wayari: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

wayari: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node dist/cli-postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/wayari.mjsView file

9} L10: import { spawn } from 'node:child_process' L11: import { existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/wayari.mjsView on unpkg · L9

•matchType = normalized_sha256 matchedPackage = wayari@0.3.1 matchedPath = bin/wayari.mjs matchedIdentity = npm:d2F5YXJp:0.3.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/wayari.mjsView on unpkg

dist/wayari.mjsView file

2011const env = deps.env ?? process.env; L2012: if (platform2 === "win32") return env.COMSPEC || "powershell.exe"; L2013: let account;

High

Shell

Package source references shell execution.

dist/wayari.mjsView on unpkg · L2011

10546package = wayari; repositoryIdentity = wayariapp; dependency = node-pty L10546: function spawnNodePty(command) { L10547: const nodePty = __require("node-pty"); L10548: try {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/wayari.mjsView on unpkg · L10546

13import { openSync } from "node:fs"; L14: import { execFile as execFile10, spawn as spawn3, spawnSync as spawnSync2 } from "node:child_process"; L15: import { homedir as homedir9 } from "node:os"; ... L468: try { L469: parsed = JSON.parse(line2); L470: } catch { ... L515: if (line2.startsWith("## ")) { L516: doc.sections.push({ heading: line2.trimEnd(), body: [] }); L517: continue; ... L1032: blurb: "Takes finished work the last mile and verifies it landed.", L1033: instructions: "You ship. Take work that is finished and get it out: build it, release it, document it, announce it.\n\nVerify the result rather than the command. A green exit code ... L1034: },

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/wayari.mjsView on unpkg · L13

dist/cli-postinstall.mjsView file

3Cross-file remote execution chain: dist/cli-postinstall.mjs spawns dist/wayari.mjs; helper contains network access plus dynamic code execution. L3: // scripts/cli-postinstall.mjs L4: import { spawnSync } from "node:child_process"; L5: import { chmodSync, constants, accessSync, statSync } from "node:fs"; ... L11: import { join } from "node:path"; L12: function spawnHelperPaths(nodePtyDir2, platform = process.platform, arch = process.arch) { L13: return [join(nodePtyDir2, "prebuilds", `${platform}-${arch}`, "spawn-helper"), join(nodePtyDir2, "build", "Release", "spawn-helper")]; ... L66: const done = spawnSync(process.execPath, [bin, "connect"], { encoding: "utf8", timeout: 9e4 }); L67: const printed = String(done.stdout ?? "").trim(); L68: if (printed) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli-postinstall.mjsView on unpkg · L3

Source & flagged code

7 flagged

package.jsonView file

Lines 13-36json

13 "bin": {

14 "wayari": "bin/wayari.mjs"

15 },

16 "files": [

17 "bin",

18 "dist",

19 "README.md",

20 "LICENSE.md"

21 ],

22 "os": [

23 "darwin",

24 "linux"

25 ],

26 "engines": {

27 "node": ">=20"

28 },

29 "dependencies": {

30 "node-pty": "1.2.0-beta.15"

31 },

32 "scripts": {

33 "postinstall": "node dist/cli-postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

34 }

35}

36

bin/wayari.mjsView file

Lines 1-29javascript

1#!/usr/bin/env node

2// The installed `wayari`. `dist/wayari.mjs` is the repo's `scripts/wayari.mjs` bundled with the core

3// it calls (`scripts/build-cli.mjs`). This file only refuses what the bundle cannot survive: the

4// factory keeps agents alive in tmux, which Windows does not have, so it says so here in one line

5// rather than failing inside node-pty on the first shift.

6if (process.platform === 'win32') {

7 console.error('wayari runs on macOS and Linux. It keeps agents alive in tmux, which Windows does not have. WSL works.'

dist/wayari.mjsView file

2011const env = deps.env ?? process.env; L2012: if (platform2 === "win32") return env.COMSPEC || "powershell.exe"; L2013: let account;

High

Shell

Package source references shell execution.

dist/wayari.mjsView on unpkg · L2011

10546package = wayari; repositoryIdentity = wayariapp; dependency = node-pty L10546: function spawnNodePty(command) { L10547: const nodePty = __require("node-pty"); L10548: try {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/wayari.mjsView on unpkg · L10546

13import { openSync } from "node:fs"; L14: import { execFile as execFile10, spawn as spawn3, spawnSync as spawnSync2 } from "node:child_process"; L15: import { homedir as homedir9 } from "node:os"; ... L468: try { L469: parsed = JSON.parse(line2); L470: } catch { ... L515: if (line2.startsWith("## ")) { L516: doc.sections.push({ heading: line2.trimEnd(), body: [] }); L517: continue; ... L1032: blurb: "Takes finished work the last mile and verifies it landed.", L1033: instructions: "You ship. Take work that is finished and get it out: build it, release it, document it, announce it.\n\nVerify the result rather than the command. A green exit code ... L1034: },

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/wayari.mjsView on unpkg · L13

dist/cli-postinstall.mjsView file

Lines 1-23javascript

1import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);

2

3// scripts/cli-postinstall.mjs

4import { spawnSync } from