@aws/lsp-codewhisperer

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Script: node ./script/install_transitive_dep.js

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/71c53d10a14c154e1790c622ffaa3f476f15fc22/out/language-server/agenticChat/tools/executeBash.js#L452 450 | }; 451 | // Set up environment variables with AWS CLI identifier for CloudTrail auditability > 452 | const env = { ...process.env }; 453 | // Add Q Developer IDE identifier for AWS CLI commands 454 | // Check if command contains 'aws ' anywhere (handles multi-command scenarios)

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/71c53d10a14c154e1790c622ffaa3f476f15fc22/out/language-server/agenticChat/tools/mcp/mcpManager.js#L386 384 | // stdio transport - merge additional env with base env 385 | const finalEnv = { ...(cfg.env || {}), ...(cfg.__additionalEnv__ || {}) }; > 386 | const mergedEnv = { 387 | ...process.env, 388 | // Make sure we do not have empty key and value in mergedEnv, or adding server through UI will f

Accessing /etc/passwd or /etc/shadow — credential harvesting on Linux Source: https://github.com/aws/language-servers/blob/71c53d10a14c154e1790c622ffaa3f476f15fc22/out/language-server/agenticChat/tools/toolShared.js#L120 118 | // For paths OUTSIDE the workspace, check if they target sensitive system 119 | // locations. We check both the raw input and the resolved path to catch > 120 | // traversal attempts like "/workspace/../../etc/passwd". 121 | if (isSensitivePath(inputPath) || isSensitivePath(canonicalPath)) { 122 | return {

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Script: node ./script/install_transitive_dep.js

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/a8ac9bf438b46fd6341e130ecc744966dadda8f2/out/language-server/agenticChat/tools/mcp/mcpManager.js#L155 153 | try { 154 | this.features.logging.debug(`MCP: initializing server [${serverName}]`); > 155 | const mergedEnv = { 156 | ...process.env, 157 | // Make sure we do not have empty key and value in mergedEnv, or adding server through UI will fail on W

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Script: node ./script/install_transitive_dep.js

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/4b9761f9fb5b10f4e6d67fcf27eb51f6f971d1b1/out/language-server/agenticChat/tools/mcp/mcpManager.js#L155 153 | try { 154 | this.features.logging.debug(`MCP: initializing server [${serverName}]`); > 155 | const mergedEnv = { 156 | ...process.env, 157 | // Make sure we do not have empty key and value in mergedEnv, or adding server through UI will fail on W

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Script: node ./script/install_transitive_dep.js

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/6022fcbdf7c97c226c5f6ba3e27070a17803a116/out/language-server/agenticChat/tools/mcp/mcpManager.js#L155 153 | try { 154 | this.features.logging.debug(`MCP: initializing server [${serverName}]`); > 155 | const mergedEnv = { 156 | ...process.env, 157 | // Make sure we do not have empty key and value in mergedEnv, or adding server through UI will fail on W

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Script: node ./script/install_transitive_dep.js

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/220a58b7225a84dd5493766ed6af9e7e192a1789/out/language-server/agenticChat/tools/mcp/mcpManager.js#L155 153 | try { 154 | this.features.logging.debug(`MCP: initializing server [${serverName}]`); > 155 | const mergedEnv = { 156 | ...process.env, 157 | // Make sure we do not have empty key and value in mergedEnv, or adding server through UI will fail on W

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Script: node ./script/install_transitive_dep.js

Spreading entire process.env into an object — may capture all secrets Source: https://github.com/aws/language-servers/blob/50a5bd14ff1b455fe82964cb1d53aabf36143249/out/language-server/agenticChat/tools/mcp/mcpManager.js#L64 62 | try { 63 | this.features.logging.debug(`MCP: initializing server [${serverName}]`); > 64 | const mergedEnv = { 65 | ...process.env, 66 | ...(cfg.env ?? {}),

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.