wind-agent-cli@1.39.5: AI-agent control-surface risk

Loading npm security reports…

wind-agent-cli@1.39.5: AI-agent control-surface risk | LPM Firewall

Source & flagged code

38 flagged

Lines 44-84json

44 "desktop:stage": "node scripts/release/prepare-desktop-app.js",

45 "desktop:pack": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --dir",

46 "desktop:dist:mac": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --mac dmg",

47 "desktop:dist:win": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --win nsis",

48 "server:bundle": "npm run build && node scripts/release/build-server-bundle.js",

49 "desktop:icon:mac": "node electron/scripts/generate-macos-icon.js",

50 "build": "npm run build:client && npm run build:server",

51 "build:client": "node scripts/build-client.mjs && node scripts/verify-pwa-build.mjs",

52 "prebuild:server": "node -e \"require('node:fs').rmSync('dist-server.next', { recursive: true, force: true })\"",

53 "build:server": "tsc -p server/tsconfig.json && tsc-alias -p server/tsconfig.json",

54 "postbuild:server": "node scripts/promote-dist-server.mjs",

55 "preview": "vite preview",

56 "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p server/tsconfig.json",

57 "test": "tsx --tsconfig server/tsconfig.json --test \"server/**/*.test.ts\" \"server/**/*.test.js\"",

58 "test:client": "tsx --test \"src/**/*.test.ts\" \"src/**/*.test.tsx\"",

59 "lint": "eslint src/ server/ --max-warnings=0",

60 "lint:fix": "eslint src/ server/ --fix",

61 "start": "npm run build && npm run server",

62 "release": "./release.sh",

63 "prepublishOnly": "npm run build",

64 "postinstall": "node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L64

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L64

65 "prepare": "husky",

66 "update:platform": "./update-platform.sh",

67 "audit:production": "npm audit --omit=dev --audit-level=low",

68 "audit:all": "npm audit --audit-level=low"

69 },

70 "build": {

71 "appId": "ai.cloudcli.desktop",

72 "productName": "WindCli",

73 "asar": false,

74 "artifactName": "windcli-desktop-${version}-${os}-${arch}.${ext}",

75 "directories": {

76 "output": "release/desktop"

77 },

78 "extraMetadata": {

79 "main": "electron/main.js"

80 },

81 "files": [

82 "electron/",

83 "public/",

84 "dist/",

dist/assets/index-DGH7BEWL.jsView file

Lines 1-22javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/CodeEditor-BKkhQvD8.js","assets/vendor-react-C2GTiUCy.js","assets/MarkdownPreview-Cvcy61Vz.js","assets/vendor-markdown-DkITEES2.js","assets/feature-chat-UCqj9dRr.js","assets/feature-workspace-taR6MVHJ.js","assets/vendor-ui-BaLmEz46.js",

dist-server/server/shared/claude-cli-path.jsView file

Lines 1-21javascript

1import { execFileSync } from 'node:child_process';

2import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

3import path from 'node:path';

dist/assets/vendor-data-DsEZeNPr.jsView file

Lines 1-5javascript

1import{e as we,g as jr}from"./vendor-react-C2GTiUCy.js";function ar(j,K){(K==null||K>j.length)&&(K

dist-server/server/modules/auth/auth.module.jsView file

Lines 1-27javascript

1import { createRequire } from 'node:module';

2import { getConnection, userDb } from '../../modules/database/index.js';

3import { authenticateToken, generateToken } from './auth.middleware.js';

4import { createAuthRouter } from

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

Lines 86-126javascript

86 }

87 }

88 return '';

89 })

90 .filter(Boolean)

91 .join('\n');

dist-server/server/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2// Load environment variables before other imports execute.

