@glassnote/client@2.4.16
GlassNote — cliente de escritorio de notas superpuestas. Se instala con npx, sin instaladores nativos ni firmas.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe runtime report is limited to a device UUID and package version and goes to configured service origins, so the source does not show exfiltration or a malicious attack. Because the stable identifier is not disclosed and reporting has no opt-out, this is suspicious runtime telemetry.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
App startup, followed by a report every six hours when at least one server is configured.
Impact
A configured server can track this device across reports and associate it with its package version.
Mechanism
POSTs the UUID and version to `/devices/report-version`; the guide documents version reporting but not the UUID field, and the reporting code has no opt-out.
AI rationale
The runtime report is limited to a device UUID and package version and goes to configured service origins, so the source does not show exfiltration or a malicious attack. Because the stable identifier is not disclosed and reporting has no opt-out, this is suspicious runtime telemetry.
Evidence
versionReport.jsmain.jsINSTALACION.md
Network endpoints2
glassnoteapi.intermark.ec/devices/report-versionConfigured server origins at `/devices/report-version`
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- At app startup, version reporting begins after 15 seconds and repeats every six hours.
- The report sends a stable device UUID and package version to each configured server’s `/devices/report-version` endpoint.
- The installation guide mentions version reporting but does not disclose the UUID field; no disable option appears in the reporting code.
Evidence against
- The manifest has no install hook; its only lifecycle script is `prepublishOnly`.
- Reports go only to server origins already configured for the client, and the guide describes version reporting as an app feature.
- Pairing requires an explicitly supplied organization API key and organization ID.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
7 flaggedautoStart.jsView file
12const os = require('os');
L13: const { execSync, spawn } = require('child_process');
L14:
High
bin/glassnote.jsView file
•Trigger-reachable chain: scripts.start -> bin/glassnote.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
bin/glassnote.jsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = @glassnote/client@2.4.15
matchedIdentity = npm:QGdsYXNzbm90ZS9jbGllbnQ:2.4.15
similarity = 0.875
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Findings
3 Critical4 High4 Medium6 Low
CriticalSame File Env Network Executionbin/glassnote.js#virtual:normalized:round1
CriticalTrigger Reachable Dangerous Capabilitybin/glassnote.js
CriticalPrevious Version Dangerous Deltabin/glassnote.js
HighChild ProcessautoStart.js
HighShell
HighTrigger Reachable Persistencebin/glassnote.js
HighSemantic Analysis Limitedbin/glassnote.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/glassnote.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @glassnote/client@2.4.16.
See all versions of @glassnote/client for other recorded verdicts.
- Review the evidence and your use of @glassnote/client@2.4.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.