registry / @blockrun/llm / 3.17.1

@blockrun/llm@3.17.1

TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The wallet-transfer finding reflects payment behavior activated by a caller’s API request and payment response. The manifest has no install lifecycle hook, and the inspected entrypoint code does not establish an unrelated or automatic transfer.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A caller makes an API request and the endpoint responds with payment requirements.

Impact

The caller may pay for the requested API operation; the inspected source does not show an unrelated or automatic wallet transfer.

Mechanism

The SDK signs a payment using the caller's wallet and the recipient and amount supplied in the payment response.

AI rationale

Evidence

package.jsondist/index.jsdist/index.cjs

Network endpoints2

api.blockrun.aisol.blockrun.ai

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no install lifecycle hook; its scripts are build, development, test, lint, and type checking commands.
dist/index.js defines a signed USDC payment using caller wallet material and a payment recipient.
The runtime starts payment handling after an API request receives a 402 response.
dist/index.cjs passes the parsed payment recipient and amount into the Solana payment builder.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 751 KB of source, external domains: api.blockrun.ai, base-rpc.publicnode.com, base.llamarpc.com, basescan.org, blockrun.ai, bridge.base.org, mainnet.base.org, pay.coinbase.com, sol.blockrun.ai, user.blockrun.ai, www.coinbase.com

Source & flagged code

5 flagged

dist/index.jsView file

Lines 66-106javascript

66 if (temperature === void 0 || temperature === null) {

67 return;

68 }

69 if (typeof temperature !== "number") {

70 throw new Error("temperature must be a number");

71 }

72 if (temperature < 0 || temperature > 2) {

73 throw new Error("temperature must be between 0 and 2");

74 }

75}

76function validateTopP(topP) {

77 if (topP === void 0 || topP === null) {

78 return;

79 }

80 if (typeof topP !== "number") {

81 throw new Error("topP must be a number");

82 }

83 if (topP < 0 || topP > 1) {

84 throw new Error("topP must be between 0 and 1");

85 }

86}

87function validatePrivateKey(key) {

88 if (typeof key !== "string") {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L86

89 throw new Error("Private key must be a string");

90 }

91 if (!key.startsWith("0x")) {

92 throw new Error("Private key must start with 0x");

93 }

94 if (key.length !== 66) {

95 throw new Error(

96 "Private key must be 66 characters (0x + 64 hexadecimal characters)"

97 );

98 }

99 if (!/^0x[0-9a-fA-F]{64}$/.test(key)) {

100 throw new Error(

101 "Private key must contain only hexadecimal characters (0-9, a-f, A-F)"

102 );

103 }

104}

105function validateApiUrl(url) {

106 let parsed;

Lines 4293-4333javascript

4293function withBuilderCodeServiceCode(extensions) {

4294 const merged = { ...extensions || {} };

4295 const existing = merged["builder-code"] || {};

Lines 10032-10072javascript

10032 async modalSandboxExec(sandboxId, command, extra) {

10033 return this.modal("sandbox/exec", { sandbox_id: sandboxId, command, ...extra });

10034 }

10035 /** Check a sandbox's status. */

10036 async modalSandboxStatus(sandboxId) {

10037 return

dist/index.cjsView file

Lines 187-227javascript

187 if (temperature === void 0 || temperature === null) {

188 return;

189 }

190 if (typeof temperature !==

package.jsonView file

Lines 1-40json

2 "name": "@blockrun/llm",

3 "version": "3.17.1",

4 "type": "module",

5 "description": "TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.",

Source & flagged code

5 flagged · loading source

dist/index.jsView file

86} L87: function validatePrivateKey(key) { L88: if (typeof key !== "string") { ... L113: throw new Error( L114: `Invalid protocol: ${parsed.protocol}. Use http:// or https://` L115: ); ... L184: } L185: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0); L186: if (key === void 0) return void 0; ... L242: try { L243: body = await response.json(); L244: } catch {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L86

4313const domain = net.domain; const signature = await signTypedData({ privateKey, domain, types: TRANSFER_TYPES, primaryType: "TransferWithAuthorization", message: { from: fromAddress, to: recipient, value: BigI

Low

Ai Review Evidence

dist/index.js defines a signed USDC payment using caller wallet material and a payment recipient.

dist/index.jsView on unpkg · L4313

10052async requestWithPayment(endpoint, body) { const url = `${this.apiUrl}${endpoint}`; for (let staleRetries = 0; ; ) { const response = await this.fetchWithTimeout(url, {

Low

Ai Review Evidence

The runtime starts payment handling after an API request receives a 402 response.

Findings

2 Critical3 Medium7 Low

CriticalWallet Draindist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.js

Affected versions and remediation

This report applies to @blockrun/llm@3.17.1.

See all versions of @blockrun/llm for other recorded verdicts.

Review the evidence and your use of @blockrun/llm@3.17.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 12:02:18.474Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.