Loading npm security reports…
wind-agent-cli@1.44.9: Agent extension lifecycle risk – flagged | LPM Firewall
Flagged as agent extension risk
Allowed by default with warning: install-time first-party agent extension setup was detected.
scanned 23d ago · by lpm-firewall-ai The source supports a guarded plugin lifecycle warning because installation and updates execute repository code and installed servers restart automatically. Authentication and explicit management requests prevent classifying this behavior as an unconsented malicious install chain.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
An authenticated plugin install or update request; subsequent application startup for installed plugins.
Impact
A selected plugin can execute local code with the user's operating-system privileges and run again on application startup.
Mechanism
Repository installation runs declared build scripts and launches plugin server code. Startup skips servers only when their saved enabled preference is explicitly false; updates require a separate request.
AI rationale
The source supports a guarded plugin lifecycle warning because installation and updates execute repository code and installed servers restart automatically. Authentication and explicit management requests prevent classifying this behavior as an unconsented malicious install chain.
Evidence
dist-server/server/modules/plugins/plugin-registry.service.js dist-server/server/modules/plugins/plugins.routes.js dist-server/server/modules/plugins/plugins.service.js dist-server/server/modules/plugins/plugin-process.service.js dist-server/server/index.js .claude-code-ui/plugins .claude-code-ui/plugins.json
public snapshot AI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
Authenticated plugin install and update routes accept user requests. Plugin dependency installation suppresses lifecycle scripts, but a declared build script executes through npm. Plugin installation immediately starts its declared server as a Node subprocess. Application startup restarts installed plugin servers unless explicitly disabled. Evidence against
The inspected postinstall script only changes node-pty helper permissions on macOS. Plugin server subprocesses receive a restricted environment. No covert exfiltration or malicious npm install mutation was established. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem Network Shell WebSocket
Supply chain HighEntropyStrings Minified PossibleObfuscation Telemetry
40 flagged · loading source • scripts.postinstall = node scripts/fix-node-pty.js
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg 2 patternName = github_pat
severity = critical
line = 2
Critical Critical Secret
Package contains a critical-looking secret pattern.
dist/assets/index-JIaeE8sP.js View on unpkg · L2 2 patternName = github_pat
severity = critical
line = 2
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L2
9 Critical 17 High 14 Medium 10 Low
Critical Critical Secret dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
Critical Secret Pattern dist/assets/index-JIaeE8sP.js
High Install Time Lifecycle Scripts package.json
High Entrypoint Build Divergence dist-server/server/index.js
Affected versions and remediation This report applies to wind-agent-cli@1.44.9 .
See all versions of wind-agent-cli for other recorded verdicts.
Review the evidence and your use of wind-agent-cli@1.44.9 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-30 10:15:09.702Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
94% Suspicious
AI assessment confidence
Package metadata npm Author WindCli contributors
Maintainers caine.luo
Version 1.44.9
Latest on npm 1.47.4
Published Sep 21, 2026
License AGPL-3.0-or-later
Dependencies 65
Integrity verified
Package size 9.69 MB
Files 1,170
Keywords claude code claude-code claude-code-ui cloudcli codex cursor cursor-cli anthropic
UrlStrings
scanned 735 file(s), 11.0 MB of source, external domains: 0.0.0.0, 10.0.0.7, 127.0.0.1, 169.254.169.254, 172.16.2.9, 192.168.1.9, another-project.test, api-gateway.cloudcli.ai, api.example.com, api.exemple.com, api.github.com, api.openai.com, app.example.test, bit.ly, browser-restarted.test, chevrotain.io, cloudcli.ai, cloudcli.example, codex.example.com, cursor.com, data-pipeline.cloudcli.ai, desktop.test, developer.mozilla.org, docs.anthropic.com, docs.docker.com, en.wikipedia.org, example.com, example.org, example.test, extension.test, fb.me, github.com, github.com.evil.example, global.example.com, langium.org, legacy.test, localhost.example.com, ml-trainer.cloudcli.ai, mobile.test, new-project.test, new.test, old.test, opencode.ai, opencode.example.com, other-window.test, other.example.test, other.test, private.test, push.example.test, radix-ui.com
5 patternName = github_pat
severity = critical
line = 5
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L5 8 patternName = github_pat
severity = critical
line = 8
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L8 11 patternName = github_pat
severity = critical
line = 11
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L11 14 patternName = github_pat
severity = critical
line = 14
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L14 17 patternName = github_pat
severity = critical
line = 17
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L17 20 patternName = github_pat
severity = critical
line = 20
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L20 23 patternName = github_pat
severity = critical
line = 23
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L23 2 patternName = generic_password
severity = medium
line = 2
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L2 5 patternName = generic_password
severity = medium
line = 5
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L5 8 patternName = generic_password
severity = medium
line = 8
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L8 11 patternName = generic_password
severity = medium
line = 11
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L11 17 patternName = generic_password
severity = medium
line = 17
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L17 20 patternName = generic_password
severity = medium
line = 20
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L20 23 patternName = generic_password
severity = medium
line = 23
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L23 3 `+gt),tt&&(gt=_e(gt)),R&&Zt?P(gt):gt},K.setConfig=function(){let X=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};xe(X),At=!0,Ft=t,Tt=x},K.clearConfig=function(){Jt=null...
