registry / @blockrun/llm / 3.15.1
@blockrun/llm@3.15.1
TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.
AI Security Review
scanned 5d ago · by lpm-firewall-aiStatic inspection found no install hook in package.json and no evidence supporting the scanner’s wallet-drain claim. Both published runtime bundles construct payment authorizations for the recipient supplied by payment requirements.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller uses the payment-enabled API with a wallet and receives payment requirements.
Impact
The caller’s wallet can authorize the requested payment; inspected code does not establish a hidden wallet drain.
Mechanism
The bundle signs a time-limited USDC authorization using the provided recipient and amount, then includes the signed payload in the request.
AI rationale
Static inspection found no install hook in package.json and no evidence supporting the scanner’s wallet-drain claim. Both published runtime bundles construct payment authorizations for the recipient supplied by payment requirements.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the inspected ESM and CommonJS bundles and lists no install lifecycle hook.
- The ESM bundle signs USDC authorization from the caller’s wallet to a supplied recipient.
- The payment caller takes the recipient and amount from payment requirements and sends the signed payload with the request.
- The CommonJS bundle contains the same recipient-directed payment construction.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/index.jsView file
86}
L87: function validatePrivateKey(key) {
L88: if (typeof key !== "string") {
...
L113: throw new Error(
L114: `Invalid protocol: ${parsed.protocol}. Use http:// or https://`
L115: );
...
L184: }
L185: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0);
L186: if (key === void 0) return void 0;
...
L242: try {
L243: body = await response.json();
L244: } catch {
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/index.jsView on unpkg · L864272createPaymentPayload(privateKey, fromAddress, recipient, amount, network = "eip155:8453", options = {}) {
const now = Math.floor(Date.now() / 1e3);
const validAfter = now - 600;
const validBefore = now + (options.maxTimeoutSeconds || 300);
const nonce = createNonce();
const domain = USDC_DOMAIN;
const signature = await signTypedData({
privateKey,
domain,
types: TRANSFER_TYPES,
primaryType: "TransferWithAuthorization",
message: {
from: fromAddress,
to:
Medium
Stripped Provenance Metadata
The ESM bundle signs USDC authorization from the caller’s wallet to a supplied recipient.
dist/index.jsView on unpkg · L4272dist/index.cjsView file
Findings
2 Critical4 Medium6 Low
CriticalWallet Draindist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumStripped Provenance Metadatadist/index.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @blockrun/llm@3.15.1.
See all versions of @blockrun/llm for other recorded verdicts.
- Review the evidence and your use of @blockrun/llm@3.15.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.