@inkeep/open-knowledge@0.51.3: Suspicious npm security report

Loading npm security reports…

@inkeep/open-knowledge@0.51.3: Suspicious npm security report | LPM Firewall

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`ok init` offers user- and project-level MCP configuration.
Its configured launcher can run `npx -y @inkeep/open-knowledge@latest mcp`.
Skill-install telemetry reports limited metadata to skills.sh by default.

Evidence against

package.json has no preinstall, install, postinstall, or prepare hook.
MCP setup is tied to explicit CLI initialization and prompts users to approve it.
Telemetry excludes file contents and honors DO_NOT_TRACK/DISABLE_TELEMETRY.
No source evidence of credential theft, covert exfiltration, destructive install-time action, or foreign control-surface mutation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 863 file(s), 27.2 MB of source, external domains: 0.0.0.0, 127.0.0.1, add-skill.vercel.sh, antigravity.google, api.github.com, api.openai.com, bun.sh, cdn.jsdelivr.net, chevrotain.io, claude.com, contoh.com, cscott.net, cursor.com, developers.openai.com, discord.gg, docs.astral.sh, docs.claude.com, docs.github.com, docs.openclaw.ai, docs.orama.com, ejemplo.com, en.wikipedia.org, example.com, exemplo.com, fb.me, foo.bar, git-scm.com, gitforwindows.org, github.com, gnu.org, googleads.g.doubleclick.net, hermes-agent.nousresearch.com, html.spec.whatwg.org, i.ytimg.com, img.youtube.com, json-schema.org, kb.example.com, landley.net, langium.org, lodash.com, mermaid.js.org, myproject.ngrok.app, nodejs.org, openai.com, openclaw.ai, opencode.ai, openjsf.org, openknowledge.ai, pi.dev, placeholder.invalid

Oversized source lightweight scan

dist/index.mjs2.07 MB file, sampled 256 KB

NetworkChildProcessEnvironmentVarsNativeBindingsShellHighEntropyStringsUrlStrings127.0.0.1

dist/public/assets/pdf.worker-B1D2UnXD.mjs2.06 MB file, sampled 256 KB

NetworkChildProcessDynamicRequireUrlStringsexample.com

Source & flagged code

17 flagged

dist/lib-DD6URxCv.mjsView file

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib-DD6URxCv.mjsView on unpkg · L39

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in dist/lib-DD6URxCv.mjs

dist/lib-DD6URxCv.mjsView on unpkg · L39

1import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BcpqREsI.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor... L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,` ... L38: Y3FblSokcA== L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY----- L40: [redacted] ... L67: \r L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=... L69: ... L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}... L72: `);let o=a;s

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/lib-DD6URxCv.mjsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib-DD6URxCv.mjsView on unpkg · L1

dist/acp-harness-probe-XylGN-um.mjsView file

Lines 1-3javascript

1import{ft as e}from"./sleep-ChZE9826.mjs";import{ei as t}from"./src-CwuSSZyu.mjs";import{d as n}from"./init-C_Eq7NlD.mjs";import{f as r,h as i,o as

dist/chunk-5QMZ5MUS-D8tv8KWc.mjsView file

Lines 1-5javascript

1import{t as e}from"./chunk-DXB73IDG-q-dGnwlc.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function constructor allows arbitrary code execution`},{prop:`eval`,target:globalThis,violationType:`eval`

dist/native/index.jsView file

Lines 1-25javascript

1// prettier-ignore

2/* eslint-disable */

3// @ts-nocheck

4/* auto-generated by NAPI-RS */

6const { readFileSync } = require('fs')

7let nativeBinding = null

dist/src-Cz4zjcA4.mjsView file

Lines 1-20javascript

1import{o as e}from"./chunk-DTipWd-i.mjs";import{K as t,ft as n,q as r}from"./sleep-ChZE9826.mjs";import{Ga as i,Hs as a,Vs as o,X as s,Z as

dist/public/assets/src-BrB3aFmb.jsView file

Lines 1-2javascript

1import{L as e}from"./CodeMirrorPropInput-Bhg9LmQE.js";import{C as t,D as n,E as r,G as i,L as a,S as o,U as s,W as c,g as l,it as

