registry / @glassnote/client / 2.4.19
@glassnote/client@2.4.19
GlassNote — cliente de escritorio de notas superpuestas. Se instala con npx, sin instaladores nativos ni firmas.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged execution and persistence support a desktop client: startup entries launch Glassnote itself, while pairing needs an explicit organization key and version reports contain only a UUID and version. I found no source evidence of credential theft, unrelated execution, or install-time data transmission.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Startup setup runs when the installed desktop app starts; enrollment requires a supplied API key; version reporting begins after app startup.
Impact
The app can launch again at login, enroll a device when explicitly configured, and report its version to its configured service.
Mechanism
The app writes OS login-start configuration for itself. Enrollment sends device details with the provided organization key; version reporting sends only a UUID and package version to configured servers.
AI rationale
The flagged execution and persistence support a desktop client: startup entries launch Glassnote itself, while pairing needs an explicit organization key and version reports contain only a UUID and version. I found no source evidence of credential theft, unrelated execution, or install-time data transmission.
Evidence
~/Library/LaunchAgents/com.glassnote.app.plist~/.local/share/applications/glassnote.desktop~/.config/autostart/glassnote.desktop%APPDATA%/Microsoft/Windows/Start Menu/Programs/Startup/glassnote.lnk%APPDATA%/Microsoft/Windows/Start Menu/Programs/glassnote.lnk
Network endpoints4
glassnoteapi.intermark.ecregistry.npmjs.orgwww.youtube.comwww.youtube-nocookie.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a desktop overlay notes client and exposes its main module and CLI.
- The client configures startup for its own app; ephemeral npx runs skip this setup.
- Pairing requires an explicitly supplied organization API key and organization ID.
- Version reports send only the device UUID and package version to servers already configured for the device.
Evidence against
- Starting the installed client writes its own login-start entry without a separate confirmation.
- Runtime version reports send a device identifier to configured servers.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
7 flaggedautoStart.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @glassnote/client@2.4.15
matchedIdentity = npm:QGdsYXNzbm90ZS9jbGllbnQ:2.4.15
similarity = 0.688
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
autoStart.jsView on unpkg12const os = require('os');
L13: const { execSync, spawn } = require('child_process');
L14:
High
bin/glassnote.jsView file
•Trigger-reachable chain: scripts.start -> bin/glassnote.js
Reachable file contains a blocking source-risk pattern.
Critical
Findings
3 Critical4 High4 Medium6 Low
CriticalSame File Env Network Executionbin/glassnote.js#virtual:normalized:round1
CriticalTrigger Reachable Dangerous Capabilitybin/glassnote.js
CriticalPrevious Version Dangerous DeltaautoStart.js
HighChild ProcessautoStart.js
HighShell
HighTrigger Reachable Persistencebin/glassnote.js
HighSemantic Analysis Limitedbin/glassnote.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/glassnote.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @glassnote/client@2.4.19.
See all versions of @glassnote/client for other recorded verdicts.
- Review the evidence and your use of @glassnote/client@2.4.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.