@hashbrownai/ollama@0.8.1
Ollama provider for Hashbrown AI
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection confirms automatic install-time telemetry containing a persistent installation identifier and checkout context, gated by opt-out settings rather than affirmative consent. The vendor-aligned endpoint and package-install purpose reduce the risk; the behavior supports a warning, not a publish block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package with a package manager that runs postinstall, unless collection is disabled or its deadline expires.
Impact
Installation and checkout metadata can be disclosed to the telemetry service without an affirmative opt-in.
Mechanism
The hook gathers a persistent installation identifier and Git checkout context, builds an installation event, and sends it by HTTP POST to the vendor endpoint.
AI rationale
Source inspection confirms automatic install-time telemetry containing a persistent installation identifier and checkout context, gated by opt-out settings rather than affirmative consent. The vendor-aligned endpoint and package-install purpose reduce the risk; the behavior supports a warning, not a publish block.
Evidence
package.jsoninstall/postinstall.cjsinstall/collector.cjsinstall/policy.cjsinstall/identity.cjsinstall/git-context.cjs~/.hashbrown/installation-id
Network endpoints1
hashbrown.dev/_/growth/collect/v1/install
Decision evidence
public snapshotAI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall collector during npm postinstall.
- The collector reads or creates a persistent per-user installation ID and discovers Git checkout context.
- It sends install events with package, platform, environment, consumer context, and sometimes Git identity to the configured endpoint.
- Collection proceeds unless an opt-out variable is set; endpoint overrides are limited to loopback, otherwise the vendor endpoint is used.
Evidence against
- The destination is the Hashbrown vendor’s telemetry endpoint, and the event concerns package installation.
- The collector applies opt-out variables, CI restrictions on Git identity, bounded execution time, and a loopback-only endpoint override.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg37"postinstall": "node install/postinstall.cjs"
}
}
Medium
Suspicious Lifecycle Evidence
The package runs a postinstall collector during npm postinstall.
package.jsonView on unpkg · L37install/git-context.cjsView file
Findings
3 High6 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similarityinstall/git-context.cjs
HighKnown Malware Source Similarityinstall/policy.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidenceinstall/postinstall.cjs
MediumAi Review Evidenceinstall/identity.cjs
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @hashbrownai/ollama@0.8.1.
See all versions of @hashbrownai/ollama for other recorded verdicts.
- Review the evidence and your use of @hashbrownai/ollama@0.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.