@glassnote/client@2.4.21
GlassNote — cliente de escritorio de notas superpuestas. Se instala con npx, sin instaladores nativos ni firmas.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe periodic UUID and version report is a plausible version-management feature, but it runs by default without a user-facing disclosure or opt-out in the inspected sources. This is a telemetry concern, not evidence of credential exfiltration or malware.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The desktop client starts, then reports after a delay and periodically while running.
Impact
Those servers can associate the device UUID with the client version; the report has no user-facing disclosure or opt-out in the inspected sources.
Mechanism
versionReport.js posts a device UUID and client version to origins derived from saved server settings.
AI rationale
The periodic UUID and version report is a plausible version-management feature, but it runs by default without a user-facing disclosure or opt-out in the inspected sources. This is a telemetry concern, not evidence of credential exfiltration or malware.
Evidence
main.jsversionReport.js
Network endpoints2
Configured saved-server origins at /devices/report-versionglassnoteapi.intermark.ec
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package is a desktop notes client; its manifest points to main.js and the glassnote CLI.
- On persistent startup, main.js configures auto-start; ephemeral npx runs skip it.
- At runtime, versionReport.js posts a device UUID and client version to origins read from saved server settings, then uses the response to manage the desired version.
- No user-facing disclosure or opt-out for this periodic version report was found in the inspected documentation or source.
Evidence against
- The report supports the app’s version-management function and sends only a UUID and version, not credentials or file contents.
- Pairing requires an API key supplied through an option or environment setting, and enrollment uses a configurable API URL.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedautoStart.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @glassnote/client@2.4.15
matchedIdentity = npm:QGdsYXNzbm90ZS9jbGllbnQ:2.4.15
similarity = 0.375
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
autoStart.jsView on unpkg12const os = require('os');
L13: const { execSync, spawn } = require('child_process');
L14:
High
bin/glassnote.jsView file
•Trigger-reachable chain: scripts.start -> bin/glassnote.js
Reachable file contains a blocking source-risk pattern.
Critical
Findings
3 Critical4 High4 Medium6 Low
CriticalSame File Env Network Executionbin/glassnote.js#virtual:normalized:round1
CriticalTrigger Reachable Dangerous Capabilitybin/glassnote.js
CriticalPrevious Version Dangerous DeltaautoStart.js
HighChild ProcessautoStart.js
HighShell
HighTrigger Reachable Persistencebin/glassnote.js
HighSemantic Analysis Limitedbin/glassnote.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/glassnote.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @glassnote/client@2.4.21.
See all versions of @glassnote/client for other recorded verdicts.
- Review the evidence and your use of @glassnote/client@2.4.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.