tianshu-tui@2.14.0: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

tianshu-tui@2.14.0: Clean npm security report (Allow) | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json has postinstall `patch-package || node -e 1`, an install-time hook.
dist/chunk-YRDIMUNY.js includes user-approved import_resource/web_search tools that can fetch URLs or clone GitHub repos at runtime.
dist/chunk-HW56A55Z.js loads/copies skills into `.rivet/skills`, but as package-owned agent functionality.

Evidence against

No `patches/` directory is present, so postinstall does not apply bundled package code changes.
dist/main.js CLI entrypoint wires normal TUI/headless commands and provider setup; no import-time exfiltration seen.
dist/chunk-MLXHUDNZ.js stores OAuth tokens under `.rivet/auth` and sends them to configured OpenAI OAuth endpoints for login/refresh.
dist/chunk-6C7Q2X2I.js provider endpoints are AI-service presets aligned with the package purpose.
Child process usage in dist/chunk-HW56A55Z.js and dist/chunk-YRDIMUNY.js is for shell/tool execution inside the coding agent, gated by runtime commands.
No unconsented install-time mutation of foreign AI-agent config, credential harvesting, or remote payload execution found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 98 file(s), 7.71 MB of source, external domains: 127.0.0.1, angular.io, api.anthropic.com, api.deepseek.com, api.github.com, api.kimi.com, api.minimaxi.com, api.openai.com, api.siliconflow.cn, api.xiaomimimo.com, astral.sh, auth.openai.com, chatgpt.com, dom.spec.whatwg.org, fetch.spec.whatwg.org, git-scm.com, gitcode.com, github.com, goproxy.cn, html.duckduckgo.com, hub.fastgit.xyz, json-schema.org, kkgithub.com, lists.w3.org, mimesniff.spec.whatwg.org, mirrors.aliyun.com, mirrors.cloud.tencent.com, mirrors.tuna.tsinghua.edu.cn, mirrors.ustc.edu.cn, open.bigmodel.cn, pypi.tuna.tsinghua.edu.cn, raw.githubusercontent.com, react.dev, registry.npmjs.org, registry.npmmirror.com, repo.huaweicloud.com, spec.openapis.org, stackoverflow.com, token-plan-cn.xiaomimimo.com, token-plan-sgp.xiaomimimo.com, tools.ietf.org, trac.webkit.org, url.spec.whatwg.org, webidl.spec.whatwg.org, www.ibm.com, www.ietf.org, www.python.org, www.safaribooksonline.com, www.w3.org, www.whatwg.org

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = patch-package || node -e 1

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = patch-package || node -e 1

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/chunk-HW56A55Z.jsView file

9import { homedir } from "os"; L10: import { spawnSync } from "child_process"; L11: import { existsSync } from "fs";

High

Child Process

Package source references child process execution.

dist/chunk-HW56A55Z.jsView on unpkg · L9

98if (deps.isWindows) { L99: const forcePwsh = /^(1|true|yes)$/i.test(deps.env["RIVET_USE_POWERSHELL"] ?? ""); L100: if (!forcePwsh && deps.gitBashPath) {

High

Shell

Package source references shell execution.

dist/chunk-HW56A55Z.jsView on unpkg · L98

dist/chunk-RN5ARAPI.jsView file

2985sourceCode = this.opts.code.process(sourceCode, sch); L2986: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2987: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-RN5ARAPI.jsView on unpkg · L2985

dist/chunk-LA3DOBTH.jsView file

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096 L2: import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url); L3: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-LA3DOBTH.jsView on unpkg · L1

dist/chunk-VGM6FTOP.jsView file

245try { L246: const obj = JSON.parse(json); L247: if (!obj || typeof obj !== "object") return null;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-VGM6FTOP.jsView on unpkg · L245

