registry / @devilsdev/rag-pipeline-utils / 3.1.1
@devilsdev/rag-pipeline-utils@3.1.1
Composable retrieval-augmented generation (RAG) for Node.js: grounded citations, evaluation, guardrails, hybrid retrieval and a CLI.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential flows use configured provider endpoints, and the OpenAI connector avoids sending OPENAI_API_KEY to a custom endpoint unless the caller explicitly supplies a key. The plugin hub also has no default registry host, so the scanner’s credential-redirection indicators are not confirmed by the source reviewed.
Static reason
One or more suspicious static signals were detected.
Trigger
Library use or explicit CLI/plugin-hub operations.
Impact
No unauthorized credential redirection or other malicious impact was identified.
Mechanism
Provider credentials are configured for their corresponding API clients; custom OpenAI-compatible endpoints do not implicitly receive OPENAI_API_KEY, and plugin registry access requires a configured URL.
AI rationale
The flagged credential flows use configured provider endpoints, and the OpenAI connector avoids sending OPENAI_API_KEY to a custom endpoint unless the caller explicitly supplies a key. The plugin hub also has no default registry host, so the scanner’s credential-redirection indicators are not confirmed by the source reviewed.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports its library entry points and CLI through the manifest.
- When an OpenAI-compatible custom base URL is set, the connector uses only an explicitly supplied key instead of reading OPENAI_API_KEY.
- The Anthropic connector defaults to api.anthropic.com and configures requests with its selected base URL and API key.
- The plugin hub has no default registry URL; one must be provided through options or RAG_PLUGIN_REGISTRY.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.cjsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.cjs:
// Authentication/Authorization errors (AUTH_*)
fs.writeFileSync(tmp, JSON.stringify(index));
source: "https://platform.claude.com/docs/en/about-claude/pricing",
"2. Set your API key: `export OPENAI_API_KEY=your-key`",
fs.writeFileSync(
fs.writeFileSync(filePath, content + "\n");
fs.writeFileSync(
`${provider} API key required. Set ${envVar} or pass the apiKey option.`
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.cjsView on unpkg32var getLogLevel = () => {
L33: if (process.env.LOG_LEVEL) {
L34: const level = process.env.LOG_LEVEL.toLowerCase();
...
L258: if (publicKey instanceof crypto.KeyObject) {
L259: keyObject = publicKey.type === "private" ? crypto.createPublicKey(publicKey) : publicKey;
L260: } else if (Buffer.isBuffer(publicKey) && publicKey.length === 32) {
...
L268: } else if (typeof publicKey === "string" && HEX_KEY_RE.test(publicKey)) {
L269: keyObject = rawToKeyObject(Buffer.from(publicKey, "hex"));
L270: } else if (typeof publicKey === "string" && publicKey.includes("-----BEGIN")) {
...
L293: function computeContentDigest({ files = [], baseDir, contents = {} } = {}) {
L294: const root = path.resolve(baseDir || process.cwd());
L295: const entries = /* @__PURE__ */ new Map();
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
Findings
3 High4 Medium7 Low
HighCredential Redirect Persistencedist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limitedsrc/cli/commands/plugin-hub/local-commands.js#virtual:normalized:round1
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/index.cjs
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @devilsdev/rag-pipeline-utils@3.1.1.
See all versions of @devilsdev/rag-pipeline-utils for other recorded verdicts.
- Review the evidence and your use of @devilsdev/rag-pipeline-utils@3.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.