tianshu-tui: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

tianshu-tui: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = patch-package || node -e 1 && node scripts/install-git-hooks.mjs || node -e 1

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = patch-package || node -e 1 && node scripts/install-git-hooks.mjs || node -e 1

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunk-MEK7G6ZN.jsView file

6911init_esm_shims(); L6912: import { execSync } from "child_process"; L6913: function buildEnvRoute(apiToken) {

High

Child Process

Package source references child process execution.

dist/chunk-MEK7G6ZN.jsView on unpkg · L6911

dist/manager-YJYXQODW.jsView file

7391parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`]; L7392: parsed.command = process.env.comspec || "cmd.exe"; L7393: parsed.options.windowsVerbatimArguments = true;

High

Shell

Package source references shell execution.

dist/manager-YJYXQODW.jsView on unpkg · L7391

1258Cross-file remote execution chain: dist/manager-YJYXQODW.js spawns dist/chunk-MOZPLHSU.js; helper contains network access plus dynamic code execution. L1258: // validation function arguments L1259: data: new codegen_1.Name("data"), L1260: // data passed to validation function ... L2297: id = normalizeId(id); L2298: return resolver.resolve(baseId, id); L2299: } ... L3165: for (i = 0; i < input.length; i++) { L3166: code = input[i].charCodeAt(0); L3167: if (code === 48) { ... L6993: function checkPathExt(path, options) { L6994: var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT; L6995: if (!pathext) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/manager-YJYXQODW.jsView on unpkg · L1258

dist/chunk-MQXIWGJP.jsView file

8createWebSearchTool, L9: require_undici, L10: resolveProxyForUrl ... L69: listSkillFiles, L70: rewritePowershellNullRedirect, L71: rewriteWindowsNullRedirect, ... L148: for (let i = 0; i < text.length; i++) { L149: if (text.charCodeAt(i) === 10) { L150: if (i > 0 && text.charCodeAt(i - 1) === 13) crlf++; ... L211: function getEsbuildLoadTimeoutMs() { L212: const v = Number.parseInt(process.env.RIVET_ESBUILD_LOAD_TIMEOUT ?? "", 10); L213: return Number.isFinite(v) && v > 0 ? v : 3e3;

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/chunk-MQXIWGJP.jsView on unpkg · L8

3194const code = ObjC.unwrap($.NSString.alloc.initWithDataEncoding(codeData, $.NSUTF8StringEncoding)); L3195: const out = (function () { return eval(code); })(); L3196: __reply({ id: req.id, ok: true, out: (out === undefined || out === null) ? '' : String(out) });

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-MQXIWGJP.jsView on unpkg · L3194

dist/chunk-BGY3M3RV.jsView file

27868} L27869: return new Promise((resolve4) => { L27870: const child = spawn(command, { L27871: shell: true, ... L27876: let lastErr = ""; L27877: const stdoutDecoder = new WinStreamDecoder(); L27878: const stderrDecoder = new WinStreamDecoder(); L27879: child.stdout?.on("data", (data) => { L27880: emitLines(stdoutDecoder.write(data), onLine); L27881: lastErr = "";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-BGY3M3RV.jsView on unpkg · L27868

354if (existsSync(licensePath)) { L355: const key2 = readFileSync(licensePath, "utf8").trim(); L356: if (key2) { ... L4020: init_esm_shims(); L4021: import { execFileSync } from "child_process"; L4022: var LSP_SERVERS = [ ... L10289: id; L10290: baseUrl; L10291: apiKey; ... L29115: /doctor \u2014 Environment health check (Node/Git/Python/uv) + which shell the bash tool uses L29116: /tools \u2014 Show available tools and their descriptions L29117: /compact \u2014 Compact context (summarize old messages)

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-BGY3M3RV.jsView on unpkg · L354

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096 L2: import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url); L3: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-5HX3LS5E.jsView file

245try { L246: const obj = JSON.parse(json); L247: if (!obj || typeof obj !== "object") return null;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-5HX3LS5E.jsView on unpkg · L245

dist/chunk-2TVCSAFM.jsView file

15init_esm_shims(); L16: import { execFile } from "child_process"; L17: import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync } from "fs"; ... L53: label: "system service / daemon control (a background process or service state changed)", L54: test: /\b(systemctl|service)\s+(start|stop|restart|enable|disable|reload)\b|\blaunchctl\s+(load|unload|bootstrap|bootout)\b|\bpm2\s+(start|stop|restart|delete)\b|\b(brew\s+services... L55: } ... L96: try { L97: return JSON.parse(readFileSync(file, "utf-8")); L98: } catch { ... L139: async function gitLines(cwd, args) { L140: const { stdout } = await execFileP("git", ["-c", "core.quotePath=false", ...args], { cwd, timeout: 5e3, encoding: "utf-8" }); L141: return stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-2TVCSAFM.jsView on unpkg · L15

dist/chunk-Z6NOMGFO.jsView file

108"*.map", L109: "package-lock.json", L110: "yarn.lock", ... L181: init_esm_shims(); L182: function applyCommandFilter(command, stdout, exitCode) { L183: const cmd = command.trim(); ... L822: try { L823: const parsed = JSON.parse(content); L824: if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) { ... L1395: init_esm_shims(); L1396: import { execFile } from "child_process"; L1397: import { access, readFile as readFile2, unlink as unlink2 } from "fs/promises";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chunk-Z6NOMGFO.jsView on unpkg · L108

completions/rivet.bashView file

•path = completions/rivet.bash kind = build_helper sizeBytes = 1003 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

completions/rivet.bashView on unpkg

dist/chunk-353WEP4S.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tianshu-tui@2.19.7 matchedIdentity = npm:dGlhbnNodS10dWk:2.19.7 similarity = 0.675 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-353WEP4S.jsView on unpkg

