@herjarsa/omo-meta-governor@0.31.4: Clean npm security report

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Source inspection found no install lifecycle hook or concrete attack behavior. The flagged child-process and installation capabilities are conditional or package-aligned in the inspected code, so the scanner hints do not support a malicious verdict.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Importing the package may run its version check; the reviewed package installation behavior requires the autoInstall option.

Impact

No malicious effect was established from the inspected behavior.

Mechanism

The version check queries npm for this package's version and warns on a mismatch; the conditional installation path does not establish covert execution or data access.

AI rationale

Source inspection found no install lifecycle hook or concrete attack behavior. The flagged child-process and installation capabilities are conditional or package-aligned in the inspected code, so the scanner hints do not support a malicious verdict.

Network endpoints1

registry.npmjs.org

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no install lifecycle hook; its scripts are build, typecheck, and test.
The required agent-integration locations in dist/index.js and dist/lib.js check plan-file content and completion markers.
The lib.js package installation path is conditional on the autoInstall option.
The runtime npm view check compares the registry version and emits a warning when the cache is stale.
The MCP server excerpt formats code-analysis caller information; it does not show an attack.

Evidence against

dist/lib.js contains child-process and package-install capabilities, but the inspected install path is option-gated and no concrete attack behavior was established.

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.45 MB of source, external domains: github.com, json-schema.org, pypi.org, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

7 flagged

dist/lib.jsView file

1import{createRequire as Ek}from"node:module";var{defineProperty:VU,getOwnPropertyNames:Pk,getOwnPropertyDescriptor:qk}=Object,Lk=Object.prototype.hasOwnProperty;function Bk($){retu... L2: `}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+`

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

1import{createRequire as Ek}from"node:module";var{defineProperty:VU,getOwnPropertyNames:Pk,getOwnPropertyDescriptor:qk}=Object,Lk=Object.prototype.hasOwnProperty;function Bk($){retu... L2: `}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+`

High

Shell

Package source references shell execution.

dist/lib.jsView on unpkg · L1

2`}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+` L3: `}try{Zk(O$,J)}catch{}if($==="error")console.error(`[meta-governor] ${U}`)}function A($,U,b){u2($,U,b)}function yk($){u2($.level,$.message,$.data,$.event,$.sessionID)}function fk()... L4: const OMO_MG_WATCH = 1;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/lib.jsView on unpkg · L2

159updated_at = CURRENT_TIMESTAMP L160: `).run($.id,$.name,$.description,$.repo_url,$.installs??0,$.skill_id,$.download_count??0,$.last_synced??U,$.content_hash),Promise.resolve($.id)}close(){this.db.close()}toFtsQuery($... L161: `)}var Qv=($)=>(U,b,z,v)=>{let _=z?Object.assign(z,{async:!1}):{async:!1},N=U._zod.run({value:b,issues:[]},_);if(N instanceof Promise)throw new A$;if(N.issues.length){let O=new(v?....

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/lib.jsView on unpkg · L159

dist/index.jsView file

1Cross-file remote execution chain: dist/index.js spawns dist/lib.js; helper contains network access plus dynamic code execution. L1: import{createRequire as P0}from"node:module";var{defineProperty:kU,getOwnPropertyNames:K0,getOwnPropertyDescriptor:Q0}=Object,Y0=Object.prototype.hasOwnProperty;function W0($){retu... L2: `}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+` L3: `}try{L0(O$,J)}catch{}if($==="error")console.error(`[meta-governor] ${U}`)}function A($,U,b){A2($,U,b)}function g0($){A2($.level,$.message,$.data,$.event,$.sessionID)}function m0()... L4: const OMO_MG_WATCH = 1; ... L18: setInterval(run, 30_000); L19: `],{stdio:"ignore",detached:!0,shell:!1,env:{...process.env,OMO_MG_SPAWN:"1"}});else z=H2("python3",["-m","graphify",".","--no-vi

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1

dist/mcp-server.jsView file

•matchType = normalized_sha256 matchedPackage = @herjarsa/omo-meta-governor@0.38.9 matchedPath = dist/mcp-server.js matchedIdentity = npm:[redacted]:0.38.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp-server.jsView on unpkg

package.jsonView file

42"scripts": { "build": "bun build.ts", "typecheck": "tsc --noEmit", "test": "bun test" }, "type": "module", "types": "./dist/index.d.ts" }

Low

Suspicious Lifecycle Evidence

package.json has no install lifecycle hook; its scripts are build, typecheck, and test.

package.jsonView on unpkg · L42

Source & flagged code

7 flagged · loading source

dist/lib.jsView file

1import{createRequire as Ek}from"node:module";var{defineProperty:VU,getOwnPropertyNames:Pk,getOwnPropertyDescriptor:qk}=Object,Lk=Object.prototype.hasOwnProperty;function Bk($){retu... L2: `}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+`

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

1import{createRequire as Ek}from"node:module";var{defineProperty:VU,getOwnPropertyNames:Pk,getOwnPropertyDescriptor:qk}=Object,Lk=Object.prototype.hasOwnProperty;function Bk($){retu... L2: `}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+`

High

Shell

Package source references shell execution.

dist/lib.jsView on unpkg · L1

2`}catch{J=JSON.stringify({timestamp:O.timestamp,level:$,message:U,data:"[unserializable]"})+` L3: `}try{Zk(O$,J)}catch{}if($==="error")console.error(`[meta-governor] ${U}`)}function A($,U,b){u2($,U,b)}function yk($){u2($.level,$.message,$.data,$.event,$.sessionID)}function fk()... L4: const OMO_MG_WATCH = 1;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/lib.js

Findings

5 High2 Medium5 Low

HighChild Processdist/lib.js

HighShelldist/lib.js

HighCross File Remote Execution Contextdist/index.js

HighRuntime Package Installdist/lib.js

HighKnown Malware Source Similaritydist/mcp-server.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/lib.js

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code