registry / Destructive action / @exulu/backend / 5.8.1

@exulu/backend@5.8.1

**Exulu IMP** (Intelligence Management Platform) is an open-source TypeScript framework for building production-ready AI agent applications. It provides the backend infrastructure for managing agents, semantic search contexts, background job processing, a

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The install hook makes a recursive change to a hoisted dependency even when Python setup is skipped. Its stated licensing rationale and targeted optional dependency reduce the risk, but this unrequested install-time removal merits a warning.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation runs the postinstall hook.

Impact

This can alter a hoisted dependency and disable the xz-compression path that uses it.

Mechanism

The hook searches up to six parent directories for node_modules/node-liblzma and recursively removes the first matching path unless EXULU_KEEP_NODE_LIBLZMA=true.

AI rationale

Evidence

package.jsonscripts/postinstall.cjsnode_modules/node-liblzma

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

The manifest runs scripts/postinstall.cjs automatically during installation.
The postinstall walks upward for a hoisted node_modules/node-liblzma and recursively deletes it when found.
That deletion runs before the Python setup skip check, so SKIP_PYTHON_SETUP does not prevent it.

Evidence against

The script targets a specific optional dependency and documents a license-related reason for removing it.
The removal can be disabled with EXULU_KEEP_NODE_LIBLZMA=true.
The flagged API-key instructions use a user-configured base URL and call for an interactive installer; no automatic credential redirect was identified.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 112 file(s), 4.16 MB of source, external domains: ai.open.de, www.google.com, www.python.org

Source & flagged code

11 flagged

package.jsonView file

•scripts.preinstall = node -e "if (process.version !== 'v22.18.0') { console.error('❌ Wrong Node.js version. Expected v22.18.0, got ' + process.version); process.exit(1); }"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/backend.cjsView file

9L10: const { spawn } = require('child_process'); L11: const { existsSync } = require('fs');

High

Child Process

Package source references child process execution.

bin/backend.cjsView on unpkg · L9

bin/setup-python.cjsView file

13L14: const execAsync = promisify(exec); L15:

High

Shell

Package source references shell execution.

bin/setup-python.cjsView on unpkg · L13

dist/chunk-NUEM3HMI.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-NUEM3HMI.jsView on unpkg

76} L77: if (!process.env.BACKEND) { L78: throw new Error( ... L211: authType: row.auth_type, L212: data: JSON.parse(decrypt(row.data)) L213: }; ... L345: var postTokenEndpoint = async (config, params) => { L346: const response = await fetch(config.tokenUrl, { L347: method: "POST", ... L4974: const progress = Math.round((i + 1) / total * 100); L4975: process.stdout.write(`Sequential processing: Document ${i + 1}/${total} (${progress}%)\r`); L4976: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-NUEM3HMI.jsView on unpkg · L76

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: (req.headers["authorization"] || req.headers["x-api-key"]) ?? "" import { mkdtemp, readFile, rm, writeFile } from "fs/promises"; await writeFile(mdPath, markdown, "utf-8"); await writeFile(docxPath, docxBytes); var recallPublicBaseUrl = () => (process.env.BACKEND || process.env.PUBLIC_API_BASE_URL)?.replace(/\/$/, ""); var recallEnabled = () => recallRegion() !== null && !!recallApiKey() && !!recallVerificationSecret() && !!recallPublicBaseUrl(); var recallApiBaseUrl = () => { const base = recallPublicBaseUrl();