Source & flagged code

15 flagged

package.jsonView file

Lines 18-58json

18 "url": "git+https://github.com/huiliyi37/Tianshu-Tui.git"

19 },

20 "bugs": {

21 "url": "https://github.com/huiliyi37/Tianshu-Tui/issues"

22 },

23 "engines": {

24 "node": ">=24"

25 },

26 "files": [

27 "dist/",

28 "!dist/node_modules",

29 "!dist/native",

30 "README.md",

31 "LICENSE",

32 "completions/"

33 ],

34 "bin": {

35 "rivet": "dist/main.js"

36 },

37 "scripts": {

38 "postinstall": "patch-package || node -e 1 && node scripts/install-git-hooks.mjs || node -e 1",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L38

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

39 "prepublishOnly": "npm run build",

40 "dev": "tsup --watch",

41 "build": "tsup",

42 "start": "node --expose-gc --max-old-space-size=4096 dist/main.js",

43 "typecheck": "tsc --noEmit",

44 "typecheck:baseline": "tsx scripts/typecheck-baseline.ts",

45 "test": "tsx scripts/run-node-tests.ts",

46 "test:unit": "tsx scripts/run-node-tests.ts --unit",

47 "test:integration": "tsx scripts/run-node-tests.ts --integration",

48 "test:fast": "tsx scripts/run-node-tests.ts --exclude-tui",

49 "test:desktop": "node --import ./desktop/scripts/test-alias-register.mjs --import tsx --test-force-exit --test 'desktop/src/**/__tests__/*.test.ts'",

50 "test:incremental": "tsx scripts/test-incremental.ts",

51 "cache:audit": "tsx src/cache/cache-audit-cli.ts",

52 "tokens:audit": "tsx scripts/analyze-output-tokens.ts",

53 "diagnose:orphans": "tsx scripts/diagnose-tool-orphans.ts",

54 "benchmark": "tsx scripts/run-benchmark.ts"

55 },

56 "dependencies": {

57 "@ast-grep/lang-json": "^0.0.7",

58 "@ast-grep/lang-python": "^0.0.6",

dist/chunk-MEK7G6ZN.jsView file

Lines 6891-6931javascript

6891 writeFileSync5(filePath, JSON.stringify({ token, cookies: cookies ?? "", savedAt: Date.now() }), "utf-8");

6892 return { status: 200, body: { ok: true, loggedIn: true } };

6893

dist/manager-YJYXQODW.jsView file

Lines 7371-7411javascript

7371 const shebang = parsed.file && readShebang(parsed.file);

7372 if (shebang) {

7373 parsed.args.unshift(parsed.file);

7374 parsed.command = shebang;

7375

dist/chunk-MQXIWGJP.jsView file

Lines 3174-3214javascript

3174const __stdin = $.NSFileHandle.fileHandleWithStandardInput;

3175const __stdout = $.NSFileHandle.fileHandleWithStandardOutput;

3176function __reply(obj) {

3177 const line

dist/chunk-BGY3M3RV.jsView file

27868} L27869: return new Promise((resolve4) => { L27870: const child = spawn(command, { L27871: shell: true, ... L27876: let lastErr = ""; L27877: const stdoutDecoder = new WinStreamDecoder(); L27878: const stderrDecoder = new WinStreamDecoder(); L27879: child.stdout?.on("data", (data) => { L27880: emitLines(stdoutDecoder.write(data), onLine); L27881: lastErr = "";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-BGY3M3RV.jsView on unpkg · L27868

354if (existsSync(licensePath)) { L355: const key2 = readFileSync(licensePath, "utf8").trim(); L356: if (key2) { ... L4020: init_esm_shims(); L4021: import { execFileSync } from "child_process"; L4022: var LSP_SERVERS = [ ... L10289: id; L10290: baseUrl; L10291: apiKey; ... L29115: /doctor \u2014 Environment health check (Node/Git/Python/uv) + which shell the bash tool uses L29116: /tools \u2014 Show available tools and their descriptions L29117: /compact \u2014 Compact context (summarize old messages)

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-BGY3M3RV.jsView on unpkg · L354

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096 L2: import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url); L3: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-5HX3LS5E.jsView file

Lines 225-265javascript

225 if (!graphValidation.valid) {

226 for (const d of graphValidation.dangling) {

227 errors.push(`dangling dep: ${d.taskId} \u2192 ${d

dist/chunk-2TVCSAFM.jsView file

Lines 1-35javascript

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096

2import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url);

3import {

4 init_paths,

dist/chunk-Z6NOMGFO.jsView file

108"*.map", L109: "package-lock.json", L110: "yarn.lock", ... L181: init_esm_shims(); L182: function applyCommandFilter(command, stdout, exitCode) { L183: const cmd = command.trim(); ... L822: try { L823: const parsed = JSON.parse(content); L824: if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) { ... L1395: init_esm_shims(); L1396: import { execFile } from "child_process"; L1397: import { access, readFile as readFile2, unlink as unlink2 } from "fs/promises";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chunk-Z6NOMGFO.jsView on unpkg · L108

completions/rivet.bashView file

•path = completions/rivet.bash kind = build_helper sizeBytes = 1003 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

completions/rivet.bashView on unpkg

dist/chunk-353WEP4S.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tianshu-tui@2.19.7 matchedIdentity = npm:dGlhbnNodS10dWk:2.19.7 similarity = 0.675 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-353WEP4S.jsView on unpkg