3import './load-env.js';

4import fs, { promises as fsPromises } from 'fs';

5import path from 'path';

6import

electron/main.jsView file

1import { app, BrowserWindow, clipboard, dialog, ipcMain, session, shell } from 'electron'; L2: import { spawn } from 'node:child_process'; L3: import path from 'node:path'; ... L11: L12: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L13: ... L17: const CALLBACK_URL = `${CALLBACK_PROTOCOL}://auth/callback`; L18: const CLOUDCLI_CONTROL_PLANE_URL = process.env.CLOUDCLI_CONTROL_PLANE_URL || 'https://cloudcli.ai'; L19: const REMOTE_START_TIMEOUT_MS = 30000; ... L23: L24: if (process.platform === 'win32') { L25: app.setAppUserModelId(APP_USER_MODEL_ID);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = electron/main.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/main.jsView on unpkg

electron/localServer.jsView file

1Detached bundled service listener: electron/localServer.js spawns dist-server/server/index.js; helper exposes a broad-bound HTTP listener. L1: import { spawn } from 'node:child_process'; L2: import fs from 'node:fs/promises'; L3: import http from 'node:http'; L4: import net from 'node:net'; ... L15: const MAX_STARTUP_LOG_LINES = 300; L16: const SERVER_MARKER_PATH = path.join(os.homedir(), '.cloudcli', 'local-server.json'); L17: const LOCAL_SERVER_URL_ENV_KEYS = [ ... L41: ok: res.statusCode >= 200 && res.statusCode < 300, L42: json: JSON.parse(body), L43: }); ... L99: function getDesktopPath() { L100: const currentPath = process.env.PATH || '';

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = electron/localServer.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/localServer.jsView on unpkg

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = dist-server/scripts/fix-codex-sdk-windows-hide.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist-server/server/modules/browser-use/browser-use.service.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = dist-server/server/modules/browser-use/browser-use.service.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/browser-use/browser-use.service.jsView on unpkg

server/modules/browser-use/browser-use.service.tsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = server/modules/browser-use/browser-use.service.ts matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/browser-use/browser-use.service.tsView on unpkg

electron/serverInstaller.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = electron/serverInstaller.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/serverInstaller.jsView on unpkg

scripts/release/build-server-bundle.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = scripts/release/build-server-bundle.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/build-server-bundle.jsView on unpkg

dist-server/server/modules/agent/agent.routes.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = dist-[redacted].routes.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/agent/agent.routes.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = dist-server/server/modules/cli/cli.module.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

scripts/fix-codex-sdk-windows-hide.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = scripts/fix-codex-sdk-windows-hide.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-codex-sdk-windows-hide.jsView on unpkg

server/modules/agent/agent.routes.tsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = server/modules/agent/agent.routes.ts matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/agent/agent.routes.tsView on unpkg

server/modules/cli/cli.module.tsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.4 matchedPath = server/modules/cli/cli.module.ts matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/cli/cli.module.tsView on unpkg

Source & flagged code

38 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/assets/index-DGH7BEWL.jsView file

2patternName = github_pat severity = critical line = 2

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/assets/index-DGH7BEWL.jsView on unpkg · L2

2patternName = github_pat severity = critical line = 2

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L2

5patternName = github_pat severity = critical line = 5

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L5

8patternName = github_pat severity = critical line = 8

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L8

11patternName = github_pat severity = critical line = 11

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L11

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L14

17patternName = github_pat severity = critical line = 17

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L17

20patternName = github_pat severity = critical line = 20

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L20

23patternName = github_pat severity = critical line = 23

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L23

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L2

5patternName = generic_password severity = medium line = 5

Medium

Secret Pattern

Hardcoded password in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L5

8patternName = generic_password severity = medium line = 8

Medium

Secret Pattern

Hardcoded password in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L8

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L11

17patternName = generic_password severity = medium line = 17

Medium

Secret Pattern

Hardcoded password in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L17

20patternName = generic_password severity = medium line = 20

Medium

Secret Pattern

Hardcoded password in dist/assets/index-DGH7BEWL.js

dist/assets/index-DGH7BEWL.jsView on unpkg · L20

dist-server/server/shared/claude-cli-path.jsView file

1import { execFileSync } from 'node:child_process'; L2: import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

dist/assets/vendor-data-DsEZeNPr.jsView file

3`+gt),tt&&(gt=_e(gt)),R&&Zt?P(gt):gt},K.setConfig=function(){let X=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};xe(X),At=!0,Ft=t,Tt=x},K.clearConfig=function(){Jt=null... L4: \0`,Y+=u(z,2),Y+=B.magic,Y+=u(v,2),Y+=u(T,2),Y+=u(it.crc32,4),Y+=u(it.compressedSize,4),Y+=u(it.uncompressedSize,4),Y+=u(W.length,2),Y+=u(P.length,2),{fileRecord:g.LOCAL_FILE_HEADE...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/vendor-data-DsEZeNPr.jsView on unpkg · L3

dist-server/server/modules/auth/auth.module.jsView file

7// composition root narrows its CommonJS runtime surface before injecting it. L8: const require = createRequire(import.meta.url); L9: const bcrypt = require('bcrypt');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-server/server/modules/auth/auth.module.jsView on unpkg · L7

