@awareness.market/local@0.12.3
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious chain was found, but the postinstall fallback can mutate the consumer project through a nested package-manager invocation. This warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing the package with an unresolved Transformers dependency, or starting its daemon.
Impact
The fallback can alter the installing project’s dependency state, and runtime sends device-derived usage metadata.
Mechanism
A postinstall fallback invokes a package manager; telemetry posts queued allowlisted events.
AI rationale
No concrete malicious chain was found, but the postinstall fallback can mutate the consumer project through a nested package-manager invocation. This warrants a warning rather than a block.
Evidence
package.jsoninstall-transformers.mjssrc/core/telemetry.mjssrc/daemon.mjsyarn.lockpnpm-lock.yaml.awareness/telemetry-queue.json
Network endpoints1
awareness.market/api/v1/telemetry/events
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package automatically runs an install hook.
- Its fallback runs npm, Yarn, or pnpm in the installing project.
- The daemon enables telemetry by default and sends a limited event batch to the vendor service.
Evidence against
- The install hook exits when its declared Transformers dependency resolves normally.
- Telemetry uses a fixed event and property allowlist, not project file or credential collection.
- Cloud synchronization is disabled by default, and reviewed HTTP daemon traffic is loopback-only.
- No source-backed credential theft, remote payload execution, or foreign AI-agent configuration mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @awareness.market/local@0.12.2
matchedIdentity = npm:QGF3YXJlbmVzcy5tYXJrZXQvbG9jYWw:0.12.2
similarity = 0.875
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/awareness-local.mjsView on unpkg16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Findings
1 Critical7 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltabin/awareness-local.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShellsrc/mcp-stdio.mjs
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @awareness.market/local@0.12.3.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.12.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.