turbollm@1.7.1: Suspicious npm security report (Warn)

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 90 file(s), 6.63 MB of source, external domains: 127.0.0.1, api.github.com, api.githubcopilot.com, api.tavily.com, chevrotain.io, cmake.org, developer.nvidia.com, en.wikipedia.org, example.com, foo.bar, gcc.gnu.org, git-scm.com, github.com, huggingface.co, kagi.com, langium.org, mcp.apify.com, mcp.atlassian.com, mcp.cloudflare.com, mcp.linear.app, mcp.mixpanel.com, mcp.neon.tech, mcp.stripe.com, mcp.supabase.com, mcp.zapier.com, nodejs.org, ns.adobe.com, pypi.org, radix-ui.com, react.dev, registry.npmjs.org, runpod.io, visualstudio.microsoft.com, www.ibm.com, www.w3.org, www.xfa.org

Source & flagged code

6 flagged

dist/cli.jsView file

3// src/cli.ts L4: import { spawn as spawn6 } from "child_process"; L5: import { openSync as openSync3, readFileSync as readFileSync12 } from "fs";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L3

518const ps = `Expand-Archive -LiteralPath '${archive.replace(/'/g, "''")}' -DestinationPath '${destDir.replace(/'/g, "''")}' -Force`; L519: await execFileP("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { maxBuffer: 16 * 1024 * 1024 }); L520: } else {

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L518

10194// src/engines/build-prereqs.ts L10195: import { execFile as execFile8 } from "child_process"; L10196: import { delimiter, join as join19 } from "path"; ... L10200: const dirs = toolchainDirs.map((d) => d.trim()).filter(Boolean); L10201: const env = { ...process.env }; L10202: const key = Object.keys(env).find((k) => k.toLowerCase() === "path") ?? "PATH"; ... L10208: var INSTALL_URLS = { L10209: git: "https://git-scm.com/downloads", L10210: cmake: "https://cmake.org/download/",

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L10194

3// src/cli.ts L4: import { spawn as spawn6 } from "child_process"; L5: import { openSync as openSync3, readFileSync as readFileSync12 } from "fs"; ... L27: function legacyDataDir() { L28: const base2 = process.platform === "win32" ? process.env.APPDATA || join(homedir(), "AppData", "Roaming") : process.platform === "darwin" ? join(homedir(), "Library", "Application ... L29: return join(base2, "turbollm"); ... L53: if (!existsSync(cfgPath)) return; L54: const cfg2 = JSON.parse(readFileSync(cfgPath, "utf8")); L55: let changed = false; ... L314: if (c.comfyui.url && !/^https?:\/\//i.test(c.comfyui.url)) { L315: throw new ValueError("comfyui.url", "must be an http(s):// origin (e.g. http://127.0.0.1:8188)"); L316: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L3

3// src/cli.ts L4: import { spawn as spawn6 } from "child_process"; L5: import { openSync as openSync3, readFileSync as readFileSync12 } from "fs"; ... L27: function legacyDataDir() { L28: const base2 = process.platform === "win32" ? process.env.APPDATA || join(homedir(), "AppData", "Roaming") : process.platform === "darwin" ? join(homedir(), "Library", "Application ... L29: return join(base2, "turbollm"); ... L53: if (!existsSync(cfgPath)) return; L54: const cfg2 = JSON.parse(readFileSync(cfgPath, "utf8")); L55: let changed = false; ... L314: if (c.comfyui.url && !/^https?:\/\//i.test(c.comfyui.url)) { L315: throw new ValueError("comfyui.url", "must be an http(s):// origin (e.g. http://127.0.0.1:8188)"); L316: }

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli.jsView on unpkg · L3

dist/webdist/assets/ChatScreen-B4T7fIcx.jsView file

Lines 1-21javascript

1var tn=d=>{throw TypeError(d)};var Ks=(d,t,e)=>t.has(d)||tn("Cannot "+e);var at=(d,t,

