tonty-tech-interviews@0.2.64: Suspicious npm security report | LPM Firewall

Loading npm security reports…

tonty-tech-interviews@0.2.64: Suspicious npm security report | LPM Firewall

Source & flagged code

14 flagged · loading source

dist/chunk-VVIWNO2X.jsView file

4054import { parse as parseYaml2 } from "yaml"; L4055: import { execSync, execFileSync } from "child_process"; L4056: import { rm, copyFile } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-VVIWNO2X.jsView on unpkg · L4054

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-VVIWNO2X.js: // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-VVIWNO2X.jsView on unpkg

dist/chunk-K4ZB5VID.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tonty-tech-interviews@0.2.57 matchedIdentity = npm:dG9udHktdGVjaC1pbnRlcnZpZXdz:0.2.57 similarity = 1.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-K4ZB5VID.jsView on unpkg

711); L712: console.log(chalk2.cyan(" Depuis PowerShell : wsl --install -d Ubuntu")); L713: console.log(chalk2.cyan(" Puis dans Ubuntu : npx tonty-tech-interviews join TONTY-XXXXXXXXXXXXXXX"));

High

Shell

Package source references shell execution.

dist/chunk-K4ZB5VID.jsView on unpkg · L711

17Cross-file remote execution chain: dist/chunk-K4ZB5VID.js spawns dist/chunk-VVIWNO2X.js; helper contains network access plus dynamic code execution. L17: import { fileURLToPath } from "url"; L18: var __dirname = dirname(fileURLToPath(import.meta.url)); L19: function readVersion() { L20: try { L21: let pkgPath = join(__dirname, "package.json"); L22: let raw; ... L28: } L29: const pkg = JSON.parse(raw); L30: return pkg.version || "0.0.0"; ... L76: console.log( L77: chalk.gray("\u2502") + center(chalk.dim(`v${VERSION} \u2022 https://tonty.app`), W) + chalk.gray("\u2502") L78: );

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-K4ZB5VID.jsView on unpkg · L17

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg

21*/ L22: var fs = require("fs"); L23: var path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView on unpkg · L21

dist/chunk-K4ZB5VID.js#virtual:normalized:round1View file

662}).toString(); L663: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L664: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-K4ZB5VID.js#virtual:normalized:round1View on unpkg · L662

662}).toString(); L663: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L664: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-K4ZB5VID.js#virtual:normalized:round1View on unpkg · L662

662Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-K4ZB5VID.js L662: }).toString(); L663: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L664: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

dist/rl-epsilon-inverted/verify.shView file

•path = dist/rl-epsilon-inverted/verify.sh kind = build_helper sizeBytes = 2124 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/rl-epsilon-inverted/verify.shView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

Source & flagged code

14 flagged

dist/chunk-VVIWNO2X.jsView file

Lines 4034-4074javascript

4034var oboolean = () => booleanType().optional();

4035var coerce = {

4036 string: ((arg) => ZodString.create({ ...arg, coerce: true })),

4037 number: ((arg) => ZodNumber.create({ ...arg, coerce: true })),

4038 boolean: ((arg) => ZodBoolean.create({

4039 ...arg,

4040 coerce: true

4041 })),

4042 bigint: ((arg) => ZodBigInt.create({ ...arg, coerce: true })),

4043 date: ((arg) => ZodDate.create({ ...arg, coerce: true }))

4044};

4045var NEVER = INVALID;

4046

4047// ../core/dist/index.js

4048import { readFile } from "fs/promises";

4049import { parse as parseYaml } from "yaml";

4050import { existsSync } from "fs";

4051import { readFile as readFile2 } from "fs/promises";

4052import { join as join2 } from "path";

4053import { existsSync as existsSync3 } from "fs";

4054import { parse as parseYaml2 } from "yaml";

4055import { execSync, execFileSync } from "child_process";

4056import { rm, copyFile } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/chunk-VVIWNO2X.jsView on unpkg · L4054

4057import { existsSync as existsSync2 } from "fs";

4058import { join } from "path";

4059import { mkdtemp } from "fs/promises";

4060import { join as join3 } from "path";

4061import { tmpdir } from "os";

4062import { execFile as execFile2 } from "child_process";

4063import { promisify as promisify2 } from "util";

4064import { readFile as readFile4 } from "fs/promises";

4065import { createRequire } from "module";

4066import { existsSync as existsSync4 } from "fs";

4067import { join as join4, dirname } from "path";

4068import { fileURLToPath } from "url";

4069import { readFile as readFile3, writeFile, readdir, mkdir } from "fs/promises";

4070import { join as join5 } from "path";

4071import { homedir } from "os";