L4: \0`,Y+=u(z,2),Y+=B.magic,Y+=u(v,2),Y+=u(T,2),Y+=u(it.crc32,4),Y+=u(it.compressedSize,4),Y+=u(it.uncompressedSize,4),Y+=u(W.length,2),Y+=u(P.length,2),{fileRecord:g.LOCAL_FILE_HEADE...
Low Eval
Package source references a known benign dynamic code generation pattern.
dist/assets/vendor-data-DsEZeNPr.js View on unpkg · L3 dist-server/server/modules/auth/auth.module.js View file 7 // composition root narrows its CommonJS runtime surface before injecting it.
L8: const require = createRequire(import.meta.url);
L9: const bcrypt = require('bcrypt');
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist-server/server/modules/auth/auth.module.js View on unpkg · L7 scripts/tests/browser-extension-connection.test.mjs View file 54 return new Response(JSON.stringify(connectError ? { error: connectError } : {
L55: success: true, data: { protocolVersion: 2, sessionId: 'bound-chrome', token: 'fixture-credential', scope: 'browser', name: 'Work Chrome', controller: 'agent' },
L56: }), { status: connectError ? 400 : 200 });
...
L69: async function openPopup() {
L70: const dom = new JSDOM(html, { url: 'https://extension.test/popup.html' });
L71: let disposed = false;
Medium Unsafe Vm Context
Package source executes code through a VM context API.
scripts/tests/browser-extension-connection.test.mjs View on unpkg · L54 dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js View file 106 try {
L107: return JSON.parse(trimmed);
L108: }
...
L172: const { default: Database } = await import('better-sqlite3');
L173: const cwdId = crypto.createHash('md5').update(projectPath || process.cwd()).digest('hex');
L174: const safeSessionId = sanitizeLeafDirectoryName(sessionId, 'cursor session id');
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js View on unpkg · L106 6 Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network
L6: import os from 'os';
L7: import http from 'http';
L8: import express from 'express';
...
L35: import { configureWebPush } from './modules/notifications/index.js';
L36: const __dirname = getModuleDirectory(import.meta.url);
L37: // The server source runs from /server, while the compiled output runs from /dist-server/server.
...
L41: // Version of the code that is actually running, captured once at process
L42: // startup. This intentionally does NOT re-read package.json per request: after
L43: // an update replaces the files on disk, package.json reflects the NEW version
...
L48: try {
L49: return JSON.parse(fs.readFileSync(path.join(APP_ROOT, 'package.json'), 'utf8')).vers
High Entrypoint Build Divergence
Manifest entrypoint contains risky behavior absent from dist/build output.
dist-server/server/index.js View on unpkg · L6 1 import { app, BrowserWindow, clipboard, dialog, ipcMain, session, shell, webContents } from 'electron';
L2: import { spawn } from 'node:child_process';
L3: import path from 'node:path';
...
L12:
L13: const __dirname = path.dirname(fileURLToPath(import.meta.url));
L14:
...
L18: const CALLBACK_URL = `${CALLBACK_PROTOCOL}://auth/callback`;
L19: const CLOUDCLI_CONTROL_PLANE_URL = process.env.CLOUDCLI_CONTROL_PLANE_URL || 'https://cloudcli.ai';
L20: const REMOTE_START_TIMEOUT_MS = 30000;
...