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

106try { L107: return JSON.parse(trimmed); L108: } ... L172: const { default: Database } = await import('better-sqlite3'); L173: const cwdId = crypto.createHash('md5').update(projectPath || process.cwd()).digest('hex'); L174: const safeSessionId = sanitizeLeafDirectoryName(sessionId, 'cursor session id');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView on unpkg · L106

dist-server/server/index.jsView file

6Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network L6: import os from 'os'; L7: import http from 'http'; L8: import express from 'express'; ... L35: import { configureWebPush } from './modules/notifications/index.js'; L36: const __dirname = getModuleDirectory(import.meta.url); L37: // The server source runs from /server, while the compiled output runs from /dist-server/server. ... L41: // Version of the code that is actually running, captured once at process L42: // startup. This intentionally does NOT re-read package.json per request: after L43: // an update replaces the files on disk, package.json reflects the NEW version ... L48: try { L49: return JSON.parse(fs.readFileSync(path.join(APP_ROOT, 'package.json'), 'utf8')).vers

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-server/server/index.jsView on unpkg · L6

electron/main.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/main.jsView on unpkg

electron/localServer.jsView file

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/localServer.jsView on unpkg

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist-server/server/modules/browser-use/browser-use.service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/browser-use/browser-use.service.jsView on unpkg

server/modules/browser-use/browser-use.service.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/browser-use/browser-use.service.tsView on unpkg

electron/serverInstaller.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/serverInstaller.jsView on unpkg

scripts/release/build-server-bundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/build-server-bundle.jsView on unpkg

dist-server/server/modules/agent/agent.routes.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/agent/agent.routes.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

scripts/fix-codex-sdk-windows-hide.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-codex-sdk-windows-hide.jsView on unpkg

server/modules/agent/agent.routes.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/agent/agent.routes.tsView on unpkg

server/modules/cli/cli.module.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/cli/cli.module.tsView on unpkg

Findings

9 Critical19 High13 Medium9 Low

CriticalCritical Secretdist/assets/index-DGH7BEWL.js

CriticalSecret Patterndist/assets/index-DGH7BEWL.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist-server/server/shared/claude-cli-path.js

HighShell

HighEntrypoint Build Divergencedist-server/server/index.js

HighSandbox Evasion Gated Capabilityelectron/main.js

HighSpawned Bundled Service Listenerelectron/localServer.js

HighSemantic Analysis Limiteddist-server/scripts/fix-codex-sdk-windows-hide.js

HighKnown Malware Source Similaritydist-server/server/modules/browser-use/browser-use.service.js

HighKnown Malware Source Similarityserver/modules/browser-use/browser-use.service.ts

HighKnown Malware Source Similarityelectron/localServer.js

HighKnown Malware Source Similarityelectron/serverInstaller.js

HighKnown Malware Source Similarityelectron/main.js

HighKnown Malware Source Similarityscripts/release/build-server-bundle.js

HighKnown Malware Source Similaritydist-server/scripts/fix-codex-sdk-windows-hide.js

HighKnown Malware Source Similaritydist-server/server/modules/agent/agent.routes.js

HighKnown Malware Source Similaritydist-server/server/modules/cli/cli.module.js

HighKnown Malware Source Similarityscripts/fix-codex-sdk-windows-hide.js

HighKnown Malware Source Similarityserver/modules/agent/agent.routes.ts

HighKnown Malware Source Similarityserver/modules/cli/cli.module.ts

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist-server/server/modules/auth/auth.module.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Build Helperscripts/generate-pwa-icons.ps1

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/assets/index-DGH7BEWL.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/assets/vendor-data-DsEZeNPr.js

LowWeak Cryptodist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowCopyleft License