4072import { existsSync as existsSync5 } from "fs";

4073import { execFile } from "child_process";

4074import { promisify } from "util";

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/chunk-VVIWNO2X.js: // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/chunk-VVIWNO2X.jsView on unpkg

dist/chunk-K4ZB5VID.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2import {

3 SessionManager,

4 detectInstalledProviders,

5 discoverBuiltInScenarios,

6 getLauncher,

7 listSessions,

8 loadSession,

9 saveSession,

10 toStoredSession

11} from

vendor/node-pty-darwin-x64/lib/unixTerminal.jsView file

Lines 1-41javascript

1"use strict";

2var __extends = (this && this.__extends) || (function () {

3 var extendStatics = function (

dist/chunk-K4ZB5VID.js#virtual:normalized:round1View file

662}).toString(); L663: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L664: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-K4ZB5VID.js#virtual:normalized:round1View on unpkg · L662

662}).toString(); L663: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L664: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunk-K4ZB5VID.js#virtual:normalized:round1View on unpkg · L662

662Trigger-reachable command-output exfiltration chain: manifest.bin -> dist/bin.js -> dist/chunk-K4ZB5VID.js L662: }).toString(); L663: const match = distroRaw.match(/^PRETTY_NAME="?([^"\n]+)"?/m);\n if (match) wslDistro = match[1];\n } catch {\n }\n }\n } catch {\n }\n }\n retur... L664: );

High

Trigger Reachable Command Output Exfiltration

vendor/node-pty-darwin-x64/build/Release/pty.nodeView file

•path = vendor/node-pty-darwin-x64/build/Release/pty.node kind = native_binary sizeBytes = 52864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/node-pty-darwin-x64/build/Release/pty.nodeView on unpkg

dist/rl-epsilon-inverted/verify.shView file

•path = dist/rl-epsilon-inverted/verify.sh kind = build_helper sizeBytes = 2124 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/rl-epsilon-inverted/verify.shView on unpkg

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty-darwin-arm64/lib/unixTerminal.jsView on unpkg

vendor/node-pty/lib/unixTerminal.jsView file

•matchType = normalized_sha256 matchedPackage = codeam-cli@2.61.71 matchedPath = dist/vendor/node-pty/lib/unixTerminal.js matchedIdentity = npm:Y29kZWFtLWNsaQ:2.61.71 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

vendor/node-pty/lib/unixTerminal.jsView on unpkg

Lines 691-731javascript

691 console.log(chalk2.yellow(` ${warning}`));

692 console.log();

693 }

694 if (process.platform === "win32") {

695 console.log(chalk2.red.bold("\u2717 Windows non support\xE9"));

696 console.log();

697 console.log(

698 chalk2.white("Cet outil n\xE9cessite un environnement Linux pour fonctionner correctement.")

699 );

700 console.log(

701 chalk2.white("Les LLM, CLI agents, PTY, et scripts bash utilis\xE9s ne sont pas compatibles")

702 );

703 console.log(chalk2.white("avec Windows natif."));

704 console.log();

705 console.log(chalk2.bold("Solutions :"));

706 console.log(

707 chalk2.white(" 1. WSL2 (recommand\xE9) \u2014 https://learn.microsoft.com/fr-fr/windows/wsl/install")

708 );

709 console.log(

710 chalk2.white(" Installez Ubuntu puis ex\xE9cutez la commande dans le terminal WSL.")

711 );

712 console.log(chalk2.cyan(" Depuis PowerShell : wsl --install -d Ubuntu"));

713 console.log(chalk2.cyan(" Puis dans Ubuntu : npx tonty-tech-interviews join TONTY-XXXXXXXXXXXXXXX"));

High

Shell

Package source references shell execution.

dist/chunk-K4ZB5VID.jsView on unpkg · L711

714 console.log(chalk2.white(" 2. VM Linux \u2014 https://ubuntu.com/download/desktop"));

715 console.log(chalk2.white(" Machine virtuelle Ubuntu avec VirtualBox ou VMware."));

716 console.log(chalk2.white(" 3. Git Bash \u2014 https://git-scm.com"));

717 console.log(chalk2.white(" Solution partielle, certains outils peuvent ne pas fonctionner."));

718 console.log();

719 console.log(

720 chalk2.gray(

721 "Les environnements Linux et macOS offrent les performances et outils n\xE9cessaires"

722 )

723 );

724 console.log(chalk2.gray("pour les tests techniques avec agents IA."));

725 console.log();

726 console.log(

727 chalk2.dim("PS : En tant que dev, vous devriez utiliser moins Windows et plus Linux. \u{1F937}")

728 );

729 process.exit(1);

730 }

731 const info = detectPlatform();