troxy-cli@1.29.2: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

troxy-cli@1.29.2: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

bin/troxy.jsView file

497case 'restart': { L498: const { execSync: _execSyncRestart } = await import('child_process'); L499: const fsR = await import('fs');

High

Child Process

Package source references child process execution.

bin/troxy.jsView on unpkg · L497

526} L527: _execSyncRestart(`launchctl unload ${plistPath} 2>/dev/null; launchctl load ${plistPath}`, { shell: true, stdio: 'inherit' }); L528: } else {

High

Shell

Package source references shell execution.

bin/troxy.jsView on unpkg · L526

541case 'update': { L542: const { execSync } = await import('child_process'); L543: const { createRequire } = await import('module'); ... L546: L547: process.stdout.write('\n Checking for updates... '); L548: let latest; L549: try { L550: const res = await fetch('https://registry.npmjs.org/troxy-cli/latest', { signal: AbortSignal.timeout(5000) }); L551: ({ version: latest } = await res.json());

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/troxy.jsView on unpkg · L541

541Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/troxy.js L541: case 'update': { L542: const { execSync } = await import('child_process'); L543: const { createRequire } = await import('module'); ... L546: L547: process.stdout.write('\n Checking for updates... '); L548: let latest; L549: try { L550: const res = await fetch('https://registry.npmjs.org/troxy-cli/latest', { signal: AbortSignal.timeout(5000) }); L551: ({ version: latest } = await res.json());

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

bin/troxy.jsView on unpkg · L541

69Trigger-reachable persistence chain: manifest.bin -> bin/troxy.js L69: const { createRequire } = await import('module'); L70: const { version } = createRequire(import.meta.url)('../package.json'); L71: process.stdout.write(version); L72: try { L73: const res = await fetch('https://registry.npmjs.org/troxy-cli/latest', { signal: AbortSignal.timeout(3000) }); L74: const { version: latest } = await res.json(); L75: if (version !== latest) { ... L98: } L99: const apiKey = loadConfig()?.apiKey || process.env.TROXY_API_KEY; L100: if (!apiKey) { ... L497: case 'restart': { L498: const { execSync: _execSyncRestart } = await import('child_process');

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

bin/troxy.jsView on unpkg · L69

579try { L580: execSync('npm install -g troxy-cli@latest', { stdio: 'pipe' }); L581: } catch (err) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/troxy.jsView on unpkg · L579

69const { createRequire } = await import('module'); L70: const { version } = createRequire(import.meta.url)('../package.json'); L71: process.stdout.write(version); L72: try { L73: const res = await fetch('https://registry.npmjs.org/troxy-cli/latest', { signal: AbortSignal.timeout(3000) }); L74: const { version: latest } = await res.json(); L75: if (version !== latest) { ... L98: } L99: const apiKey = loadConfig()?.apiKey || process.env.TROXY_API_KEY; L100: if (!apiKey) { ... L497: case 'restart': { L498: const { execSync: _execSyncRestart } = await import('child_process');

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/troxy.jsView on unpkg · L69

src/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = troxy-cli@1.29.0 matchedIdentity = npm:dHJveHktY2xp:1.29.0 similarity = 0.897 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/init.jsView on unpkg

4import readline from 'readline'; L5: import { execSync, execFileSync } from 'child_process'; L6: import { saveConfig } from './config.js'; ... L18: export function detectMcpClients() { L19: const platform = process.platform; L20: const detected = MCP_CLIENTS.filter(c => { ... L133: // agent runtimes look. Two delivery paths on purpose, because neither is L134: // reliable alone: stdout reaches the agent right now but dies with the session, L135: // AGENTS.md survives but only matters on platforms that read it. ... L154: try { L155: const written = writeAgentsFile(process.cwd(), text); L156: console.log(`\n Saved to ${written}`);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/init.jsView on unpkg · L4

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

Source & flagged code

10 flagged

bin/troxy.jsView file

Lines 49-89javascript

49 // JWT-based command — session expired or not logged in

50 console.error('\n Session expired or not logged in. Run: troxy login\n');

51 } else if (source === 'config') {

52 console.error('\n API key revoked or invalid.');

53 console.error(' Your saved key is no longer accepted by Troxy.');

54 console.error(' Run: npx troxy-cli init --key <new-key> to reconnect.\n');

55 } else {

56 console.error('\n API key invalid or revoked.');

57 console.error(' Check the key in your Troxy dashboard → API Keys.\n');

58 }

59 } else {

60 console.error(`\n Error: ${err.message}\n`);

61 }

62 process.exit(1);

63}

64

65async function _run() {

66switch (command) {

67 case '--version':

68 case '-v': {

69 const { createRequire } = await import('module');

70 const { version } = createRequire(import.meta.url)('../package.json');

71 process.stdout.write(version);

72 try {

73 const res = await fetch('https://registry.npmjs.org/troxy-cli/latest', { signal: AbortSignal.timeout(3000) });

74 const { version: latest } = await res.json();

75 if (version !== latest) {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

bin/troxy.jsView on unpkg · L69

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/troxy.jsView on unpkg · L69

76 process.stdout.write(` ⚠ ${latest} available, run: troxy update`);

77 }

78 } catch {}

79 process.stdout.write('\n');

80 break;

81 }

82

83 // ── Setup ─────────────────────────────────────────────────────

84 case 'init':

85 await runInit(flags);

86 break;

87

88 case 'tools': {

89 if (flags.help || flags.h) {

Lines 477-599javascript

477 console.log();

478 }

479

480 // Version check

481 try {

482 const { createRequire } = await import('module');

483 const

src/init.jsView file

Lines 1-24javascript

1import fs from 'fs';

2import os from 'os';

3import path from 'path';

4import readline from 'readline';

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg