registry / @blockrun/llm / 3.21.0

@blockrun/llm@3.21.0

TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The flagged wallet transfer code implements payment for API calls: it is activated by a payment-required response and sends the signed payment with the retry. The manifest has no install lifecycle hook, and the inspected entrypoints show no separate wallet-draining behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

A caller makes an API request and the configured service responds with a payment requirement.

Impact

This is a user-invoked payment flow; inspected source does not establish an unrelated or unrequested transfer.

Mechanism

The client parses the payment requirement, signs the stated recipient and amount, then sends the signature with a retry to the same request URL.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest points to the ESM and CommonJS bundles and declares no install lifecycle hook.
The ESM client defaults to BlockRun's API.
Wallet payment signing follows a 402 response and uses the recipient and amount parsed from its payment requirements.
The signed resource URL is restricted to the configured API's hostname and protocol.
The paid retry posts to the same request URL with the payment signature.
The CommonJS bundle signs a transfer authorization for the supplied recipient and amount.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 972 KB of source, external domains: api.blockrun.ai, base-rpc.publicnode.com, base.llamarpc.com, basescan.org, blockrun.ai, bridge.base.org, mainnet.base.org, pay.coinbase.com, placeholder.invalid, sol.blockrun.ai, user.blockrun.ai, www.coinbase.com

Source & flagged code

5 flagged

dist/index.jsView file

Lines 81-121javascript

81 if (temperature === void 0 || temperature === null) {

82 return;

83 }

84 if (typeof temperature !== "number") {

85 throw new Error("temperature must be a number");

86 }

87 if (temperature < 0 || temperature > 2) {

88 throw new Error("temperature must be between 0 and 2");

89 }

90}

91function validateTopP(topP) {

92 if (topP === void 0 || topP === null) {

93 return;

94 }

95 if (typeof topP !== "number") {

96 throw new Error("topP must be a number");

97 }

98 if (topP < 0 || topP > 1) {

99 throw new Error("topP must be between 0 and 1");

100 }

101}

102function validatePrivateKey(key) {

103 if (typeof key !== "string") {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L101

104 throw new Error("Private key must be a string");

105 }

106 if (!key.startsWith("0x")) {

107 throw new Error("Private key must start with 0x");

108 }

109 if (key.length !== 66) {

110 throw new Error(

111 "Private key must be 66 characters (0x + 64 hexadecimal characters)"

112 );

113 }

114 if (!/^0x[0-9a-fA-F]{64}$/.test(key)) {

115 throw new Error(

116 "Private key must contain only hexadecimal characters (0-9, a-f, A-F)"

117 );

118 }

119}

120function validateApiUrl(url) {

121 let parsed;

Lines 4580-4620javascript

4580 maxOutput: m.maxOutput ?? m.max_output ?? 0,

4581 categories: m.categories || [],

4582 available: true,

4583 billingMode: m.billingMode ?? m.billing_mode,

4584 flatPrice

dist/index.cjsView file

Lines 207-247javascript

207 if (temperature === void 0 || temperature === null) {

208 return;

209 }

210 if (typeof temperature !==

package.jsonView file

Lines 1-40json

2 "name": "@blockrun/llm",

3 "version": "3.21.0",

4 "type": "module",

5 "description": "TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.",

Source & flagged code

5 flagged · loading source

dist/index.jsView file

101} L102: function validatePrivateKey(key) { L103: if (typeof key !== "string") { ... L128: throw new Error( L129: `Invalid protocol: ${parsed.protocol}. Use http:// or https://` L130: ); ... L199: } L200: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0); L201: if (key === void 0) return void 0; ... L266: try { L267: body = await response.json(); L268: } catch {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L101

4600var DEFAULT_API_URL = "https://blockrun.ai/api"; var DEFAULT_MAX_TOKENS = 1024; function resolveDefaultTimeout() { const envVal = typeof process !== "undefined"

Low

Ai Review Evidence

The ESM client defaults to BlockRun's API.

dist/index.jsView on unpkg · L4600

dist/index.cjsView file

227Trigger-reachable chain: manifest.main -> dist/index.cjs L227: } L228: function validatePrivateKey(key) { L229: if (typeof key !== "string") { ... L254: throw new Error( L255: `Invalid protocol: ${parsed.protocol}. Use http:// or https://` L256: ); ... L325: } L326: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0); L327: if (key === void 0) return void 0; ... L392: try { L393: body = await response.json(); L394: } catch {

Findings

2 Critical3 Medium7 Low

CriticalWallet Draindist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.js

Affected versions and remediation

This report applies to @blockrun/llm@3.21.0.

See all versions of @blockrun/llm for other recorded verdicts.

Review the evidence and your use of @blockrun/llm@3.21.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 12:03:38.023Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.