wind-agent-cli@1.39.4: Malicious npm security report (Block)

Loading npm security reports…

wind-agent-cli@1.39.4: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

36 flagged

Lines 44-84json

44 "desktop:stage": "node scripts/release/prepare-desktop-app.js",

45 "desktop:pack": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --dir",

46 "desktop:dist:mac": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --mac dmg",

47 "desktop:dist:win": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --win nsis",

48 "server:bundle": "npm run build && node scripts/release/build-server-bundle.js",

49 "desktop:icon:mac": "node electron/scripts/generate-macos-icon.js",

50 "build": "npm run build:client && npm run build:server",

51 "build:client": "node scripts/build-client.mjs && node scripts/verify-pwa-build.mjs",

52 "prebuild:server": "node -e \"require('node:fs').rmSync('dist-server.next', { recursive: true, force: true })\"",

53 "build:server": "tsc -p server/tsconfig.json && tsc-alias -p server/tsconfig.json",

54 "postbuild:server": "node scripts/promote-dist-server.mjs",

55 "preview": "vite preview",

56 "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p server/tsconfig.json",

57 "test": "tsx --tsconfig server/tsconfig.json --test \"server/**/*.test.ts\" \"server/**/*.test.js\"",

58 "test:client": "tsx --test \"src/**/*.test.ts\" \"src/**/*.test.tsx\"",

59 "lint": "eslint src/ server/ --max-warnings=0",

60 "lint:fix": "eslint src/ server/ --fix",

61 "start": "npm run build && npm run server",

62 "release": "./release.sh",

63 "prepublishOnly": "npm run build",

64 "postinstall": "node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L64

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L64

65 "prepare": "husky",

66 "update:platform": "./update-platform.sh",

67 "audit:production": "npm audit --omit=dev --audit-level=low",

68 "audit:all": "npm audit --audit-level=low"

69 },

70 "build": {

71 "appId": "ai.cloudcli.desktop",

72 "productName": "WindCli",

73 "asar": false,

74 "artifactName": "windcli-desktop-${version}-${os}-${arch}.${ext}",

75 "directories": {

76 "output": "release/desktop"

77 },

78 "extraMetadata": {

79 "main": "electron/main.js"

80 },

81 "files": [

82 "electron/",

83 "public/",

84 "dist/",

dist/assets/index-BfbTbPtl.jsView file

Lines 1-22javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/CodeEditor-DHh_KbqK.js","assets/vendor-react-C2GTiUCy.js","assets/MarkdownPreview-XHYXRhwW.js","assets/vendor-markdown-DkITEES2.js","assets/feature-chat-CdW79iXe.js","assets/feature-workspace-CgfwclyD.js","assets/vendor-ui-BaLmEz46.js",

dist-server/server/shared/claude-cli-path.jsView file

Lines 1-21javascript

1import { execFileSync } from 'node:child_process';

2import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

3import path from 'node:path';

dist/assets/vendor-data-DsEZeNPr.jsView file

Lines 1-5javascript

1import{e as we,g as jr}from"./vendor-react-C2GTiUCy.js";function ar(j,K){(K==null||K>j.length)&&(K

dist-server/server/modules/auth/auth.module.jsView file

Lines 1-27javascript

1import { createRequire } from 'node:module';

2import { getConnection, userDb } from '../../modules/database/index.js';

3import { authenticateToken, generateToken } from './auth.middleware.js';

4import { createAuthRouter } from

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

Lines 86-126javascript

86 }

87 }

88 return '';

89 })

90 .filter(Boolean)

91 .join('\n');

dist-server/server/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2// Load environment variables before other imports execute.

3import './load-env.js';

4import fs, { promises as fsPromises } from 'fs';

5import path from 'path';

6import

electron/main.jsView file

1import { app, BrowserWindow, clipboard, dialog, ipcMain, session, shell } from 'electron'; L2: import { spawn } from 'node:child_process'; L3: import path from 'node:path'; ... L11: L12: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L13: ... L17: const CALLBACK_URL = `${CALLBACK_PROTOCOL}://auth/callback`; L18: const CLOUDCLI_CONTROL_PLANE_URL = process.env.CLOUDCLI_CONTROL_PLANE_URL || 'https://cloudcli.ai'; L19: const REMOTE_START_TIMEOUT_MS = 30000; ... L23: L24: if (process.platform === 'win32') { L25: app.setAppUserModelId(APP_USER_MODEL_ID);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

electron/localServer.jsView file

1Detached bundled service listener: electron/localServer.js spawns dist-server/server/index.js; helper exposes a broad-bound HTTP listener. L1: import { spawn } from 'node:child_process'; L2: import fs from 'node:fs/promises'; L3: import http from 'node:http'; L4: import net from 'node:net'; ... L15: const MAX_STARTUP_LOG_LINES = 300; L16: const SERVER_MARKER_PATH = path.join(os.homedir(), '.cloudcli', 'local-server.json'); L17: const LOCAL_SERVER_URL_ENV_KEYS = [ ... L41: ok: res.statusCode >= 200 && res.statusCode < 300, L42: json: JSON.parse(body), L43: }); ... L99: function getDesktopPath() { L100: const currentPath = process.env.PATH || '';

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist/workbox-ae5c0bb2.jsView file

•matchType = normalized_sha256 matchedPackage = termdock@1.4.153 matchedPath = dist/client/workbox-1320db52.js matchedIdentity = npm:dGVybWRvY2s:1.4.153 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/workbox-ae5c0bb2.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = wind-agent-cli@1.39.2 matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.2 similarity = 0.942 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

dist/assets/wardleyDiagram-T6FBY63Y-DdMrI1Ni.jsView file

•matchType = token_shingles matchedPackage = termdock@1.4.153 matchedPath = [redacted]-EHGQE667-CJqtOyWX.js matchedIdentity = npm:dGVybWRvY2s:1.4.153 similarity = 0.708 shingleOverlap = 34 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/assets/wardleyDiagram-T6FBY63Y-DdMrI1Ni.jsView on unpkg

dist/assets/feature-workspace-CgfwclyD.jsView file

39patternName = github_pat severity = critical line = 39

Critical

Secret Pattern

GitHub personal access token in dist/assets/feature-workspace-CgfwclyD.js

dist/assets/feature-workspace-CgfwclyD.jsView on unpkg · L39

Source & flagged code

36 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/assets/index-BfbTbPtl.jsView file

2patternName = github_pat severity = critical line = 2

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/assets/index-BfbTbPtl.jsView on unpkg · L2

2patternName = github_pat severity = critical line = 2

Critical

Secret Pattern