Source & flagged code

6 flagged · loading source

dist/cli.jsView file

3// src/cli.ts L4: import { spawn as spawn6 } from "child_process"; L5: import { openSync as openSync3, readFileSync as readFileSync12 } from "fs";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L3

518const ps = `Expand-Archive -LiteralPath '${archive.replace(/'/g, "''")}' -DestinationPath '${destDir.replace(/'/g, "''")}' -Force`; L519: await execFileP("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { maxBuffer: 16 * 1024 * 1024 }); L520: } else {

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L518

10194// src/engines/build-prereqs.ts L10195: import { execFile as execFile8 } from "child_process"; L10196: import { delimiter, join as join19 } from "path"; ... L10200: const dirs = toolchainDirs.map((d) => d.trim()).filter(Boolean); L10201: const env = { ...process.env }; L10202: const key = Object.keys(env).find((k) => k.toLowerCase() === "path") ?? "PATH"; ... L10208: var INSTALL_URLS = { L10209: git: "https://git-scm.com/downloads", L10210: cmake: "https://cmake.org/download/",

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L10194

3// src/cli.ts L4: import { spawn as spawn6 } from "child_process"; L5: import { openSync as openSync3, readFileSync as readFileSync12 } from "fs"; ... L27: function legacyDataDir() { L28: const base2 = process.platform === "win32" ? process.env.APPDATA || join(homedir(), "AppData", "Roaming") : process.platform === "darwin" ? join(homedir(), "Library", "Application ... L29: return join(base2, "turbollm"); ... L53: if (!existsSync(cfgPath)) return; L54: const cfg2 = JSON.parse(readFileSync(cfgPath, "utf8")); L55: let changed = false; ... L314: if (c.comfyui.url && !/^https?:\/\//i.test(c.comfyui.url)) { L315: throw new ValueError("comfyui.url", "must be an http(s):// origin (e.g. http://127.0.0.1:8188)"); L316: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L3

3// src/cli.ts L4: import { spawn as spawn6 } from "child_process"; L5: import { openSync as openSync3, readFileSync as readFileSync12 } from "fs"; ... L27: function legacyDataDir() { L28: const base2 = process.platform === "win32" ? process.env.APPDATA || join(homedir(), "AppData", "Roaming") : process.platform === "darwin" ? join(homedir(), "Library", "Application ... L29: return join(base2, "turbollm"); ... L53: if (!existsSync(cfgPath)) return; L54: const cfg2 = JSON.parse(readFileSync(cfgPath, "utf8")); L55: let changed = false; ... L314: if (c.comfyui.url && !/^https?:\/\//i.test(c.comfyui.url)) { L315: throw new ValueError("comfyui.url", "must be an http(s):// origin (e.g. http://127.0.0.1:8188)"); L316: }

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/cli.jsView on unpkg · L3

dist/webdist/assets/ChatScreen-B4T7fIcx.jsView file

1var tn=d=>{throw TypeError(d)};var Ks=(d,t,e)=>t.has(d)||tn("Cannot "+e);var at=(d,t,e)=>(Ks(d,t,"read from private field"),e?e.call(d):t.get(d)),Gt=(d,t,e)=>t.has(d)?tn("Cannot ad... L2: `).join("")}}function Ge(d,t){const e=t?URL.parse(d,t):URL.parse(d);return/https?:/.test(e?.protocol??"")}function Bt(d){d.preventDefault()}function ct(d){d.preventDefault(),d.stop... L3: struct Uniforms {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/webdist/assets/ChatScreen-B4T7fIcx.jsView on unpkg · L1

Findings

4 High6 Medium7 Low

HighChild Processdist/cli.js

HighShelldist/cli.js

HighSame File Env Network Executiondist/cli.js

HighSandbox Evasion Gated Capabilitydist/cli.js

MediumDynamic Requiredist/webdist/assets/ChatScreen-B4T7fIcx.js

MediumUnsafe Vm Contextdist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings