@inkeep/open-knowledge@0.54.2: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@inkeep/open-knowledge@0.54.2: Suspicious npm security report | LPM Firewall

AI called this Suspicious at 88.0% confidence as Benign with medium false-positive risk.

Evidence for warning

Explicit `ok deinit` mutates project MCP/editor and Git integration state.
Explicit uninstall requires confirmation unless `--yes` is supplied.
The package ships a native addon loader.

Evidence against

No npm preinstall/install/postinstall lifecycle hook is declared.
Config mutation is a documented user-invoked CLI operation, not install-time behavior.
The evaluated-code primitive is a sandbox that blocks eval/Function and sensitive process access.
Observed network use is GitHub, localhost services, and a user-configured embeddings endpoint; no exfiltration chain was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 861 file(s), 25.6 MB of source, external domains: 0.0.0.0, 127.0.0.1, antigravity.google, api.github.com, api.openai.com, bun.sh, cdn.jsdelivr.net, chevrotain.io, claude.com, contoh.com, cscott.net, cursor.com, developers.openai.com, discord.gg, docs.claude.com, docs.github.com, docs.openclaw.ai, docs.orama.com, ejemplo.com, en.wikipedia.org, example.com, exemplo.com, fb.me, foo.bar, git-scm.com, github.com, gnu.org, googleads.g.doubleclick.net, hermes-agent.nousresearch.com, html.spec.whatwg.org, i.ytimg.com, img.youtube.com, json-schema.org, kb.example.com, landley.net, langium.org, lodash.com, mermaid.js.org, myproject.ngrok.app, openai.com, openclaw.ai, opencode.ai, openjsf.org, openknowledge.ai, pi.dev, placeholder.invalid, placeholder.local, player.vimeo.com, prosemirror.net, radix-ui.com

Oversized source lightweight scan

dist/index.mjs2.08 MB file, sampled 256 KB

NetworkChildProcessEnvironmentVarsNativeBindingsShellHighEntropyStringsUrlStrings127.0.0.1

dist/public/assets/pdf.worker-CLesOks4.mjs2.12 MB file, sampled 256 KB

NetworkChildProcessHighEntropyStringsUrlStringsexample.comwww.w3.org

dist/src-CV2EC0UY.mjs2.04 MB file, sampled 256 KB

NetworkEnvironmentVarsPossibleObfuscationMinifiedUrlStringsapi.github.com

Source & flagged code

16 flagged · loading source

dist/lib-DuDqLKFD.mjsView file

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib-DuDqLKFD.mjsView on unpkg · L39

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in dist/lib-DuDqLKFD.mjs

dist/lib-DuDqLKFD.mjsView on unpkg · L39

1import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BcpqREsI.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor... L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`

High

Child Process

Package source references child process execution.

dist/lib-DuDqLKFD.mjsView on unpkg · L1

1import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BcpqREsI.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor... L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,` ... L38: Y3FblSokcA== L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY----- L40: [redacted] ... L67: \r L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=... L69: ... L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}... L72: `);let o=a;s

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/lib-DuDqLKFD.mjsView on unpkg · L1

1import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BcpqREsI.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor... L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,` ... L38: Y3FblSokcA== L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY----- L40: [redacted] ... L67: \r L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=... L69: ... L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}... L72: `);let o=a;s

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib-DuDqLKFD.mjsView on unpkg · L1

dist/chunk-5QMZ5MUS-D8tv8KWc.mjsView file

1import{t as e}from"./chunk-DXB73IDG-q-dGnwlc.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons... L2:

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-5QMZ5MUS-D8tv8KWc.mjsView on unpkg · L1

dist/native/index.jsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.31.0 matchedPath = dist/native/index.js matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/native/index.jsView on unpkg

5L6: const { readFileSync } = require('fs') L7: let nativeBinding = null

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/native/index.jsView on unpkg · L5

dist/public/assets/src-CMg6SAjl.jsView file

2contains invisible/control Unicode U+2060 (word joiner) `);e!==r&&t.delete(e+n,r-e),s.length>0&&t.insert(e+n,s),n+=s.length-(r-e)})},this.conf)}destroy(){this._ytext.unobserve(this._observer)}},T=f.fromClass(w),E=v.baseTheme({".cm-ySelection":{},".cm-yLineSelection":{padding:0,margin:`0px 2px 0p

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/public/assets/src-CMg6SAjl.jsView on unpkg · L2

dist/js-exec-VXN6TZ7U-BrugyKqi.mjsView file

28Cross-file remote execution chain: dist/js-exec-VXN6TZ7U-BrugyKqi.mjs spawns dist/chunk-5QMZ5MUS-D8tv8KWc.mjs; helper contains network access plus dynamic code execution. L28: Available modules: L29: fs, path, child_process, process, console, L30: os, url, assert, util, events, buffer, stream, ... L43: child_process: L44: execSync(cmd) throws on non-zero exit, returns stdout L45: spawnSync(cmd, args) returns { stdout, stderr, status } ... L49: L50: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L51: EOL, cpus(), endianness() L52: L53: url: URL, URLSearchParams, parse(), format() L54:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/js-exec-VXN6TZ7U-BrugyKqi.mjsView on unpkg · L28

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.24.0 matchedPath = dist/js-exec-M6UR76J5-Cu6NIWHE.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.24.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/js-exec-VXN6TZ7U-BrugyKqi.mjsView on unpkg

dist/native/native-config.linux-arm64-musl.nodeView file

•path = dist/native/native-config.linux-arm64-musl.node kind = native_binary sizeBytes = 788152 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/native-config.linux-arm64-musl.nodeView on unpkg

dist/dist-bundle-CFfKBclM.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/dist-bundle-CFfKBclM.mjsView on unpkg

dist/open-browser-DPqI4Bfs.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.30.0 matchedPath = dist/open-browser-B0EHWyOL.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/open-browser-DPqI4Bfs.mjsView on unpkg

dist/chunk-HOUHSVGY-C3h3PdhC.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/chunk-HOUHSVGY-msG2U0fQ.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-HOUHSVGY-C3h3PdhC.mjsView on unpkg

dist/chunk-PUDLZKDR-CIWYIjrF.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/chunk-PUDLZKDR-7CuClQq1.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-PUDLZKDR-CIWYIjrF.mjsView on unpkg