L24:
L25: if (process.platform === 'win32') {
L26: app.setAppUserModelId(APP_USER_MODEL_ID);
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
electron/main.js View on unpkg · L1 • path = scripts/generate-pwa-icons.ps1
kind = build_helper
sizeBytes = 71
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
scripts/generate-pwa-icons.ps1 View on unpkg • path = dist/windcli-browser-bridge.zip
kind = high_entropy_blob
sizeBytes = 82880
magicHex = [redacted]
High Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dist/windcli-browser-bridge.zip View on unpkg • path = dist/windcli-browser-bridge.zip
kind = compressed_blob
sizeBytes = 82880
magicHex = [redacted]
Medium Ships Compressed Blob
Package ships compressed or archive-like blobs.
dist/windcli-browser-bridge.zip View on unpkg • path = dist/windcli-browser-bridge.zip
kind = nested_archive_needs_inspection
sizeBytes = 82880
magicHex = [redacted]
Low Nested Archive Needs Inspection
Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
dist/windcli-browser-bridge.zip View on unpkg dist-server/server/modules/assets/services/image-assets.service.js View file • stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist-server/server/modules/assets/services/image-assets.service.js View on unpkg dist-server/server/modules/database/connection.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted].js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/database/connection.js View on unpkg dist-server/server/modules/database/tests/provider-models.db.integration.test.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-models.db.integration.test.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/database/tests/provider-models.db.integration.test.js View on unpkg dist-server/server/modules/plugins/plugin-process.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-process.service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/plugins/plugin-process.service.js View on unpkg dist-server/server/modules/plugins/plugin-registry.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-registry.service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/plugins/plugin-registry.service.js View on unpkg dist-server/server/modules/providers/list/claude/claude-auth.provider.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-auth.provider.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/providers/list/claude/claude-auth.provider.js View on unpkg dist-server/server/modules/providers/list/opencode/opencode-auth.provider.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-auth.provider.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/providers/list/opencode/opencode-auth.provider.js View on unpkg dist-server/server/modules/cli/sandbox.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted].service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/cli/sandbox.service.js View on unpkg dist-server/server/modules/projects/services/project-clone.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-clone.service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/projects/services/project-clone.service.js View on unpkg dist-server/server/modules/providers/tests/opencode-sessions.test.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-sessions.test.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/providers/tests/opencode-sessions.test.js View on unpkg dist/assets/diagram-Q27KOJAE-B0ELP_pc.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist/assets/diagram-Q27KOJAE-D_1NRrhv.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/diagram-Q27KOJAE-B0ELP_pc.js View on unpkg dist/assets/flowDiagram-UKHOOZJN-NTmtPEhf.js View file • matchType = token_shingles
matchedPackage = @dotobokuri/fleet-console@1.90.0
matchedPath = dist/client/assets/flowDiagram-DWJPFMVM-Dz5wLJVG.js
matchedIdentity = npm:[redacted]:1.90.0
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/flowDiagram-UKHOOZJN-NTmtPEhf.js View on unpkg dist/assets/wardleyDiagram-T6FBY63Y-CwI8_RBA.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist/assets/wardleyDiagram-T6FBY63Y-CRgRdD3Z.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/wardleyDiagram-T6FBY63Y-CwI8_RBA.js View on unpkg High
Sandbox Evasion Gated Capability
electron/main.js
High Ships High Entropy Blob dist/windcli-browser-bridge.zip
High Semantic Analysis Limited dist-server/server/modules/assets/services/image-assets.service.js
High Known Malware Source Similarity dist-server/server/modules/database/connection.js
High Known Malware Source Similarity dist-server/server/modules/database/tests/provider-models.db.integration.test.js
High Known Malware Source Similarity dist-server/server/modules/plugins/plugin-process.service.js
High Known Malware Source Similarity dist-server/server/modules/plugins/plugin-registry.service.js
High Known Malware Source Similarity dist-server/server/modules/providers/list/claude/claude-auth.provider.js
High Known Malware Source Similarity dist-server/server/modules/providers/list/opencode/opencode-auth.provider.js
High Known Malware Source Similarity dist-server/server/modules/cli/sandbox.service.js
High Known Malware Source Similarity dist-server/server/modules/projects/services/project-clone.service.js
High Known Malware Source Similarity dist-server/server/modules/providers/tests/opencode-sessions.test.js
High Known Malware Source Similarity dist/assets/diagram-Q27KOJAE-B0ELP_pc.js
High Known Malware Source Similarity dist/assets/flowDiagram-UKHOOZJN-NTmtPEhf.js
High Known Malware Source Similarity dist/assets/wardleyDiagram-T6FBY63Y-CwI8_RBA.js
Medium Dynamic Require dist-server/server/modules/auth/auth.module.js
Medium Unsafe Vm Context scripts/tests/browser-extension-connection.test.mjs
Medium Ships Build Helper scripts/generate-pwa-icons.ps1
Medium Ships Compressed Blob dist/windcli-browser-bridge.zip
Medium Structural Risk Force Deep Review
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Medium Secret Pattern dist/assets/index-JIaeE8sP.js
Low Non Install Lifecycle Scripts
Low Eval dist/assets/vendor-data-DsEZeNPr.js
Low Weak Crypto dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js
Low Nested Archive Needs Inspection dist/windcli-browser-bridge.zip
Runtime surface package.json Entrypoints main → dist-server/server/index.js bin → wacli
Runtime node >=22
Artifact 20.0 MB · 1,170 files 2 signature(s)
Install lifecycle postinstall prepare prepublishOnly
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem Network Shell WebSocket HighEntropyStrings Minified PossibleObfuscation Telemetry UrlStrings CopyleftLicense
40 flagged • scripts.postinstall = node scripts/fix-node-pty.js
High Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.json View on unpkg 2 patternName = github_pat
severity = critical
line = 2
Critical Critical Secret
Package contains a critical-looking secret pattern.
