wind-agent-cli@1.40.0: AI-agent control-surface risk

Loading npm security reports…

wind-agent-cli@1.40.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

38 flagged

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/assets/index-mM_mjquP.jsView file

2patternName = github_pat severity = critical line = 2

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/assets/index-mM_mjquP.jsView on unpkg · L2

2patternName = github_pat severity = critical line = 2

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L2

5patternName = github_pat severity = critical line = 5

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L5

8patternName = github_pat severity = critical line = 8

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L8

11patternName = github_pat severity = critical line = 11

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L11

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L14

17patternName = github_pat severity = critical line = 17

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L17

20patternName = github_pat severity = critical line = 20

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L20

23patternName = github_pat severity = critical line = 23

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L23

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L2

5patternName = generic_password severity = medium line = 5

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L5

8patternName = generic_password severity = medium line = 8

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L8

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L11

17patternName = generic_password severity = medium line = 17

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L17

20patternName = generic_password severity = medium line = 20

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L20

dist-server/server/shared/claude-cli-path.jsView file

Lines 1-21javascript

1import { execFileSync } from 'node:child_process';

2import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

3import path from 'node:path';

dist/assets/vendor-data-DsEZeNPr.jsView file

3`+gt),tt&&(gt=_e(gt)),R&&Zt?P(gt):gt},K.setConfig=function(){let X=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};xe(X),At=!0,Ft=t,Tt=x},K.clearConfig=function(){Jt=null... L4: \0`,Y+=u(z,2),Y+=B.magic,Y+=u(v,2),Y+=u(T,2),Y+=u(it.crc32,4),Y+=u(it.compressedSize,4),Y+=u(it.uncompressedSize,4),Y+=u(W.length,2),Y+=u(P.length,2),{fileRecord:g.LOCAL_FILE_HEADE...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/vendor-data-DsEZeNPr.jsView on unpkg · L3

dist-server/server/modules/auth/auth.module.jsView file

Lines 1-27javascript

1import { createRequire } from 'node:module';

2import { getConnection, userDb } from '../../modules/database/index.js';

3import { authenticateToken, generateToken } from './auth.middleware.js';

4import { createAuthRouter } from

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

Lines 86-126javascript

86 }

87 }

88 return '';

89 })

90 .filter(Boolean)

91 .join('\n');

dist-server/server/index.jsView file

6Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network L6: import os from 'os'; L7: import http from 'http'; L8: import express from 'express'; ... L37: import { configureWebPush } from './modules/notifications/index.js'; L38: const __dirname = getModuleDirectory(import.meta.url); L39: // The server source runs from /server, while the compiled output runs from /dist-server/server. ... L43: // Version of the code that is actually running, captured once at process L44: // startup. This intentionally does NOT re-read package.json per request: after L45: // an update replaces the files on disk, package.json reflects the NEW version ... L50: try { L51: return JSON.parse(fs.readFileSync(path.join(APP_ROOT, 'package.json'), 'utf8')).vers

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-server/server/index.jsView on unpkg · L6

electron/main.jsView file

1import { app, BrowserWindow, clipboard, dialog, ipcMain, session, shell } from 'electron'; L2: import { spawn } from 'node:child_process'; L3: import path from 'node:path'; ... L11: L12: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L13: ... L17: const CALLBACK_URL = `${CALLBACK_PROTOCOL}://auth/callback`; L18: const CLOUDCLI_CONTROL_PLANE_URL = process.env.CLOUDCLI_CONTROL_PLANE_URL || 'https://cloudcli.ai'; L19: const REMOTE_START_TIMEOUT_MS = 30000; ... L23: L24: if (process.platform === 'win32') { L25: app.setAppUserModelId(APP_USER_MODEL_ID);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = electron/main.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/main.jsView on unpkg

electron/localServer.jsView file

1Detached bundled service listener: electron/localServer.js spawns dist-server/server/index.js; helper exposes a broad-bound HTTP listener. L1: import { spawn } from 'node:child_process'; L2: import fs from 'node:fs/promises'; L3: import http from 'node:http'; L4: import net from 'node:net'; ... L15: const MAX_STARTUP_LOG_LINES = 300; L16: const SERVER_MARKER_PATH = path.join(os.homedir(), '.cloudcli', 'local-server.json'); L17: const LOCAL_SERVER_URL_ENV_KEYS = [ ... L41: ok: res.statusCode >= 200 && res.statusCode < 300, L42: json: JSON.parse(body), L43: }); ... L99: function getDesktopPath() { L100: const currentPath = process.env.PATH || '';

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = electron/localServer.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/localServer.jsView on unpkg

