registry / @blockrun/llm / 3.24.1

@blockrun/llm@3.24.1

TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The wallet code is consistent with the package's per-call USDC billing feature: it signs payment details returned in a 402 response. Wallet discovery supports a migration notice, while adopting a discovered wallet requires a separate import operation; no malicious behavior was identified.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Wallet signing occurs during the client's payment flow after an API request receives payment requirements.

Impact

The reviewed behavior supports per-call USDC billing and wallet migration; no unauthorized transfer or key export was identified.

Mechanism

The client signs the returned payment recipient and amount; discovered wallets are adopted through an explicit import operation.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest lists build, development, test, lint, and type-check scripts; it declares no install lifecycle hook.
Wallet payment code parses payment requirements from a 402 response and signs a payment for the returned recipient and amount.
The wallet setup code creates a wallet for the agent; adopting a discovered wallet is a separate importWallet(address) operation.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1021 KB of source, external domains: api.blockrun.ai, base-rpc.publicnode.com, base.llamarpc.com, basescan.org, blockrun.ai, bridge.base.org, mainnet.base.org, pay.coinbase.com, placeholder.invalid, sol.blockrun.ai, user.blockrun.ai, www.coinbase.com

Source & flagged code

5 flagged

dist/index.jsView file

Lines 81-121javascript

81 if (temperature === void 0 || temperature === null) {

82 return;

83 }

84 if (typeof temperature !== "number") {

85 throw new Error("temperature must be a number");

86 }

87 if (temperature < 0 || temperature > 2) {

88 throw new Error("temperature must be between 0 and 2");

89 }

90}

91function validateTopP(topP) {

92 if (topP === void 0 || topP === null) {

93 return;

94 }

95 if (typeof topP !== "number") {

96 throw new Error("topP must be a number");

97 }

98 if (topP < 0 || topP > 1) {

99 throw new Error("topP must be between 0 and 1");

100 }

101}

102function validatePrivateKey(key) {

103 if (typeof key !== "string") {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L101

104 throw new Error("Private key must be a string");

105 }

106 if (!key.startsWith("0x")) {

107 throw new Error("Private key must start with 0x");

108 }

109 if (key.length !== 66) {

110 throw new Error(

111 "Private key must be 66 characters (0x + 64 hexadecimal characters)"

112 );

113 }

114 if (!/^0x[0-9a-fA-F]{64}$/.test(key)) {

115 throw new Error(

116 "Private key must contain only hexadecimal characters (0-9, a-f, A-F)"

117 );

118 }

119}

120function validateApiUrl(url) {

121 let parsed;

dist/index.cjsView file

232Trigger-reachable chain: manifest.main -> dist/index.cjs L232: } L233: function validatePrivateKey(key) { L234: if (typeof key !== "string") { ... L259: throw new Error( L260: `Invalid protocol: ${parsed.protocol}. Use http:// or https://` L261: ); ... L330: } L331: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0); L332: if (key === void 0) return void 0; ... L397: try { L398: body = await response.json(); L399: } catch {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L232

5488if (!paymentHeader) { throw new PaymentError("402 response but no payment requirements found"); } const paymentRequired = parsePaymentRequired(paymentHeader); const detai

Low

Ai Review Evidence

Wallet payment code parses payment requirements from a 402 response and signs a payment for the returned recipient and amount.

dist/index.cjsView on unpkg · L5488

5493extensions = paymentRequired.extensions; const paymentPayload = await createPaymentPayload( this.privateKey, this.account.address, details.recipient, details.amou

Low

Ai Review Evidence

Wallet payment code parses payment requirements from a 402 response and signs a payment for the returned recipient and amount.

dist/index.cjsView on unpkg · L5493

package.jsonView file

Lines 1-40json

2 "name": "@blockrun/llm",

3 "version": "3.24.1",

4 "type": "module",

5 "description": "TypeScript SDK for BlockRun - every frontier model behind one OpenAI-compatible client. Pay with a BlockRun API key or per-call in USDC. Smart routing picks the cheapest capable model. No rate limits.",

Source & flagged code

5 flagged · loading source

dist/index.jsView file

101} L102: function validatePrivateKey(key) { L103: if (typeof key !== "string") { ... L128: throw new Error( L129: `Invalid protocol: ${parsed.protocol}. Use http:// or https://` L130: ); ... L199: } L200: const key = options.apiKey ?? (options.privateKey === void 0 && typeof process !== "undefined" ? process.env?.BLOCKRUN_API_KEY : void 0); L201: if (key === void 0) return void 0; ... L266: try { L267: body = await response.json(); L268: } catch {

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L101

dist/index.cjsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L232

Findings

2 Critical3 Medium7 Low

CriticalWallet Draindist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.cjs

Affected versions and remediation

This report applies to @blockrun/llm@3.24.1.

See all versions of @blockrun/llm for other recorded verdicts.

Review the evidence and your use of @blockrun/llm@3.24.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 12:15:23.578Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.