dist/js-exec-VXN6TZ7U-14kXJVQY.mjsView file

28Cross-file remote execution chain: dist/js-exec-VXN6TZ7U-14kXJVQY.mjs spawns dist/chunk-5QMZ5MUS-D8tv8KWc.mjs; helper contains network access plus dynamic code execution. L28: Available modules: L29: fs, path, child_process, process, console, L30: os, url, assert, util, events, buffer, stream, ... L43: child_process: L44: execSync(cmd) throws on non-zero exit, returns stdout L45: spawnSync(cmd, args) returns { stdout, stderr, status } ... L49: L50: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L51: EOL, cpus(), endianness() L52: L53: url: URL, URLSearchParams, parse(), format() L54:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/js-exec-VXN6TZ7U-14kXJVQY.mjsView on unpkg · L28

dist/native/native-config.linux-arm64-musl.nodeView file

•path = dist/native/native-config.linux-arm64-musl.node kind = native_binary sizeBytes = 788152 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/native-config.linux-arm64-musl.nodeView on unpkg

dist/dist-bundle-CFfKBclM.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/dist-bundle-CFfKBclM.mjsView on unpkg

dist/open-browser-De70N-tU.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.30.1 matchedPath = dist/open-browser-c8D-FzSc.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/open-browser-De70N-tU.mjsView on unpkg

dist/chunk-HOUHSVGY-q17cYlbE.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/chunk-HOUHSVGY-msG2U0fQ.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-HOUHSVGY-q17cYlbE.mjsView on unpkg

dist/chunk-PUDLZKDR-C6_GL-hZ.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/chunk-PUDLZKDR-7CuClQq1.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-PUDLZKDR-C6_GL-hZ.mjsView on unpkg

dist/chunk-Q4XR5HBZ-CmIyTunu.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/chunk-Q4XR5HBZ-DE_erWE4.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-Q4XR5HBZ-CmIyTunu.mjsView on unpkg

Source & flagged code

17 flagged · loading source

dist/lib-DD6URxCv.mjsView file

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib-DD6URxCv.mjsView on unpkg · L39

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in dist/lib-DD6URxCv.mjs

dist/lib-DD6URxCv.mjsView on unpkg · L39

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/lib-DD6URxCv.mjsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib-DD6URxCv.mjsView on unpkg · L1

dist/acp-harness-probe-XylGN-um.mjsView file

1import{ft as e}from"./sleep-ChZE9826.mjs";import{ei as t}from"./src-CwuSSZyu.mjs";import{d as n}from"./init-C_Eq7NlD.mjs";import{f as r,h as i,o as a}from"./write-project-skill-DHs... L2: `),y(()=>t?.onBackendSelected?.({backend:`keyring`})),new S(new b(t?.onKeychainRead),new x(e))}catch(n){let r=n instanceof Error?`${n.name}: ${n.message}`:String(n);return process....

High

Child Process

Package source references child process execution.

dist/acp-harness-probe-XylGN-um.mjsView on unpkg · L1

dist/chunk-5QMZ5MUS-D8tv8KWc.mjsView file

1import{t as e}from"./chunk-DXB73IDG-q-dGnwlc.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons... L2:

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-5QMZ5MUS-D8tv8KWc.mjsView on unpkg · L1

dist/native/index.jsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.31.0 matchedPath = dist/native/index.js matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/native/index.jsView on unpkg

5L6: const { readFileSync } = require('fs') L7: let nativeBinding = null

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/native/index.jsView on unpkg · L5

dist/src-Cz4zjcA4.mjsView file

1import{o as e}from"./chunk-DTipWd-i.mjs";import{K as t,ft as n,q as r}from"./sleep-ChZE9826.mjs";import{Ga as i,Hs as a,Vs as o,X as s,Z as c}from"./src-DMpGVIiQ.mjs";import{Ci as ... L2: `);_.addBuffer(Buffer.from(w,`utf8`),`README.md`),_.end();let T=le(r);return _.outputStream.pipe(T),await new Promise((e,t)=>{T.on(`close`,e),T.on(`error`,t)}),i?.info({bundlePath:... L3: `),i=n.split(` ... L7: `)?` L8: `:``;W(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=Je(n,t.contentDir);r!==n&&W(e,r)}}function Qe(e,t){let n=V(e,`utf-8`),r=Je(n,t.contentDir);r!==n&&W(e,r)}function $e(e){try{... L9: `)}\n`:null}catch{return null}}function wt(e){let t=L(e,`.git`,`ok`);if(!z(t))return null;let n=ae(`git`,[`-C`,t,`log`,`--oneline`,`-50`],d({encoding:`utf-8`,timeout:2e3}));return ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src-Cz4zjcA4.mjsView on unpkg · L1

dist/public/assets/src-BrB3aFmb.jsView file

2contains invisible/control Unicode U+2060 (word joiner) `);e!==r&&t.delete(e+n,r-e),s.length>0&&t.insert(e+n,s),n+=s.length-(r-e)})},this.conf)}destroy(){this._ytext.unobserve(this._observer)}},T=g.fromClass(w),E=v.baseTheme({".cm-ySelection":{},".cm-yLineSelection":{padding:0,margin:`0px 2px 0p