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = dist-server/scripts/fix-codex-sdk-windows-hide.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist-server/server/modules/browser-use/browser-use.service.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = dist-server/server/modules/browser-use/browser-use.service.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/browser-use/browser-use.service.jsView on unpkg

electron/serverInstaller.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = electron/serverInstaller.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/serverInstaller.jsView on unpkg

scripts/release/build-server-bundle.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = scripts/release/build-server-bundle.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/build-server-bundle.jsView on unpkg

dist-server/server/modules/agent/agent.routes.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = dist-[redacted].routes.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/agent/agent.routes.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = dist-server/server/modules/cli/cli.module.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

scripts/fix-codex-sdk-windows-hide.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = scripts/fix-codex-sdk-windows-hide.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-codex-sdk-windows-hide.jsView on unpkg

server/modules/agent/agent.routes.tsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = server/modules/agent/agent.routes.ts matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/agent/agent.routes.tsView on unpkg

dist-server/server/modules/database/connection.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = dist-[redacted].js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/database/connection.jsView on unpkg

dist-server/server/modules/database/tests/provider-models.db.integration.test.jsView file

•matchType = normalized_sha256 matchedPackage = wind-agent-cli@1.39.5 matchedPath = dist-[redacted]-models.db.integration.test.js matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.39.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/database/tests/provider-models.db.integration.test.jsView on unpkg

Source & flagged code

38 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/assets/index-mM_mjquP.jsView file

2patternName = github_pat severity = critical line = 2

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/assets/index-mM_mjquP.jsView on unpkg · L2

2patternName = github_pat severity = critical line = 2

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L2

5patternName = github_pat severity = critical line = 5

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L5

8patternName = github_pat severity = critical line = 8

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L8

11patternName = github_pat severity = critical line = 11

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L11

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L14

17patternName = github_pat severity = critical line = 17

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L17

20patternName = github_pat severity = critical line = 20

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L20

23patternName = github_pat severity = critical line = 23

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L23

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L2

5patternName = generic_password severity = medium line = 5

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L5

8patternName = generic_password severity = medium line = 8

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L8

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L11

17patternName = generic_password severity = medium line = 17

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L17

20patternName = generic_password severity = medium line = 20

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L20

dist-server/server/shared/claude-cli-path.jsView file

1import { execFileSync } from 'node:child_process'; L2: import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

dist/assets/vendor-data-DsEZeNPr.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/vendor-data-DsEZeNPr.jsView on unpkg · L3

dist-server/server/modules/auth/auth.module.jsView file

7// composition root narrows its CommonJS runtime surface before injecting it. L8: const require = createRequire(import.meta.url); L9: const bcrypt = require('bcrypt');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-server/server/modules/auth/auth.module.jsView on unpkg · L7

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

106try { L107: return JSON.parse(trimmed); L108: } ... L172: const { default: Database } = await import('better-sqlite3'); L173: const cwdId = crypto.createHash('md5').update(projectPath || process.cwd()).digest('hex'); L174: const safeSessionId = sanitizeLeafDirectoryName(sessionId, 'cursor session id');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView on unpkg · L106

dist-server/server/index.jsView file

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-server/server/index.jsView on unpkg · L6

electron/main.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/main.jsView on unpkg

electron/localServer.jsView file

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/localServer.jsView on unpkg

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist-server/server/modules/browser-use/browser-use.service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/browser-use/browser-use.service.jsView on unpkg

electron/serverInstaller.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/serverInstaller.jsView on unpkg

scripts/release/build-server-bundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/build-server-bundle.jsView on unpkg

dist-server/server/modules/agent/agent.routes.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/agent/agent.routes.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

scripts/fix-codex-sdk-windows-hide.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-codex-sdk-windows-hide.jsView on unpkg

server/modules/agent/agent.routes.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/agent/agent.routes.tsView on unpkg

dist-server/server/modules/database/connection.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/database/connection.jsView on unpkg

dist-server/server/modules/database/tests/provider-models.db.integration.test.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/database/tests/provider-models.db.integration.test.jsView on unpkg

Findings

9 Critical19 High13 Medium9 Low

CriticalCritical Secretdist/assets/index-mM_mjquP.js

CriticalSecret Patterndist/assets/index-mM_mjquP.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist-server/server/shared/claude-cli-path.js

HighShell

HighEntrypoint Build Divergencedist-server/server/index.js

HighSandbox Evasion Gated Capabilityelectron/main.js

HighSpawned Bundled Service Listenerelectron/localServer.js

HighSemantic Analysis Limiteddist-server/scripts/fix-codex-sdk-windows-hide.js

HighKnown Malware Source Similaritydist-server/server/modules/browser-use/browser-use.service.js

