Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@camstack/addon-model-studio@1.1.0: Suspicious npm security | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 14 finding(s) warrant review before installing.

View on npm All versions

registry / @camstack/addon-model-studio / 1.1.0

@camstack/addon-model-studio@1.1.0

Custom detection model registry, conversion & distribution for CamStack

AI Security Review

scanned 4h ago · by lpm-firewall-ai

An administrator-triggered model conversion can download an arbitrary URL. Its Hugging Face token gate uses substring matching rather than host validation, so a crafted URL can receive the token.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Authenticated admin invokes model conversion with a crafted sourceUrl while HF_TOKEN or HUGGING_FACE_HUB_TOKEN is set.

Impact

Conditional Hugging Face token disclosure and server-side request capability.

Mechanism

Token-bearing arbitrary URL fetch via weak host check

Rationale

This appears to be a legitimate model-conversion addon, not intentionally malicious. However, the concrete weak URL check creates a credential-exfiltration vulnerability in its admin-invoked download path.

Evidence

package.jsondist/model-studio.addon.mjspython/convert.pypython/convert_lib.py

Network endpoints1

huggingface.co

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

dist/model-studio.addon.mjs fetches admin-supplied sourceUrl with redirects enabled.
HF_TOKEN is attached when sourceUrl merely includes "huggingface.co", allowing a lookalike URL to receive it.
The conversion endpoint accepts an unconstrained URL string and writes its response locally.

Evidence against

package.json has no preinstall, install, or postinstall hooks.
Conversion and download occur only through an authenticated admin mutation.
Python helper performs declared ONNX model conversion; no stealth persistence or unrelated harvesting found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

Manifest

WildcardDependency

scanned 27 file(s), 2.65 MB of source, external domains: github.com, json-schema.org, konvajs.github.io, konvajs.org, module-federation.io, react.dev, www.w3.org

Source & flagged code

5 flagged · loading source

dist/model-studio.addon.mjsView file

149try { L150: new Function(""); L151: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/model-studio.addon.mjsView on unpkg · L149

dist/index.jsView file

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L2: const require_model_studio_addon = require("./model-studio.addon.js"); L3: exports.ModelStudioAddon = require_model_studio_addon.ModelStudioAddon;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

python/convert_lib.pyView file

•path = python/convert_lib.py kind = build_helper sizeBytes = 4549 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

python/convert_lib.pyView on unpkg

python/__tests__/test_convert_lib.pyView file

•path = python/__tests__/test_convert_lib.py kind = payload_in_excluded_dir sizeBytes = 1203 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

python/__tests__/test_convert_lib.pyView on unpkg

dist/_stub.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @camstack/addon-model-studio@1.0.28 matchedIdentity = npm:[redacted]:1.0.28 similarity = 0.889 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/_stub.jsView on unpkg

Findings

2 High6 Medium6 Low

HighPayload In Excluded Dirpython/__tests__/test_convert_lib.py

HighPrevious Version Dangerous Deltadist/_stub.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperpython/convert_lib.py

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowEvaldist/model-studio.addon.mjs

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

90%Warn

Verdict confidence

IntentCritical Vulnerability

TypeCredential Exfiltration

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

Maintainersapocaliss92

Version1.1.1

PublishedJul 21, 2026

LicenseMIT

Dependencies3

Integrityverified

Package size676 KB

Files33

Keywordscamstackaddoncamstack-addonmodeldetectionregistry

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jsmodule → ./dist/index.mjstypes → ./dist/index.d.tsexports map

RuntimeNo engine / OS / CPU constraints

Artifact2.77 MB · 33 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:page, build:server, dev:page +3

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellHighEntropyStringsMinifiedTelemetryUrlStringsWildcardDependency

LPM CLI

Source & flagged code

5 flagged

dist/model-studio.addon.mjsView file

149try { L150: new Function(""); L151: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/model-studio.addon.mjsView on unpkg · L149

dist/index.jsView file

Lines 1-5javascript

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

2const require_model_studio_addon = require("./model-studio.addon.js");

3exports.ModelStudioAddon = require_model_studio_addon.ModelStudioAddon;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

4exports.customActions = require_model_studio_addon.modelStudioActions;

5

python/convert_lib.pyView file

•path = python/convert_lib.py kind = build_helper sizeBytes = 4549 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

python/convert_lib.pyView on unpkg

python/__tests__/test_convert_lib.pyView file

•path = python/__tests__/test_convert_lib.py kind = payload_in_excluded_dir sizeBytes = 1203 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

python/__tests__/test_convert_lib.pyView on unpkg

dist/_stub.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @camstack/addon-model-studio@1.0.28 matchedIdentity = npm:[redacted]:1.0.28 similarity = 0.889 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/_stub.jsView on unpkg