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

233var redisServer = { L234: host: process.env.REDIS_HOST ?? "", L235: port: process.env.REDIS_PORT ?? "", ... L442: // src/exulu/markdown-export.ts L443: import { execFile } from "child_process"; L444: import { mkdtemp, readFile, rm, writeFile } from "fs/promises"; ... L1136: item_name: chunk2.item_name, L1137: chunk_metadata: chunk2.metadata L1138: })); ... L1635: try { L1636: parsed = JSON.parse(value); L1637: } catch {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L233

ee/python/setup.shView file

•path = ee/python/setup.sh kind = build_helper sizeBytes = 13359 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

ee/python/setup.shView on unpkg

ee/python/transcription/tests/test_server.pyView file

•path = ee/python/transcription/tests/test_server.py kind = payload_in_excluded_dir sizeBytes = 3264 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

ee/python/transcription/tests/test_server.pyView on unpkg

Findings

1 Critical7 High6 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/backend.cjs

HighShellbin/setup-python.cjs

HighCredential Redirect Persistencedist/index.js

HighCommand Output Exfiltrationdist/index.js

HighPayload In Excluded Diree/python/transcription/tests/test_server.py

HighSemantic Analysis Limiteddist/chunk-NUEM3HMI.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperee/python/setup.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/chunk-NUEM3HMI.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @exulu/backend@5.8.1.

See all versions of @exulu/backend for other recorded verdicts.

Review the evidence and your use of @exulu/backend@5.8.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 22:25:08.631Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Destructive action / @exulu/backend / 5.8.1

@exulu/backend@5.8.1

AI Security Review

scanned 1d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation runs the postinstall hook.

Impact

This can alter a hoisted dependency and disable the xz-compression path that uses it.

Mechanism

The hook searches up to six parent directories for node_modules/node-liblzma and recursively removes the first matching path unless EXULU_KEEP_NODE_LIBLZMA=true.

AI rationale

Evidence

package.jsonscripts/postinstall.cjsnode_modules/node-liblzma

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

The manifest runs scripts/postinstall.cjs automatically during installation.
The postinstall walks upward for a hoisted node_modules/node-liblzma and recursively deletes it when found.
That deletion runs before the Python setup skip check, so SKIP_PYTHON_SETUP does not prevent it.

Evidence against

The script targets a specific optional dependency and documents a license-related reason for removing it.
The removal can be disabled with EXULU_KEEP_NODE_LIBLZMA=true.
The flagged API-key instructions use a user-configured base URL and call for an interactive installer; no automatic credential redirect was identified.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 112 file(s), 4.16 MB of source, external domains: ai.open.de, www.google.com, www.python.org

Source & flagged code

11 flagged

package.jsonView file

•scripts.preinstall = node -e "if (process.version !== 'v22.18.0') { console.error('❌ Wrong Node.js version. Expected v22.18.0, got ' + process.version); process.exit(1); }"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/backend.cjsView file

9L10: const { spawn } = require('child_process'); L11: const { existsSync } = require('fs');

High

Child Process

Package source references child process execution.

bin/backend.cjsView on unpkg · L9

bin/setup-python.cjsView file

13L14: const execAsync = promisify(exec); L15:

High

Shell

Package source references shell execution.

bin/setup-python.cjsView on unpkg · L13

dist/chunk-NUEM3HMI.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-NUEM3HMI.jsView on unpkg

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-NUEM3HMI.jsView on unpkg · L76

dist/index.jsView file

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L233

ee/python/setup.shView file

•path = ee/python/setup.sh kind = build_helper sizeBytes = 13359 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

ee/python/setup.shView on unpkg

ee/python/transcription/tests/test_server.pyView file

•path = ee/python/transcription/tests/test_server.py kind = payload_in_excluded_dir sizeBytes = 3264 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

ee/python/transcription/tests/test_server.pyView on unpkg

Findings

1 Critical7 High6 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/backend.cjs

HighShellbin/setup-python.cjs

HighCredential Redirect Persistencedist/index.js

HighCommand Output Exfiltrationdist/index.js

HighPayload In Excluded Diree/python/transcription/tests/test_server.py

HighSemantic Analysis Limiteddist/chunk-NUEM3HMI.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperee/python/setup.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/chunk-NUEM3HMI.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @exulu/backend@5.8.1.

See all versions of @exulu/backend for other recorded verdicts.

Review the evidence and your use of @exulu/backend@5.8.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 22:25:08.631Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.