HighKnown Malware Source Similarityelectron/localServer.js

HighKnown Malware Source Similarityelectron/serverInstaller.js

HighKnown Malware Source Similarityelectron/main.js

HighKnown Malware Source Similarityscripts/release/build-server-bundle.js

HighKnown Malware Source Similaritydist-server/scripts/fix-codex-sdk-windows-hide.js

HighKnown Malware Source Similaritydist-server/server/modules/agent/agent.routes.js

HighKnown Malware Source Similaritydist-server/server/modules/cli/cli.module.js

HighKnown Malware Source Similarityscripts/fix-codex-sdk-windows-hide.js

HighKnown Malware Source Similarityserver/modules/agent/agent.routes.ts

HighKnown Malware Source Similaritydist-server/server/modules/database/connection.js

HighKnown Malware Source Similaritydist-server/server/modules/database/tests/provider-models.db.integration.test.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist-server/server/modules/auth/auth.module.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Build Helperscripts/generate-pwa-icons.ps1

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/assets/index-mM_mjquP.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/assets/vendor-data-DsEZeNPr.js

LowWeak Cryptodist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowCopyleft License

Source & flagged code

38 flagged

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty.js && node scripts/fix-codex-sdk-windows-hide.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/assets/index-mM_mjquP.jsView file

2patternName = github_pat severity = critical line = 2

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/assets/index-mM_mjquP.jsView on unpkg · L2

2patternName = github_pat severity = critical line = 2

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L2

5patternName = github_pat severity = critical line = 5

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L5

8patternName = github_pat severity = critical line = 8

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L8

11patternName = github_pat severity = critical line = 11

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L11

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L14

17patternName = github_pat severity = critical line = 17

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L17

20patternName = github_pat severity = critical line = 20

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L20

23patternName = github_pat severity = critical line = 23

Critical

Secret Pattern

GitHub personal access token in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L23

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L2

5patternName = generic_password severity = medium line = 5

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L5

8patternName = generic_password severity = medium line = 8

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L8

11patternName = generic_password severity = medium line = 11

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L11

17patternName = generic_password severity = medium line = 17

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L17

20patternName = generic_password severity = medium line = 20

Medium

Secret Pattern

Hardcoded password in dist/assets/index-mM_mjquP.js

dist/assets/index-mM_mjquP.jsView on unpkg · L20

dist-server/server/shared/claude-cli-path.jsView file

Lines 1-21javascript

1import { execFileSync } from 'node:child_process';

2import fs from 'node:fs';

High

Child Process

Package source references child process execution.

dist-server/server/shared/claude-cli-path.jsView on unpkg · L1

3import path from 'node:path';

dist/assets/vendor-data-DsEZeNPr.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/vendor-data-DsEZeNPr.jsView on unpkg · L3

dist-server/server/modules/auth/auth.module.jsView file

Lines 1-27javascript

1import { createRequire } from 'node:module';

2import { getConnection, userDb } from '../../modules/database/index.js';

3import { authenticateToken, generateToken } from './auth.middleware.js';

4import { createAuthRouter } from

dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.jsView file

Lines 86-126javascript

86 }

87 }

88 return '';

89 })

90 .filter(Boolean)

91 .join('\n');

dist-server/server/index.jsView file

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-server/server/index.jsView on unpkg · L6

electron/main.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

electron/main.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/main.jsView on unpkg

electron/localServer.jsView file

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

electron/localServer.jsView on unpkg · L1

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/localServer.jsView on unpkg

scripts/generate-pwa-icons.ps1View file

•path = scripts/generate-pwa-icons.ps1 kind = build_helper sizeBytes = 1294 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/generate-pwa-icons.ps1View on unpkg

dist-server/scripts/fix-codex-sdk-windows-hide.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/scripts/fix-codex-sdk-windows-hide.jsView on unpkg

dist-server/server/modules/browser-use/browser-use.service.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/browser-use/browser-use.service.jsView on unpkg

electron/serverInstaller.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

electron/serverInstaller.jsView on unpkg

scripts/release/build-server-bundle.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/build-server-bundle.jsView on unpkg

dist-server/server/modules/agent/agent.routes.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/agent/agent.routes.jsView on unpkg

dist-server/server/modules/cli/cli.module.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/cli/cli.module.jsView on unpkg

scripts/fix-codex-sdk-windows-hide.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/fix-codex-sdk-windows-hide.jsView on unpkg

server/modules/agent/agent.routes.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

server/modules/agent/agent.routes.tsView on unpkg

dist-server/server/modules/database/connection.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/database/connection.jsView on unpkg

dist-server/server/modules/database/tests/provider-models.db.integration.test.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist-server/server/modules/database/tests/provider-models.db.integration.test.jsView on unpkg

wind-agent-cli@1.40.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code