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/public/assets/src-BrB3aFmb.jsView on unpkg · L2

dist/js-exec-VXN6TZ7U-14kXJVQY.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/js-exec-VXN6TZ7U-14kXJVQY.mjsView on unpkg · L28

dist/native/native-config.linux-arm64-musl.nodeView file

•path = dist/native/native-config.linux-arm64-musl.node kind = native_binary sizeBytes = 788152 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/native-config.linux-arm64-musl.nodeView on unpkg

dist/dist-bundle-CFfKBclM.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/dist-bundle-CFfKBclM.mjsView on unpkg

dist/open-browser-De70N-tU.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/open-browser-De70N-tU.mjsView on unpkg

dist/chunk-HOUHSVGY-q17cYlbE.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-HOUHSVGY-q17cYlbE.mjsView on unpkg

dist/chunk-PUDLZKDR-C6_GL-hZ.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-PUDLZKDR-C6_GL-hZ.mjsView on unpkg

dist/chunk-Q4XR5HBZ-CmIyTunu.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-Q4XR5HBZ-CmIyTunu.mjsView on unpkg

Source & flagged code

17 flagged

dist/lib-DD6URxCv.mjsView file

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib-DD6URxCv.mjsView on unpkg · L39

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in dist/lib-DD6URxCv.mjs

dist/lib-DD6URxCv.mjsView on unpkg · L39

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/lib-DD6URxCv.mjsView on unpkg · L1

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib-DD6URxCv.mjsView on unpkg · L1

dist/acp-harness-probe-XylGN-um.mjsView file

Lines 1-3javascript

1import{ft as e}from"./sleep-ChZE9826.mjs";import{ei as t}from"./src-CwuSSZyu.mjs";import{d as n}from"./init-C_Eq7NlD.mjs";import{f as r,h as i,o as

dist/chunk-5QMZ5MUS-D8tv8KWc.mjsView file

Lines 1-5javascript

dist/native/index.jsView file

Lines 1-25javascript

1// prettier-ignore

2/* eslint-disable */

3// @ts-nocheck

4/* auto-generated by NAPI-RS */

6const { readFileSync } = require('fs')

7let nativeBinding = null

dist/src-Cz4zjcA4.mjsView file

Lines 1-20javascript

1import{o as e}from"./chunk-DTipWd-i.mjs";import{K as t,ft as n,q as r}from"./sleep-ChZE9826.mjs";import{Ga as i,Hs as a,Vs as o,X as s,Z as

dist/public/assets/src-BrB3aFmb.jsView file

Lines 1-2javascript

1import{L as e}from"./CodeMirrorPropInput-Bhg9LmQE.js";import{C as t,D as n,E as r,G as i,L as a,S as o,U as s,W as c,g as l,it as

dist/js-exec-VXN6TZ7U-14kXJVQY.mjsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/js-exec-VXN6TZ7U-14kXJVQY.mjsView on unpkg · L28

dist/native/native-config.linux-arm64-musl.nodeView file

•path = dist/native/native-config.linux-arm64-musl.node kind = native_binary sizeBytes = 788152 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/native-config.linux-arm64-musl.nodeView on unpkg

dist/dist-bundle-CFfKBclM.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/dist-bundle-CFfKBclM.mjsView on unpkg

dist/open-browser-De70N-tU.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/open-browser-De70N-tU.mjsView on unpkg

dist/chunk-HOUHSVGY-q17cYlbE.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-HOUHSVGY-q17cYlbE.mjsView on unpkg

dist/chunk-PUDLZKDR-C6_GL-hZ.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-PUDLZKDR-C6_GL-hZ.mjsView on unpkg

dist/chunk-Q4XR5HBZ-CmIyTunu.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-Q4XR5HBZ-CmIyTunu.mjsView on unpkg

@inkeep/open-knowledge@0.51.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code