dist/chunk-WNEKICKX.jsView file

14init_esm_shims(); L15: import { execFile } from "child_process"; L16: import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync } from "fs"; ... L51: label: "system service / daemon control (a background process or service state changed)", L52: test: /\b(systemctl|service)\s+(start|stop|restart|enable|disable|reload)\b|\blaunchctl\s+(load|unload|bootstrap|bootout)\b|\bpm2\s+(start|stop|restart|delete)\b|\b(brew\s+services... L53: } ... L94: try { L95: return JSON.parse(readFileSync(file, "utf-8")); L96: } catch { ... L137: async function gitLines(cwd, args) { L138: const { stdout } = await execFileP("git", ["-c", "core.quotePath=false", ...args], { cwd, timeout: 5e3, encoding: "utf-8" }); L139: return stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-WNEKICKX.jsView on unpkg · L14

dist/serve-STV34VKM.jsView file

6707try { L6708: const { spawn } = await import("child_process"); L6709: await new Promise((resolve4, reject) => { L6710: const child = spawn(command.cmd, command.args, { detached: true, stdio: "ignore" }); ... L6722: }; L6723: const version = process.env.npm[redacted] ?? "2.9.0"; L6724: Object.assign(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/serve-STV34VKM.jsView on unpkg · L6707

dist/chunk-JGQDDJJF.jsView file

5765var EnvironmentSettingsObjectBase = class { L5766: get baseUrl() { L5767: return getGlobalOrigin(); ... L26614: try { L26615: raw = JSON.parse(readFileSync(configPath, "utf-8")); L26616: } catch { ... L28949: init_esm_shims(); L28950: import { execFileSync } from "child_process"; L28951: var LSP_SERVERS = [ ... L38812: /doctor \u2014 Environment health check (Node/Git/Python/uv) + which shell the bash tool uses L38813: /tools \u2014 Show available tools and their descriptions L38814: /compact \u2014 Compact context (summarize old messages)

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-JGQDDJJF.jsView on unpkg · L5765

272Cross-file remote execution chain: dist/chunk-JGQDDJJF.js spawns dist/chunk-6C7Q2X2I.js; helper contains network access plus dynamic code execution. L272: L273: // node_modules/undici/lib/core/symbols.js L274: var require_symbols = __commonJS({ ... L299: kBodyUsed: /* @__PURE__ */ Symbol("used"), L300: kBody: /* @__PURE__ */ Symbol("abstracted request body"), L301: kRunning: /* @__PURE__ */ Symbol("running"), ... L416: * @type {-2|-1|0|1} L417: * @private L418: */ ... L1142: } L1143: const code = this.code = key3.charCodeAt(index); L1144: if (code > 127) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-JGQDDJJF.jsView on unpkg · L272

dist/bundled-skills/brainstorming/scripts/stop-server.shView file

•path = dist/bundled-[redacted]-server.sh kind = build_helper sizeBytes = 1279 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bundled-skills/brainstorming/scripts/stop-server.shView on unpkg

dist/chunk-MLXHUDNZ.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tianshu-tui@2.13.0 matchedIdentity = npm:dGlhbnNodS10dWk:2.13.0 similarity = 0.663 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-MLXHUDNZ.jsView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 18-58json

18 "url": "git+https://github.com/huiliyi37/Tianshu-Tui.git"

19 },

20 "bugs": {

21 "url": "https://github.com/huiliyi37/Tianshu-Tui/issues"

22 },

23 "engines": {

24 "node": "24.1.0"

25 },

26 "files": [

27 "dist/",

28 "!dist/node_modules",

29 "!dist/native",

30 "README.md",

31 "LICENSE",

32 "completions/"

33 ],

34 "bin": {

35 "rivet": "dist/main.js"

36 },

37 "scripts": {

38 "postinstall": "patch-package || node -e 1",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L38

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

39 "prepublishOnly": "npm run build",

40 "dev": "tsup --watch",

41 "build": "tsup",

42 "start": "node --expose-gc --max-old-space-size=4096 dist/main.js",

43 "typecheck": "tsc --noEmit",

44 "typecheck:baseline": "tsx scripts/typecheck-baseline.ts",

45 "test": "tsx scripts/run-node-tests.ts",

46 "test:unit": "tsx scripts/run-node-tests.ts --unit",

47 "test:integration": "tsx scripts/run-node-tests.ts --integration",

48 "test:fast": "tsx scripts/run-node-tests.ts --exclude-tui",

49 "test:desktop": "node --import ./desktop/scripts/test-alias-register.mjs --import tsx --test-force-exit --test 'desktop/src/**/__tests__/*.test.ts'",

