@awareness.market/local@0.12.6
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is suspicious install-hook abuse because an automatic lifecycle script can invoke a package manager and mutate the consumer project. The observed behavior does not meet the policy threshold for blocking because no foreign AI-agent control-surface mutation or concrete malware chain was found.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall with unresolved transformers, or starting the daemon.
Impact
The install hook can alter consumer dependency metadata and lockfiles; telemetry creates a network disclosure path for event metadata.
Mechanism
Install-hook package-manager invocation and runtime telemetry upload.
AI rationale
This is suspicious install-hook abuse because an automatic lifecycle script can invoke a package manager and mutate the consumer project. The observed behavior does not meet the policy threshold for blocking because no foreign AI-agent control-surface mutation or concrete malware chain was found.
Evidence
package.jsoninstall-transformers.mjssrc/core/telemetry.mjsyarn.lockpnpm-lock.yaml.awareness/telemetry-queue.json
Network endpoints2
registry.npmjs.orgawareness.market/api/v1/telemetry/events
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The automatic postinstall hook runs a package script.
- If dependency resolution fails, that script runs npm, Yarn, or pnPM in the consumer working directory.
- Runtime telemetry is enabled unless explicitly disabled and posts queued events to the vendor endpoint.
Evidence against
- The postinstall script exits without action when the declared transformers dependency resolves.
- No self-dependency, obfuscated payload, credential harvesting, or foreign AI-agent configuration write was found.
- CLI process spawning starts its own local daemon; MCP traffic is directed to localhost.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16src/mcp-stdio.mjsView file
619// Windows it never is: npm installs a `cmd /c` shim, so process.ppid is that
L620: // cmd.exe — and cmd.exe waits on *us*, meaning it can never die first. The
L621: // process that actually goes away is the grandparent (claude.exe), which
Findings
8 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShellsrc/mcp-stdio.mjs
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @awareness.market/local@0.12.6.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.12.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.