registry / @higherlogic/ocfe / 0.0.1-security

@higherlogic/ocfe@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface exists in this package version. It contains only a metadata manifest and explanatory README.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

None observed.

Mechanism

No executable behavior.

Rationale

The published 0.0.1-security source is a non-executable security holding package. Its README documents prior removed malware but does not establish malicious behavior in this version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

README.md states this is a security holding package replacing removed malicious code.

Evidence against

package.json defines no scripts, bin, main, module, browser, or dependencies.
Only package.json and README.md exist; no executable, symlink, or payload files were found.
No install-time/import-time code, network use, credential access, shell execution, or persistence is present.

@higherlogic/ocfe@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings