registry / @cmmd-center/forge / 0.9.9

@cmmd-center/forge@0.9.9

AI Security Review

scanned 4d ago · by lpm-firewall-ai

Source inspection found no malicious behavior or confirmed attack surface. The scanner flags inspected here correspond to ordinary library behavior, a path-parsing helper, a conditional download byte-order mark, and a valid PNG asset.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

The CLI runs when a user invokes it; the manifest has no install lifecycle hook.

Impact

No harmful effect or unauthorized agent configuration change was established.

Mechanism

The inspected agent-related helper derives worktree names from path segments. The reviewed runtime match prepares WebSocket handshake headers.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a CLI and contains no lifecycle script; the listed package entry is dist/bin.mjs.
The flagged agent-integration code splits paths and returns worktree names; it does not show an agent configuration write.
The flagged runtime operation sets WebSocket handshake headers, including protocol and origin headers.
The flagged invisible character is a byte-order mark conditionally added for UTF-8 text downloads.
The other reviewed chunks show library utilities for piping, editor text extraction, and spawning commands; these excerpts establish no package install-time attack.
The PNG analysis validates its framing and reports no trailing bytes; the inspected process and platform helpers are utility code.

Evidence against

Scanner labels for child-process use, a high-entropy asset, and invisible Unicode are not independently evidence of an attack; the inspected excerpts show utility behavior and a valid PNG.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVars

Source & flagged code

14 flagged

dist/HttpServer-ZtPGGTGl.cjsView file

Lines 4227-4267javascript

4227* @since 4.0.0

4228* @category Tracer

4229*/

4230const tracer = /* @__PURE__ */ make$2((httpApp) => require_Schema.withFiber((fiber) => {

4231 const request = require_Schema.getUnsafe(fiber.context, HttpServerRequest);

4232 if (!fiber.getRef(require_Schema.TracerEnabled) || fiber.getRef(TracerDisabledWhen)(request)) return httpApp;

4233 const nameGenerator = fiber.getRef(SpanNameGenerator);

4234 const span = require_Schema.makeSpanUnsafe(fiber, nameGenerator(request), {

4235 parent: require_Schema.getOrUndefined$1(fromHeaders(request.headers)),

4236 kind: "server"

4237 });

4238 const prevServices = fiber.context;

4239 fiber.setContext(require_Schema.add$1(fiber.context, require_Schema.ParentSpan, span));

4240 return require_Schema.onExitPrimitive(httpApp, (exit) => {

4241 fiber.setContext(prevServices);

4242 const endTime = fiber.getRef(require_Schema.Clock).currentTimeNanosUnsafe();

4243 fiber.currentDispatcher.scheduleTask(() => {

4244 const url = toURL(request);

4245 if (require_Schema.isSome(url) && (url.value.username !== "" || url.value.password !== "")) {

4246 url.value.username = "REDACTED";

4247 url.value.password = "REDACTED";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/HttpServer-ZtPGGTGl.cjsView on unpkg · L4247

4248 }

4249 const redactedHeaderNames = fiber.getRef(CurrentRedactedNames);

4250 const requestHeaders = redact(request.headers, redactedHeaderNames);

4251 span.attribute("http.request.method", request.method);

4252 if (require_Schema.isSome(url)) {

4253 span.attribute("url.full", url.value.toString());

4254 span.attribute("url.path", url.value.pathname);

4255 if (url.value.search.slice(1) !== "") span.attribute("url.query", url.value.search.slice(1));

4256 span.attribute("url.scheme", url.value.protocol.slice(0, -1));

4257 }

4258 if (request.headers["user-agent"] !== void 0) span.attribute("user_agent.original", request.headers["user-agent"]);

4259 for (const name in requestHeaders) span.attribute(`http.request.header.${name}`, String(requestHeaders[name]));

4260 if (require_Schema.isSome(request.remoteAddress)) span.attribute("client.address", request.remoteAddress.value);

4261 const response = exitResponse(exit);

4262 span.attribute("http.response.status_code", response.status);

4263 const responseHeaders = redact(response.headers, redactedHeaderNames);

4264 for (const name in responseHeaders) span.attribute(`http.response.header.${name}`, String(responseHeaders[name]));

4265 span.end(endTime, exit);

4266 }, 0);

4267 }, true);

dist/execAsync-BNNdR88o.mjsView file

Lines 1-14javascript

1#!/usr/bin/env node

3import { i as __require, t as __commonJSMin } from "./chunk-C5ckVeoz.mjs";

4//#region ../../node_modules/.bun/@opentelemetry+resources@2.10.0+e40b0dfdd726a224/node_modules/@opentelemetry/resources/build/src/detectors/platform/node/machine-id/execAsync.js

5var require_execAsync = /* @__PURE__ */ __commonJSMin(((

dist/open-FIgTDosf.mjsView file

Lines 43-83javascript

43};