dist/assets/index-JIaeE8sP.js View on unpkg · L2 2 patternName = github_pat
severity = critical
line = 2
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L2 5 patternName = github_pat
severity = critical
line = 5
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L5 8 patternName = github_pat
severity = critical
line = 8
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L8 11 patternName = github_pat
severity = critical
line = 11
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L11 14 patternName = github_pat
severity = critical
line = 14
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L14 17 patternName = github_pat
severity = critical
line = 17
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L17 20 patternName = github_pat
severity = critical
line = 20
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L20 23 patternName = github_pat
severity = critical
line = 23
Critical Secret Pattern
GitHub personal access token in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L23 2 patternName = generic_password
severity = medium
line = 2
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L2 5 patternName = generic_password
severity = medium
line = 5
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L5 8 patternName = generic_password
severity = medium
line = 8
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L8 11 patternName = generic_password
severity = medium
line = 11
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L11 17 patternName = generic_password
severity = medium
line = 17
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L17 20 patternName = generic_password
severity = medium
line = 20
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L20 23 patternName = generic_password
severity = medium
line = 23
Medium Secret Pattern
Hardcoded password in dist/assets/index-JIaeE8sP.js
dist/assets/index-JIaeE8sP.js View on unpkg · L23 3 `+gt),tt&&(gt=_e(gt)),R&&Zt?P(gt):gt},K.setConfig=function(){let X=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};xe(X),At=!0,Ft=t,Tt=x},K.clearConfig=function(){Jt=null...
L4: \0`,Y+=u(z,2),Y+=B.magic,Y+=u(v,2),Y+=u(T,2),Y+=u(it.crc32,4),Y+=u(it.compressedSize,4),Y+=u(it.uncompressedSize,4),Y+=u(W.length,2),Y+=u(P.length,2),{fileRecord:g.LOCAL_FILE_HEADE...
Low Eval
Package source references a known benign dynamic code generation pattern.
dist/assets/vendor-data-DsEZeNPr.js View on unpkg · L3 dist-server/server/modules/auth/auth.module.js View file 7 // composition root narrows its CommonJS runtime surface before injecting it.
L8: const require = createRequire(import.meta.url);
L9: const bcrypt = require('bcrypt');
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist-server/server/modules/auth/auth.module.js View on unpkg · L7 scripts/tests/browser-extension-connection.test.mjs View file 54 return new Response(JSON.stringify(connectError ? { error: connectError } : {
L55: success: true, data: { protocolVersion: 2, sessionId: 'bound-chrome', token: 'fixture-credential', scope: 'browser', name: 'Work Chrome', controller: 'agent' },
L56: }), { status: connectError ? 400 : 200 });
...
L69: async function openPopup() {
L70: const dom = new JSDOM(html, { url: 'https://extension.test/popup.html' });
L71: let disposed = false;
Medium Unsafe Vm Context
Package source executes code through a VM context API.
scripts/tests/browser-extension-connection.test.mjs View on unpkg · L54 dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js View file 106 try {
L107: return JSON.parse(trimmed);
L108: }
...
L172: const { default: Database } = await import('better-sqlite3');
L173: const cwdId = crypto.createHash('md5').update(projectPath || process.cwd()).digest('hex');
L174: const safeSessionId = sanitizeLeafDirectoryName(sessionId, 'cursor session id');
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist-server/server/modules/providers/list/cursor/cursor-sessions.provider.js View on unpkg · L106 6 Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network
L6: import os from 'os';
L7: import http from 'http';
L8: import express from 'express';
...
L35: import { configureWebPush } from './modules/notifications/index.js';
L36: const __dirname = getModuleDirectory(import.meta.url);
L37: // The server source runs from /server, while the compiled output runs from /dist-server/server.
...
L41: // Version of the code that is actually running, captured once at process
L42: // startup. This intentionally does NOT re-read package.json per request: after
L43: // an update replaces the files on disk, package.json reflects the NEW version
...
