registry / @brainervirus/workit-opencode / 0.8.7
@brainervirus/workit-opencode@0.8.7
Workit OpenCode plugin (thin wrapper over @brainervirus/workit-core)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe source establishes a guarded first-party agent extension with a fixed default credential endpoint, not concrete unconsented install-time malware. Warn so users can assess the broad host integration and default external service.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
OpenCode loads the plugin; user/agent invokes its confirmed initialization or YouTrack tools.
Impact
Host agent behavior is extended; an unwary user may direct a token to the package's default corporate YouTrack host.
Mechanism
OpenCode extension configuration and credentialed YouTrack API calls.
AI rationale
The source establishes a guarded first-party agent extension with a fixed default credential endpoint, not concrete unconsented install-time malware. Warn so users can assess the broad host integration and default external service.
Evidence
package.jsondist/plugin.js
Network endpoints1
enghouseamg.youtrack.cloud
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime plugin mutates OpenCode commands, skill paths, permissions, and chat messages.
- Explicit initialization can create a YouTrack configuration defaulting to enghouseamg.youtrack.cloud.
- Configured YouTrack bearer tokens are sent to the configured API URL when its tools run.
Evidence against
- package.json has no preinstall, install, or postinstall hooks.
- Initialization tool requires confirmed=true before applying changes.
- No remote code loading, eval, or import-time credential transmission was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourceassets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView file
•matchType = normalized_sha256
matchedPackage = @brainervirus/workit-opencode@0.8.5
matchedPath = [redacted].cjs
matchedIdentity = npm:[redacted]:0.8.5
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg1const crypto = require('crypto');
L2: const http = require('http');
L3: const fs = require('fs');
...
L12: function computeAcceptKey(clientKey) {
L13: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64');
L14: }
...
L84:
L85: const PORT_FILE = process.env.BRAINSTORM_PORT_FILE || null;
L86: const randomPort = () => 49152 + Math.floor(Math.random() * 16383);
...
L195: try { sessionStorage.setItem('brainstorm-session-key', ${jsonKey}); } catch (e) {}
L196: location.replace('/');
L197: </script>
Low
Weak Crypto
Package source references weak cryptographic algorithms.
assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg · L1Findings
4 High3 Medium5 Low
HighCredential Redirect Persistencedist/plugin.js
HighEntrypoint Foreign Package Code Overwritedist/plugin.js
HighKnown Malware Source Similarityassets/vendor/superpowers/skills/brainstorming/scripts/server.cjs
HighPrevious Version Dangerous Deltadist/plugin.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/plugin.js
LowScripts Present
LowWeak Cryptoassets/vendor/superpowers/skills/brainstorming/scripts/server.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @brainervirus/workit-opencode@0.8.7.
See all versions of @brainervirus/workit-opencode for other recorded verdicts.
- Review the evidence and your use of @brainervirus/workit-opencode@0.8.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.