50 "test:incremental": "tsx scripts/test-incremental.ts",

51 "cache:audit": "tsx src/cache/cache-audit-cli.ts",

52 "tokens:audit": "tsx scripts/analyze-output-tokens.ts",

53 "benchmark": "tsx scripts/run-benchmark.ts"

54 },

55 "dependencies": {

56 "@ast-grep/lang-json": "^0.0.7",

57 "@ast-grep/lang-python": "^0.0.6",

58 "@ast-grep/napi": "^0.44.0",

dist/chunk-HW56A55Z.jsView file

Lines 1-29javascript

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096

2import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url);

3import {

4 init_esm_shims

dist/chunk-RN5ARAPI.jsView file

Lines 2965-3005javascript

2965 validateName,

2966 ValidationError: _ValidationError,

2967 schema: sch.schema,

2968 schemaEnv: sch,

2969 rootId,

2970 baseId: sch.baseId || rootId,

2971 schemaPath

dist/chunk-LA3DOBTH.jsView file

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096 L2: import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url); L3: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-LA3DOBTH.jsView on unpkg · L1

dist/chunk-VGM6FTOP.jsView file

Lines 225-265javascript

225 if (!graphValidation.valid) {

226 for (const d of graphValidation.dangling) {

227 errors.push(`dangling dep: ${d.taskId} \u2192 ${d

dist/chunk-WNEKICKX.jsView file

Lines 1-34javascript

1#!/usr/bin/env -S node --expose-gc --max-old-space-size=4096

2import { createRequire as __rivetCreateRequire } from 'node:module'; const require = __rivetCreateRequire(import.meta.url);

3import {

4 rivetHome

dist/serve-STV34VKM.jsView file

6707try { L6708: const { spawn } = await import("child_process"); L6709: await new Promise((resolve4, reject) => { L6710: const child = spawn(command.cmd, command.args, { detached: true, stdio: "ignore" }); ... L6722: }; L6723: const version = process.env.npm[redacted] ?? "2.9.0"; L6724: Object.assign(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/serve-STV34VKM.jsView on unpkg · L6707

dist/chunk-JGQDDJJF.jsView file

5765var EnvironmentSettingsObjectBase = class { L5766: get baseUrl() { L5767: return getGlobalOrigin(); ... L26614: try { L26615: raw = JSON.parse(readFileSync(configPath, "utf-8")); L26616: } catch { ... L28949: init_esm_shims(); L28950: import { execFileSync } from "child_process"; L28951: var LSP_SERVERS = [ ... L38812: /doctor \u2014 Environment health check (Node/Git/Python/uv) + which shell the bash tool uses L38813: /tools \u2014 Show available tools and their descriptions L38814: /compact \u2014 Compact context (summarize old messages)

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-JGQDDJJF.jsView on unpkg · L5765

272Cross-file remote execution chain: dist/chunk-JGQDDJJF.js spawns dist/chunk-6C7Q2X2I.js; helper contains network access plus dynamic code execution. L272: L273: // node_modules/undici/lib/core/symbols.js L274: var require_symbols = __commonJS({ ... L299: kBodyUsed: /* @__PURE__ */ Symbol("used"), L300: kBody: /* @__PURE__ */ Symbol("abstracted request body"), L301: kRunning: /* @__PURE__ */ Symbol("running"), ... L416: * @type {-2|-1|0|1} L417: * @private L418: */ ... L1142: } L1143: const code = this.code = key3.charCodeAt(index); L1144: if (code > 127) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-JGQDDJJF.jsView on unpkg · L272

dist/bundled-skills/brainstorming/scripts/stop-server.shView file

•path = dist/bundled-[redacted]-server.sh kind = build_helper sizeBytes = 1279 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/bundled-skills/brainstorming/scripts/stop-server.shView on unpkg

dist/chunk-MLXHUDNZ.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tianshu-tui@2.13.0 matchedIdentity = npm:dGlhbnNodS10dWk:2.13.0 similarity = 0.663 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-MLXHUDNZ.jsView on unpkg