@aionlabsai/aion@1.0.2-alpha: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@aionlabsai/aion@1.0.2-alpha: Suspicious npm security report | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const pkg=require('./package.json');if(pkg.name!=='@aionlabsai/aion')process.exit(0);process.exit(0)"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "const pkg=require('./package.json');if(pkg.name!=='@aionlabsai/aion')process.exit(0);process.exit(0)"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/infra/assist/remote-executor.jsView file

1import { spawnSync } from 'child_process'; L2: const DANGEROUS_RE = /(?:^|\s)(rm|mkfs|dd|shutdown|reboot|chmod\s+777|chown\s+-R)\b|[;&|`$><]/;

High

Child Process

Package source references child process execution.

dist/infra/assist/remote-executor.jsView on unpkg · L1

dist/infra/security-scanner.jsView file

83if (evalSignals > 0) L84: issue(issues, 'critical', 'Code injection', `${evalSignals} eval()/new Function() / vm.run usage(s) detected`, 'Never use eval or new Function with dynamic input. Use safe alternat... L85: if (jwtWeakSignals > 0)

High

Eval

Package source references dynamic code evaluation.

dist/infra/security-scanner.jsView on unpkg · L83

dist/infra/project-store.jsView file

25try { L26: const parsed = JSON.parse(readFileSync(path, 'utf8')); L27: if (parsed.schemaVersion !== PROJECT_SCHEMA_VERSION)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/infra/project-store.jsView on unpkg · L25

dist/infra/embeddings.jsView file

41for (let i = 0; i < token.length; i++) { L42: hash ^= token.charCodeAt(i); L43: hash = Math.imul(hash, 16777619); ... L71: export function embeddingProvider() { L72: if (process.env.VOYAGE_API_KEY) L73: return 'voyage-code-3'; ... L100: const batch = texts.slice(i, i + 128); L101: const res = await fetch('https://api.voyageai.com/v1/embeddings', { L102: method: 'POST', L103: headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${process.env.VOYAGE_API_KEY}` }, L104: body: JSON.stringify({ input: batch, model: 'voyage-code-3' }), L105: });

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/infra/embeddings.jsView on unpkg · L41

41Trigger-reachable chain: manifest.bin -> dist/index.js -> dist/cli/commands/sync.js -> dist/infra/embeddings.js L41: for (let i = 0; i < token.length; i++) { L42: hash ^= token.charCodeAt(i); L43: hash = Math.imul(hash, 16777619); ... L71: export function embeddingProvider() { L72: if (process.env.VOYAGE_API_KEY) L73: return 'voyage-code-3'; ... L100: const batch = texts.slice(i, i + 128); L101: const res = await fetch('https://api.voyageai.com/v1/embeddings', { L102: method: 'POST', L103: headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${process.env.VOYAGE_API_KEY}` }, L104: body: JSON.stringify({ input: batch, model: 'voyage-code-3' }), L105: });

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/infra/embeddings.jsView on unpkg · L41

dist/cli/commands/setup.jsView file

2Cross-file remote execution chain: dist/cli/commands/setup.js spawns dist/cli/commands/graph.js; helper contains network access plus dynamic code execution. L2: import { join } from 'path'; L3: import { spawnSync } from 'child_process'; L4: import chalk from 'chalk'; ... L21: function runSelfCommand(cwd, args) { L22: return runSelfCommandWithEnv(cwd, args, process.env); L23: } ... L30: return false; L31: process.stdout.write(chalk.yellow('\nRemote embeddings failed. Retrying with local fallback (hash-384d, no API key required)...\n')); L32: const fallbackEnv = { ... L140: .action(async (options) => { L141: const cwd = process.cwd(); L142: if (options.reset) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/commands/setup.jsView on unpkg · L2

Source & flagged code

8 flagged

package.jsonView file

Lines 11-51json

11 "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",

12 "build": "npm run clean && tsc",

13 "typecheck": "tsc --noEmit",

14 "lint": "eslint \"src/**/*.ts\"",

15 "lint:fix": "eslint \"src/**/*.ts\" --fix",

16 "format": "prettier --write \"src/**/*.{ts,md,json,yml,yaml}\" \"*.{md,json,yml,yaml}\"",

17 "format:check": "prettier --check \"src/**/*.{ts,md,json,yml,yaml}\" \"*.{md,json,yml,yaml}\"",

18 "test": "npm run build && node --import tsx --test \"src/**/*.test.ts\"",

19 "test:unit": "npm run test",

20 "test:contract": "node --import tsx --test src/schemas/contracts.test.ts src/schemas/registry.test.ts",

21 "test:integration": "node --import tsx --test \"src/__integration__/**/*.test.ts\"",

22 "test:coverage": "c8 --reporter=text --reporter=lcov npm run test:unit",

23 "test:scale": "npm run build && node --import tsx --test \"src/core/pipelines/audit-pipeline.test.ts\"",

24 "test:ci": "npm run typecheck && npm run lint && npm run test:contract && npm run test:unit && npm run test:integration",

25 "dev": "tsx src/index.ts",

26 "start": "node dist/index.js",

27 "release-check": "npm run build && node dist/index.js release-check --skip-build",

28 "prepublishOnly": "npm run build",

29 "install-global": "npm run build && npm link",

30 "uninstall-global": "npm unlink -g @aionlabsai/aion",

31 "postinstall": "node -e \"const pkg=require('./package.json');if(pkg.name!=='@aionlabsai/aion')process.exit(0);process.exit(0)\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L31

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

32 "check:layers": "node scripts/check-layers.mjs",

33 "check:doc-drift": "node scripts/check-doc-drift.mjs"

34 },

35 "files": [

36 "dist/**/*",

37 "!dist/**/*.map",

38 "!dist/test-utils/**",

39 "README.md",

40 "LICENSE",

41 "docs/"

42 ],

43 "engines": {

44 "node": ">=18.0.0"

45 },

46 "keywords": [

47 "ai",

48 "mcp",

49 "rag",

50 "model-context-protocol",

51 "code-intelligence",

dist/infra/assist/remote-executor.jsView file

Lines 1-21javascript

1import { spawnSync } from 'child_process';

2const DANGEROUS_RE = /(?:^|\s)(rm|mkfs|dd|shutdown|reboot|chmod\s+777|chown\s+

dist/infra/security-scanner.jsView file

Lines 63-103javascript

63 if (/(?:alg|algorithm)\s*[=:]\s*['"]none['"]|jwt\.sign[^;]{0,120}(?:['"]secret['"]|['"]password['"]|['"]123456['"]|['"]changeme['"])|

dist/infra/project-store.jsView file

Lines 5-45javascript

5export const PROJECT_SCHEMA_VERSION = 1;

6export const VECTORS_FILE = 'project.vectors.bin';

7export const PROJECT_FILE

dist/infra/embeddings.jsView file

Lines 21-61javascript

21 }

22}

23async function callXenova(texts) {

24 const pipe = await getXenovaPipeline();

25 if

dist/cli/commands/setup.jsView file

Lines 1-22javascript

1import { existsSync, mkdirSync, writeFileSync } from 'fs';

2import { join } from 'path';

3import { spawnSync } from 'child_process';

4import chalk from 'chalk';