of truth. Do not add new readers. */

Critical

Critical Secret

Package contains a critical-looking secret pattern.

supabase-key.mjsView on unpkg · L45

Critical

Secret Pattern

Supabase service role key (JWT) in supabase-key.mjs

supabase-key.mjsView on unpkg · L45

47export const DEFAULT_SUPABASE_URL = 'https://daytvtakmlixpfbbqzjd.supabase.co'

48export const DEFAULT_WEB_BASE = 'https://thinkpool.io'

50const CACHE_FILE = path.join(os.homedir(), '.thinkpool-pair', 'supabase-key.json')

51const CACHE_TTL_MS = 6 * 60 * 60 * 1000 // 6h — a rotation reaches a rebooting bridge same-day

52const FETCH_TIMEOUT_MS = 2000 // boot latency budget; the literal is right there

54// ── the on-disk cache ──────────────────────────────────────────────────────

55// Sits beside auth.json / dirs.json / served.json in ~/.thinkpool-pair.

56// Contains no secret (a publishable key), so no chmod dance — unlike auth.json.

57export function readCacheFile() {

58 try {

59 const rec = JSON.parse(fs.readFileSync(CACHE_FILE, 'utf8'))

60 if (!rec || typeof rec.key !== 'string' || typeof rec.url !== 'string') return null

61 return { key: rec.key, url: rec.url, at: Number(rec.at) || 0 }

62 } catch { return null }

63}

65export function writeCacheFile(rec) {

service.mjsView file

Lines 3-43javascript

3 so a customer's bridge survives reboot/logout and auto-restarts

4 on crash, on every platform:

5 • macOS → launchd LaunchAgent (KeepAlive)

6 • Linux → systemd --user unit (Restart=always)

7 • Windows → Startup-folder .cmd running --supervise

plan-meters.mjsView file

Lines 1-22javascript

1/* Plan / rate-limit meters for the /usage report.

2 *

3 * WHERE THE NUMBERS COME FROM. `GET https://api.anthropic.com/api/oauth/usage`

4 * with the Claude Code OAuth access token — the SAME endpoint the CLI's own /usage

5 * screen reads. So the percentages and, critically, the RESET TIMES are the

6 * server's, not ours. We never infer a 5-hour block boundary from transcript

7 * timestamps (the ccusage approach): an inferred reset is a number that looks

8 * authoritative and is wrong, which is exactly the bug this module exists to avoid.

9 *

10 * READ-ONLY, AND DELIBERATELY SO. We read the access token and we never refresh it.

hermes-acp-bootstrap.pyView file

•path = hermes-acp-bootstrap.py kind = build_helper sizeBytes = 23064 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hermes-acp-bootstrap.pyView on unpkg

bridge.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bridge.mjsView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code