44function isInsideContainer() {

45 if (cachedResult === void 0) cachedResult = hasContainerEnv() || isDocker();

46 return

dist/Path-BeMARore.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const require_Schema = require("./Schema-OHyKUj4W.cjs");

4//#region ../../node_modules/.bun/effect@4.0.0-beta.51/node_modules/effect/dist/Brand.js

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/Path-BeMARore.cjsView on unpkg · L2

5/**

6* This function returns a `Constructor` that **does not apply any runtime

dist/Mime-Bilnh8zE.cjsView file

Lines 1-41javascript

1#!/usr/bin/env node

3const require_chunk = require("./chunk-BhaIgcZK.cjs");

4//#region ../../node_modules/.bun/ws@8.21.2/node_modules/ws/lib/constants.js

5var require_constants = /* @__PURE__ */ require_chunk.__commonJSMin(((exports,

dist/client/assets/jspdf.es.min-J4xORpen.jsView file

Lines 1-23javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/html2canvas-C_LL7spC.js","assets/rolldown-runtime-BeQ30c1w.js","assets/index.es-piUKIQw4.js","assets/typeof-DOAxNSYQ.js"])))=>i.

dist/NodeTerminal-B20jsH7o.mjsView file

Lines 1-24javascript

1#!/usr/bin/env node

3import { $i as catchDone, Aa as addFinalizer, Bl as isNotUndefined, Bn as catch_, Cn as andThen, Dn as as, Dr as mapError, Fc as Service, Kn as effectify, Kr as raceFirst, Ll as hasProperty, Mn as

dist/forge-provision-display.shView file

•path = dist/forge-provision-display.sh kind = build_helper sizeBytes = 13090 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/forge-provision-display.shView on unpkg

dist/client/apple-touch-icon.png.publish-bakView file

•path = dist/client/apple-touch-icon.png.publish-bak kind = high_entropy_blob sizeBytes = 12054 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/client/apple-touch-icon.png.publish-bakView on unpkg

dist/bin.mjsView file

•path = dist/bin.mjs kind = oversized_source_file sizeBytes = 11387093 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/bin.mjsView on unpkg

•path = dist/bin.mjs kind = oversized_cli_entrypoint sizeBytes = 11387093 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/bin.mjsView on unpkg

dist/NodeTerminal-B20jsH7o.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/NodeTerminal-B20jsH7o.mjs#virtual:normalized:round1View on unpkg

dist/NodeTerminal-BZuXEBX3.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cmmd-center/forge@0.9.3 matchedIdentity = npm:QGNtbWQtY2VudGVyL2Zvcmdl:0.9.3 similarity = 0.604 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/NodeTerminal-BZuXEBX3.cjsView on unpkg

dist/HttpServer-oX7I0PXD.mjsView file

Lines 4218-4258javascript

4218/**

4219* @since 4.0.0

4220* @category Tracer

4221*/

4222const tracer = /* @__PURE__ */ make$2((httpApp) =>

Source & flagged code

14 flagged · loading source

dist/HttpServer-ZtPGGTGl.cjsView file

4247patternName = generic_password severity = medium line = 4247

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/HttpServer-ZtPGGTGl.cjsView on unpkg · L4247

dist/execAsync-BNNdR88o.mjsView file

7exports.execAsync = void 0; L8: const child_process = __require("child_process"); L9: exports.execAsync = __require("util").promisify(child_process.exec);

High

Child Process

Package source references child process execution.

dist/execAsync-BNNdR88o.mjsView on unpkg · L7

dist/open-FIgTDosf.mjsView file

63//#endregion L64: //#region ../../node_modules/.bun/powershell-utils@0.1.0/node_modules/powershell-utils/index.js L65: const execFile$3 = promisify(childProcess.execFile);

Findings

2 Critical5 High10 Medium5 Low

CriticalTrojan Source Unicodedist/client/assets/jspdf.es.min-J4xORpen.js

CriticalPrevious Version Dangerous Deltadist/NodeTerminal-BZuXEBX3.cjs

HighChild Processdist/execAsync-BNNdR88o.mjs

HighShelldist/open-FIgTDosf.mjs

HighCross File Remote Execution Contextdist/NodeTerminal-B20jsH7o.mjs

HighShips High Entropy Blobdist/client/apple-touch-icon.png.publish-bak

HighSemantic Analysis Limiteddist/NodeTerminal-B20jsH7o.mjs#virtual:normalized:round1

MediumSecret Patterndist/HttpServer-ZtPGGTGl.cjs

MediumDynamic Requiredist/Path-BeMARore.cjs

MediumNetwork

MediumEnvironment Vars

Medium

Affected versions and remediation

This report applies to @cmmd-center/forge@0.9.9.

See all versions of @cmmd-center/forge for other recorded verdicts.

Review the evidence and your use of @cmmd-center/forge@0.9.9 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 06:55:33.804Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.