registry / @cmmd-center/forge / 0.9.16

@cmmd-center/forge@0.9.16

AI Security Review

scanned 4d ago · by lpm-firewall-ai

Source inspection resolved the scanner hints to bundled helpers and project-path logic. Provider credentials are synced after a user-started connection to the Forge/CMMD service, with no concrete malicious behavior found.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user starts a provider sign-in or account-link flow; credential sync follows successful completion.

Impact

The transfer enables Forge to use the connected personal subscription; no unrelated recipient or malicious action was established.

Mechanism

Forge reads a local provider credential and sends it through the configured CMMD gateway to the corresponding account endpoint.

AI rationale

Evidence

dist/client/assets/index-BvXPD-Rk.jsdist/bin.mjs

Network endpoints1

cmmd.ai

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes the CLI through dist/bin.mjs and its dependencies do not include the package itself.
The flagged client match derives a project path from `.claude/worktrees`; the runtime match handles a WebSocket Origin header.
Flagged helper files expose ordinary process, terminal, browser-opening, and front-end library APIs.
Provider credentials are synced after provider sign-in to the Forge/CMMD gateway, whose default host is cmmd.ai; the client describes this as using a personal subscription in Forge.
The offline artifact analysis identifies valid PNG framing with no trailing bytes.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestware

Source & flagged code

14 flagged

dist/HttpServer-DtHtB8SH.cjsView file

Lines 4227-4267javascript

4227* @since 4.0.0

4228* @category Tracer

4229*/

4230const tracer = /* @__PURE__ */ make$2((httpApp) => require_Schema.withFiber((fiber) => {

4231 const request = require_Schema.getUnsafe(fiber.context, HttpServerRequest);

4232 if (!fiber.getRef(require_Schema.TracerEnabled) || fiber.getRef(TracerDisabledWhen)(request)) return httpApp;

4233 const nameGenerator = fiber.getRef(SpanNameGenerator);

4234 const span = require_Schema.makeSpanUnsafe(fiber, nameGenerator(request), {

4235 parent: require_Schema.getOrUndefined$1(fromHeaders(request.headers)),

4236 kind: "server"

4237 });

4238 const prevServices = fiber.context;

4239 fiber.setContext(require_Schema.add$1(fiber.context, require_Schema.ParentSpan, span));

4240 return require_Schema.onExitPrimitive(httpApp, (exit) => {

4241 fiber.setContext(prevServices);

4242 const endTime = fiber.getRef(require_Schema.Clock).currentTimeNanosUnsafe();

4243 fiber.currentDispatcher.scheduleTask(() => {

4244 const url = toURL(request);

4245 if (require_Schema.isSome(url) && (url.value.username !== "" || url.value.password !== "")) {

4246 url.value.username = "REDACTED";

4247 url.value.password = "REDACTED";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/HttpServer-DtHtB8SH.cjsView on unpkg · L4247

4248 }

4249 const redactedHeaderNames = fiber.getRef(CurrentRedactedNames);

4250 const requestHeaders = redact(request.headers, redactedHeaderNames);

4251 span.attribute("http.request.method", request.method);

4252 if (require_Schema.isSome(url)) {

4253 span.attribute("url.full", url.value.toString());

4254 span.attribute("url.path", url.value.pathname);

4255 if (url.value.search.slice(1) !== "") span.attribute("url.query", url.value.search.slice(1));

4256 span.attribute("url.scheme", url.value.protocol.slice(0, -1));

4257 }

4258 if (request.headers["user-agent"] !== void 0) span.attribute("user_agent.original", request.headers["user-agent"]);

4259 for (const name in requestHeaders) span.attribute(`http.request.header.${name}`, String(requestHeaders[name]));

4260 if (require_Schema.isSome(request.remoteAddress)) span.attribute("client.address", request.remoteAddress.value);

4261 const response = exitResponse(exit);

4262 span.attribute("http.response.status_code", response.status);

4263 const responseHeaders = redact(response.headers, redactedHeaderNames);

4264 for (const name in responseHeaders) span.attribute(`http.response.header.${name}`, String(responseHeaders[name]));

4265 span.end(endTime, exit);

4266 }, 0);

4267 }, true);

dist/execAsync-BNNdR88o.mjsView file

Lines 1-14javascript

1#!/usr/bin/env node

3import { i as __require, t as __commonJSMin } from "./chunk-C5ckVeoz.mjs";

4//#region ../../node_modules/.bun/@opentelemetry+resources@2.10.0+e40b0dfdd726a224/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/execAsync.js

5var require_execAsync = /* @__PURE__ */ __commonJSMin(((

dist/open-D8mGyWmt.mjsView file

Lines 43-83javascript

43};

44function isInsideContainer() {

45 if (cachedResult === void 0) cachedResult = hasContainerEnv() || isDocker();

