@awareness.market/local@0.12.2
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe automatic package-manager invocation is a concrete, consumer-project mutation risk and warrants a warning. Source inspection does not establish malicious intent or a blocking attack chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm lifecycle postinstall
Impact
May alter the consumer dependency installation and execute the selected package manager during install.
Mechanism
postinstall executes package-manager installation in process.cwd()
AI rationale
The automatic package-manager invocation is a concrete, consumer-project mutation risk and warrants a warning. Source inspection does not establish malicious intent or a blocking attack chain.
Evidence
package.jsoninstall-transformers.mjsyarn.lockpnpm-lock.yamlnode_modules/@huggingface/transformers
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest runs install-transformers.mjs automatically as postinstall.
- The postinstall handler catches the failed dependency check and executes npm, yarn, or pnpm install commands in the consumer project's current directory.
Evidence against
- The installed dependency is package-aligned: @huggingface/transformers is declared in dependencies.
- No credential harvesting, remote payload loading, or AI-agent configuration writes were found in inspected install code.
- Cloud sync defaults disabled and requires enabled config, API key, and memory ID.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @awareness.market/local@0.11.8
matchedIdentity = npm:QGF3YXJlbmVzcy5tYXJrZXQvbG9jYWw:0.11.8
similarity = 0.815
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/awareness-local.mjsView on unpkg16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltabin/awareness-local.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShell
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighRuntime Package Installbin/awareness-local.mjs
MediumDynamic Requirebin/cli.cjs
MediumNetwork
Affected versions and remediation
This report applies to @awareness.market/local@0.12.2.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.12.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.