registry / @canonry/canonry / 7.76.2
@canonry/canonry@7.76.2
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe inspected entry points and flagged code are consistent with the package’s stated platform purpose. The source shows no install-time data collection or unauthorized credential destination, and the process execution is tied to an explicit DuckDB plugin installation action.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The package has no install lifecycle hook. Provider requests occur when the corresponding configured feature is used; DuckDB installation is invoked through an explicit installer callback.
Impact
No unauthorized credential transfer, account action, persistence, or destructive behavior was established.
Mechanism
Inspected credentials are sent to the named TypeSafe or OpenRouter provider endpoints. The child process starts a package manager to install the optional DuckDB plugin.
AI rationale
The inspected entry points and flagged code are consistent with the package’s stated platform purpose. The source shows no install-time data collection or unauthorized credential destination, and the process execution is tied to an explicit DuckDB plugin installation action.
Network endpoints2
api.typesafe.aiopenrouter.ai
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall lifecycle script; its scripts are build, typecheck, test, and lint commands.
- The package exposes CLI and MCP binaries and a library entry point, consistent with its self-hosted AI visibility platform purpose.
- The TypeSafe integration sends a configured API key to the named TypeSafe service endpoint.
- The OpenRouter sentiment route is selected by configuration and uses OpenRouter’s endpoint with redirects disabled.
- DuckDB installation is provided through an explicit onInstallBacklinks callback, rather than being run on package import or install.
Evidence against
- The scanner flagged browser credential phishing, but the inspected flagged entry did not establish browser credential collection or an exfiltration path.
- The scanner flagged child_process execution and command-output exfiltration; the inspected use is a package-manager invocation for the DuckDB plugin installer.
- The scanner flagged credential redirection and persistence; the inspected sentiment integrations use their named provider endpoints.
Behavioral surface
Source & flagged code
9 flaggeddist/chunk-GDKMVOZI.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @canonry/canonry@7.67.0
matchedIdentity = npm:QGNhbm9ucnkvY2Fub25yeQ:7.67.0
similarity = 0.783
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-GDKMVOZI.jsView on unpkg60526// ../integration-commoncrawl/src/plugin-installer.ts
L60527: import { spawn } from "child_process";
L60528: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-GDKMVOZI.jsView on unpkg · L605261219});
L1220: return `${PREFIX}${salt.toString("base64")}$${derived.toString("base64")}`;
L1221: }
...
L1526: });
L1527: app.post("/auth/login", async (request, reply) => {
L1528: const parsed = loginRequestSchema.safeParse(request.body);
...
L4987: try {
L4988: const parsed = new URL(/^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`);
L4989: return parsed.hostname.toLowerCase().replace(/\.$/, "") || null;
...
L6769: if (first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168) {
L6770: return "which is private space";
L6771: }
Findings
4 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-FCGYYZHL.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-FCGYYZHL.js
CriticalPrevious Version Dangerous Deltadist/chunk-GDKMVOZI.js
HighChild Processdist/chunk-GDKMVOZI.js
HighCredential Redirect Persistencedist/chunk-4MYZRVJ6.js
HighCommand Output Exfiltrationdist/chunk-GDKMVOZI.js
HighCross File Remote Execution Contextdist/chunk-IAOPQ2VO.js
HighSemantic Analysis Limiteddist/chunk-GDKMVOZI.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @canonry/canonry@7.76.2.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.76.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.