registry / @devilsdev/rag-pipeline-utils / 2.7.0
@devilsdev/rag-pipeline-utils@2.7.0
Composable retrieval-augmented generation (RAG) for Node.js: grounded citations, evaluation, guardrails, hybrid retrieval and a CLI.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged eval is used to reconstruct and execute a supplied plugin function in a timed sandbox, and plugin installation is exposed through an explicit CLI command. I found no source evidence that the bundle’s flagged loader automatically exfiltrates credentials or executes unrelated concealed code.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; plugin installation and execution require use of the corresponding functionality.
Impact
No malicious impact was identified in the inspected source.
Mechanism
The sandbox receives a plugin function and prompt, then evaluates the function in a timed context. No unrelated automatic payload execution was established.
AI rationale
The flagged eval is used to reconstruct and execute a supplied plugin function in a timed sandbox, and plugin installation is exposed through an explicit CLI command. I found no source evidence that the bundle’s flagged loader automatically exfiltrates credentials or executes unrelated concealed code.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports a library API and a CLI entry point.
- The CLI wrapper runs only when the command is invoked.
- The flagged eval reconstructs a supplied plugin function and runs it with prompt data inside a timed sandbox context.
- Plugin installation is exposed through an explicit local command.
- The prepare script runs husky install; prepublishOnly runs lint, tests, documentation validation and ESM verification.
Evidence against
- The bundle contains dynamic code execution and network-capable functionality, which fit its plugin and RAG purposes; the inspected source did not show an unrelated automatic payload loader or credential transfer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/index.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @devilsdev/rag-pipeline-utils@2.6.2
matchedIdentity = npm:[redacted]:2.6.2
similarity = 0.883
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.cjsView on unpkg32var getLogLevel = () => {
L33: if (process.env.LOG_LEVEL) {
L34: const level = process.env.LOG_LEVEL.toLowerCase();
...
L258: if (publicKey instanceof crypto.KeyObject) {
L259: keyObject = publicKey.type === "private" ? crypto.createPublicKey(publicKey) : publicKey;
L260: } else if (Buffer.isBuffer(publicKey) && publicKey.length === 32) {
...
L268: } else if (typeof publicKey === "string" && HEX_KEY_RE.test(publicKey)) {
L269: keyObject = rawToKeyObject(Buffer.from(publicKey, "hex"));
L270: } else if (typeof publicKey === "string" && publicKey.includes("-----BEGIN")) {
...
L293: function computeContentDigest({ files = [], baseDir, contents = {} } = {}) {
L294: const root = path.resolve(baseDir || process.cwd());
L295: const entries = /* @__PURE__ */ new Map();
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L32Findings
2 Critical2 High4 Medium7 Low
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limitedsrc/cli/commands/plugin-hub/local-commands.js#virtual:normalized:round1
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/index.cjs
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @devilsdev/rag-pipeline-utils@2.7.0.
See all versions of @devilsdev/rag-pipeline-utils for other recorded verdicts.
- Review the evidence and your use of @devilsdev/rag-pipeline-utils@2.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.