46 return

dist/SqliteClient-hJRE8PDu.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

3require("./chunk-BhaIgcZK.cjs");

4const require_Schema = require("./Schema-OHyKUj4W.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/SqliteClient-hJRE8PDu.cjsView on unpkg · L2

5const

dist/Mime-Bilnh8zE.cjsView file

Lines 1-41javascript

1#!/usr/bin/env node

3const require_chunk = require("./chunk-BhaIgcZK.cjs");

4//#region ../../node_modules/.bun/ws@8.21.2/node_modules/ws/lib/constants.js

5var require_constants = /* @__PURE__ */ require_chunk.__commonJSMin(((exports,

dist/client/assets/jspdf.es.min-CyVcxnFn.jsView file

Lines 1-23javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/html2canvas-Dx8ziiWq.js","assets/rolldown-runtime-BaTzPAyU.js","assets/index.es-CO9S_XYX.js","assets/typeof-B4sAzxzG.js"])))=>i.

dist/NodeTerminal-C02_QMnN.mjsView file

Lines 1-24javascript

1#!/usr/bin/env node

3import { $i as catchDone, Aa as addFinalizer, Bl as isNotUndefined, Bn as catch_, Cn as andThen, Dn as as, Dr as mapError, Fc as Service, Kn as effectify, Kr as raceFirst, Ll as hasProperty, Mn as

dist/forge-provision-display.shView file

•path = dist/forge-provision-display.sh kind = build_helper sizeBytes = 14320 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/forge-provision-display.shView on unpkg

dist/client/apple-touch-icon.png.publish-bakView file

•path = dist/client/apple-touch-icon.png.publish-bak kind = high_entropy_blob sizeBytes = 12054 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/apple-touch-icon.png.publish-bakView on unpkg

dist/bin.mjsView file

•path = dist/bin.mjs kind = oversized_source_file sizeBytes = 11500255 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/bin.mjsView on unpkg

•path = dist/bin.mjs kind = oversized_cli_entrypoint sizeBytes = 11500255 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/bin.mjsView on unpkg

dist/NodeTerminal-C02_QMnN.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/NodeTerminal-C02_QMnN.mjs#virtual:normalized:round1View on unpkg

dist/NodeTerminal-DeRkiZ5c.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cmmd-center/forge@0.9.3 matchedIdentity = npm:QGNtbWQtY2VudGVyL2Zvcmdl:0.9.3 similarity = 0.604 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/NodeTerminal-DeRkiZ5c.cjsView on unpkg

dist/HttpServer-B8tHE2rs.mjsView file

Lines 4218-4258javascript

4218/**

4219* @since 4.0.0

4220* @category Tracer

4221*/

4222const tracer = /* @__PURE__ */ make$2((httpApp) =>

Source & flagged code

14 flagged · loading source

dist/HttpServer-DtHtB8SH.cjsView file

4247patternName = generic_password severity = medium line = 4247

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/HttpServer-DtHtB8SH.cjsView on unpkg · L4247

dist/execAsync-BNNdR88o.mjsView file

7exports.execAsync = void 0; L8: const child_process = __require("child_process"); L9: exports.execAsync = __require("util").promisify(child_process.exec);

High

Child Process

Package source references child process execution.

dist/execAsync-BNNdR88o.mjsView on unpkg · L7

dist/open-D8mGyWmt.mjsView file

63//#endregion L64: //#region ../../node_modules/.bun/powershell-utils@0.1.0/node_modules/powershell-utils/index.js L65: const execFile$3 = promisify(childProcess.execFile);

Findings

2 Critical5 High10 Medium5 Low

CriticalTrojan Source Unicodedist/client/assets/jspdf.es.min-CyVcxnFn.js

CriticalPrevious Version Dangerous Deltadist/NodeTerminal-DeRkiZ5c.cjs

HighChild Processdist/execAsync-BNNdR88o.mjs

HighShelldist/open-D8mGyWmt.mjs

HighCross File Remote Execution Contextdist/NodeTerminal-C02_QMnN.mjs

HighShips High Entropy Blobdist/client/apple-touch-icon.png.publish-bak

HighSemantic Analysis Limiteddist/NodeTerminal-C02_QMnN.mjs#virtual:normalized:round1

MediumSecret Patterndist/HttpServer-DtHtB8SH.cjs

MediumDynamic Requiredist/SqliteClient-hJRE8PDu.cjs

MediumNetwork

MediumEnvironment Vars

Medium

Affected versions and remediation

This report applies to @cmmd-center/forge@0.9.16.

See all versions of @cmmd-center/forge for other recorded verdicts.

Review the evidence and your use of @cmmd-center/forge@0.9.16 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 07:04:52.745Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.