registry / @blockrun/llm / 3.18.0

@blockrun/llm@3.18.0

TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the wallet code reviewed uses keys for request-associated payments with host validation on resource URLs. The scanner's wallet-drain hint is not supported by the inspected source behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A caller uses the payment-enabled client and receives a payment-required response.

Impact

No unauthorized transfer or credential disclosure was established from the inspected source.

Mechanism

The client signs a payment for the specified recipient and amount; resource URLs on another hostname are rejected in favor of the configured API host.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no install lifecycle hook; its scripts are build, development, test, and lint commands.
The wallet resolver reads explicitly named wallet environment variables and otherwise uses local wallet files.
Payment signatures are created for a specified recipient and amount, and the runtime creates them in response to a payment-required response.
Resource URLs with a hostname different from the configured API host are replaced with the API's default endpoint.
The CommonJS entrypoint contains the same payment-signing implementation as the ES module entrypoint.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 757 KB of source, external domains: api.blockrun.ai, base-rpc.publicnode.com, base.llamarpc.com, basescan.org, blockrun.ai, bridge.base.org, mainnet.base.org, pay.coinbase.com, sol.blockrun.ai, user.blockrun.ai, www.coinbase.com

Source & flagged code

5 flagged

dist/index.jsView file

Lines 66-106javascript

66 if (temperature === void 0 || temperature === null) {

67 return;

68 }

69 if (typeof temperature !== "number") {

70 throw new Error("temperature must be a number");

71 }

72 if (temperature < 0 || temperature > 2) {

73 throw new Error("temperature must be between 0 and 2");

74 }

75}

76function validateTopP(topP) {

77 if (topP === void 0 || topP === null) {

78 return;

79 }

80 if (typeof topP !== "number") {

81 throw new Error("topP must be a number");

82 }

83 if (topP < 0 || topP > 1) {

84 throw new Error("topP must be between 0 and 1");

85 }

86}

87function validatePrivateKey(key) {

88 if (typeof key !== "string") {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L86

89 throw new Error("Private key must be a string");

90 }

91 if (!key.startsWith("0x")) {

92 throw new Error("Private key must start with 0x");

93 }

94 if (key.length !== 66) {

95 throw new Error(

96 "Private key must be 66 characters (0x + 64 hexadecimal characters)"

97 );

98 }

99 if (!/^0x[0-9a-fA-F]{64}$/.test(key)) {

100 throw new Error(

101 "Private key must contain only hexadecimal characters (0-9, a-f, A-F)"

102 );

103 }

104}

105function validateApiUrl(url) {

106 let parsed;

Lines 4282-4322javascript

4282 { name: "validAfter", type: "uint256" },

4283 { name: "validBefore", type: "uint256" },

4284 { name: "nonce", type: "bytes32" }

4285 ]

Lines 9045-9085javascript

9045 fs3.writeFileSync(p.session, privateKey, { mode: 384 });

9046 return { address: entry.address, privateKey, source: "session" };

9047 }

9048 const available = listDiscoveredWallets().map((w) => w.address);

dist/index.cjsView file

Lines 187-227javascript

187 if (temperature === void 0 || temperature === null) {

188 return;

189 }

190 if (typeof temperature !==

package.jsonView file

Lines 1-40json

2 "name": "@blockrun/llm",

3 "version": "3.18.0",

4 "type": "module",

5 "description": "TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.",

Source & flagged code

5 flagged · loading source

dist/index.jsView file

86} L87: function validatePrivateKey(key) { L88: if (typeof key !== "string") { ... L113: throw new Error( L114: `Invalid protocol: ${parsed.protocol}. Use http:// or https://` L115: ); ... L184: } L185: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0); L186: if (key === void 0) return void 0; ... L242: try { L243: body = await response.json(); L244: } catch {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L86

9065function resolvePrivateKey(env = process.env) { const fromEnv = env.BLOCKRUN_WALLET_KEY || env.BASE_CHAIN_WALLET_KEY; if (fromEnv && fromEnv.trim()) { return { privateKey: normalize(fromEnv), source: "env" }; }

Low

Ai Review Evidence

The wallet resolver reads explicitly named wallet environment variables and otherwise uses local wallet files.

dist/index.jsView on unpkg · L9065

4302async function createPaymentPayload(privateKey, fromAddress, recipient, amount, network = "eip155:8453", options = {}) { const now = Math.floor(Date.now() / 1e3); const validAfter = now - 600; const validBefore = now + (opti

Low

Ai Review Evidence

Findings

2 Critical3 Medium7 Low

CriticalWallet Draindist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.js

Affected versions and remediation

This report applies to @blockrun/llm@3.18.0.

See all versions of @blockrun/llm for other recorded verdicts.

Review the evidence and your use of @blockrun/llm@3.18.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 12:03:21.610Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.