L48: try {
L49: return JSON.parse(fs.readFileSync(path.join(APP_ROOT, 'package.json'), 'utf8')).vers
High Entrypoint Build Divergence
Manifest entrypoint contains risky behavior absent from dist/build output.
dist-server/server/index.js View on unpkg · L6 1 import { app, BrowserWindow, clipboard, dialog, ipcMain, session, shell, webContents } from 'electron';
L2: import { spawn } from 'node:child_process';
L3: import path from 'node:path';
...
L12:
L13: const __dirname = path.dirname(fileURLToPath(import.meta.url));
L14:
...
L18: const CALLBACK_URL = `${CALLBACK_PROTOCOL}://auth/callback`;
L19: const CLOUDCLI_CONTROL_PLANE_URL = process.env.CLOUDCLI_CONTROL_PLANE_URL || 'https://cloudcli.ai';
L20: const REMOTE_START_TIMEOUT_MS = 30000;
...
L24:
L25: if (process.platform === 'win32') {
L26: app.setAppUserModelId(APP_USER_MODEL_ID);
High Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
electron/main.js View on unpkg · L1 • path = scripts/generate-pwa-icons.ps1
kind = build_helper
sizeBytes = 71
magicHex = [redacted]
Medium Ships Build Helper
Package ships non-JavaScript build or shell helper files.
scripts/generate-pwa-icons.ps1 View on unpkg • path = dist/windcli-browser-bridge.zip
kind = high_entropy_blob
sizeBytes = 82880
magicHex = [redacted]
High Ships High Entropy Blob
Package ships high-entropy non-source blobs.
dist/windcli-browser-bridge.zip View on unpkg • path = dist/windcli-browser-bridge.zip
kind = compressed_blob
sizeBytes = 82880
magicHex = [redacted]
Medium Ships Compressed Blob
Package ships compressed or archive-like blobs.
dist/windcli-browser-bridge.zip View on unpkg • path = dist/windcli-browser-bridge.zip
kind = nested_archive_needs_inspection
sizeBytes = 82880
magicHex = [redacted]
Low Nested Archive Needs Inspection
Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
dist/windcli-browser-bridge.zip View on unpkg dist-server/server/modules/assets/services/image-assets.service.js View file • stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 18
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist-server/server/modules/assets/services/image-assets.service.js View on unpkg dist-server/server/modules/database/connection.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted].js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/database/connection.js View on unpkg dist-server/server/modules/database/tests/provider-models.db.integration.test.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-models.db.integration.test.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/database/tests/provider-models.db.integration.test.js View on unpkg dist-server/server/modules/plugins/plugin-process.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-process.service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/plugins/plugin-process.service.js View on unpkg dist-server/server/modules/plugins/plugin-registry.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-registry.service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/plugins/plugin-registry.service.js View on unpkg dist-server/server/modules/providers/list/claude/claude-auth.provider.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-auth.provider.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/providers/list/claude/claude-auth.provider.js View on unpkg dist-server/server/modules/providers/list/opencode/opencode-auth.provider.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-auth.provider.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/providers/list/opencode/opencode-auth.provider.js View on unpkg dist-server/server/modules/cli/sandbox.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted].service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/cli/sandbox.service.js View on unpkg dist-server/server/modules/projects/services/project-clone.service.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-clone.service.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/projects/services/project-clone.service.js View on unpkg dist-server/server/modules/providers/tests/opencode-sessions.test.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist-[redacted]-sessions.test.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist-server/server/modules/providers/tests/opencode-sessions.test.js View on unpkg dist/assets/diagram-Q27KOJAE-B0ELP_pc.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist/assets/diagram-Q27KOJAE-D_1NRrhv.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/diagram-Q27KOJAE-B0ELP_pc.js View on unpkg dist/assets/flowDiagram-UKHOOZJN-NTmtPEhf.js View file • matchType = token_shingles
matchedPackage = @dotobokuri/fleet-console@1.90.0
matchedPath = dist/client/assets/flowDiagram-DWJPFMVM-Dz5wLJVG.js
matchedIdentity = npm:[redacted]:1.90.0
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/flowDiagram-UKHOOZJN-NTmtPEhf.js View on unpkg dist/assets/wardleyDiagram-T6FBY63Y-CwI8_RBA.js View file • matchType = normalized_sha256
matchedPackage = wind-agent-cli@1.40.0
matchedPath = dist/assets/wardleyDiagram-T6FBY63Y-CRgRdD3Z.js
matchedIdentity = npm:d2luZC1hZ2VudC1jbGk:1.40.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/wardleyDiagram-T6FBY63Y-CwI8_RBA.js View on unpkg