registry / @grovetech/defender / 0.23.0
@grovetech/defender@0.23.0
⚠ Under reviewActive runtime protection for vibe-coded apps — drops in as Express middleware (web + AI layer), blocks prompt injection, PII leaks, and sensitive paths in real time. By Grovetech AI.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedREADME.mdView file
•| AI input | "ignore previous instructions", DAN/jailbreak, token bombs |
High
Ai Reviewer Manipulation
Package text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgdist/esm/cli.jsView file
4// • `defender init [--dry-run] [--yes]` — autodetekuje framework, vloží
L5: // middleware do entry filu, přidá @grovetech/defender do package.json,
L6: // vytvoří/upraví .env.example a README.md, doinstaluje balíček.
...
L9: import { fileURLToPath } from "node:url";
L10: import { spawnSync } from "node:child_process";
L11: import { PII_PATTERNS } from "./patterns.js";
...
L25: const pkgPath = join(here, "..", "..", "package.json");
L26: const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
L27: if (pkg.version && /^\d+\.\d+\.\d+/.test(pkg.version))
...
L36: const MAX_FILE_BYTES = 2 * 1024 * 1024;
L37: const DEFAULT_INGEST = "https://grovetechai.com/api/defender/install-telemetry";
L38: function walk(root) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/esm/cli.jsView on unpkg · L4Findings
3 Critical6 High3 Medium5 Low
CriticalCredential Exfiltrationdist/esm/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/esm/cli.js
CriticalPrevious Version Dangerous Deltadist/cjs/rag.cjs
HighAi Reviewer ManipulationREADME.md
HighChild Processdist/esm/cli.js
HighShell
HighEntrypoint Foreign Package Code Overwritedist/esm/cli.js
HighTrigger Reachable Credential Exfiltrationdist/esm/cli.js
HighRuntime Package Installdist/esm/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @grovetech/defender@0.23.0.
See all versions of @grovetech/defender for other recorded verdicts.
- Review the evidence and your use of @grovetech/defender@0.23.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.