Source & flagged code

38 flagged

package.jsonView file

Lines 44-84json

44 "desktop:stage": "node scripts/release/prepare-desktop-app.js",

45 "desktop:pack": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --dir",

46 "desktop:dist:mac": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --mac dmg",

47 "desktop:dist:win": "npm run build && npm run desktop:stage && electron-builder --projectDir .desktop-build/desktop-app --win nsis",

48 "server:bundle": "npm run build && node scripts/release/build-server-bundle.js",

49 "desktop:icon:mac": "node electron/scripts/generate-macos-icon.js",

50 "build": "npm run build:client && npm run build:server",

51 "build:client": "node scripts/build-client.mjs && node scripts/verify-pwa-build.mjs",

52 "prebuild:server": "node -e \"require('node:fs').rmSync('dist-server.next', { recursive: true, force: true })\"",

53 "build:server": "tsc -p server/tsconfig.json && tsc-alias -p server/tsconfig.json",

54 "postbuild:server": "node scripts/promote-dist-server.mjs",

55 "preview": "vite preview",

56 "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p server/tsconfig.json",

57 "test": "tsx --tsconfig server/tsconfig.json --test \"server/**/*.test.ts\" \"server/**/*.test.js\"",

58 "test:client": "tsx --test \"src/**/*.test.ts\" \"src/**/*.test.tsx\"",

59 "lint": "eslint src/ server/ --max-warnings=0",

60 "lint:fix": "eslint src/ server/ --fix",

61 "start": "npm run build && npm run server",

62 "release": "./release.sh",

63 "prepublishOnly": "npm run build",

64 "postinstall": "node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L64

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L64

65 "prepare": "husky",

66 "update:platform": "./update-platform.sh",

67 "audit:production": "npm audit --omit=dev --audit-level=low",

68 "audit:all": "npm audit --audit-level=low"

69 },

70 "build": {

71 "appId": "ai.cloudcli.desktop",

72 "productName": "WindCli",

73 "asar": false,

74 "artifactName": "windcli-desktop-${version}-${os}-${arch}.${ext}",

75 "directories": {

76 "output": "release/desktop"

77 },

78 "extraMetadata": {

79 "main": "electron/main.js"

80 },

81 "files": [

82 "electron/",

83 "public/",

84 "dist/",

dist/assets/index-DGH7BEWL.jsView file

Lines 1-22javascript

dist-server/server/shared/claude-cli-path.jsView file

Lines 1-21javascript

1import { execFileSync } from 'node:child_process';

2import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

3import path from 'node:path';

dist/assets/vendor-data-DsEZeNPr.jsView file

Lines 1-5javascript

1import{e as we,g as jr}from"./vendor-react-C2GTiUCy.js";function ar(j,K){(K==null||K>j.length)&&(K

dist-server/server/modules/auth/auth.module.jsView file

Lines 1-27javascript

1import { createRequire } from 'node:module';

2import { getConnection, userDb } from '../../modules/database/index.js';

3import { authenticateToken, generateToken } from './auth.middleware.js';

4import { createAuthRouter } from

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

Lines 86-126javascript

86 }

87 }

88 return '';

89 })

90 .filter(Boolean)

91 .join('\n');

dist-server/server/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2// Load environment variables before other imports execute.

3import './load-env.js';

4import fs, { promises as fsPromises } from 'fs';

5import path from 'path';

6import

electron/main.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/main.jsView on unpkg

electron/localServer.jsView file

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/localServer.jsView on unpkg

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist-server/server/modules/browser-use/browser-use.service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/browser-use/browser-use.service.jsView on unpkg

server/modules/browser-use/browser-use.service.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/browser-use/browser-use.service.tsView on unpkg

electron/serverInstaller.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/serverInstaller.jsView on unpkg

scripts/release/build-server-bundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/build-server-bundle.jsView on unpkg

dist-server/server/modules/agent/agent.routes.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/agent/agent.routes.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

scripts/fix-codex-sdk-windows-hide.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-codex-sdk-windows-hide.jsView on unpkg

server/modules/agent/agent.routes.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/agent/agent.routes.tsView on unpkg

server/modules/cli/cli.module.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/cli/cli.module.tsView on unpkg

wind-agent-cli@1.39.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code