@inkeep/open-knowledge@0.68.11
Local-first, agent-friendly Markdown knowledge base with a cross-platform CLI and web editor
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not malicious install-hook behavior, but its explicit agent-integration commands modify AI-tool control surfaces. Downgrade to a warning for the user-invoked capability rather than block publication.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs ok init or another integration or skill management command.
Impact
The selected project's AI-tool configuration and skill directories can be changed.
Mechanism
User-invoked MCP configuration and agent skill installation.
AI rationale
This is not malicious install-hook behavior, but its explicit agent-integration commands modify AI-tool control surfaces. Downgrade to a warning for the user-invoked capability rather than block publication.
Evidence
dist/cli.mjsdist/init-B0hzgL6G.mjsdist/repair-skills-zu7vM_05.mjsdist/skill-teardown-DUZd_juy.mjs.ok/.mcp.json.agents/skills/
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI's explicit init flow can create project configuration and register MCP and skill integrations for AI tools.
- The bundled implementation includes user-global and host-specific skill paths, so a user-invoked setup can alter agent extension surfaces.
Evidence against
- package.json has no preinstall, install, postinstall, or prepare lifecycle hook.
- The package exposes CLI binaries; inspection found no automatic execution on package installation.
- No concrete credential theft, stealth exfiltration, remote payload loading, or destructive install-time action was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
CopyleftLicense
Oversized source lightweight scan
dist/index.mjs2.14 MB file, sampled 256 KB
NetworkChildProcessEnvironmentVarsNativeBindingsShellHighEntropyStrings
dist/public/assets/pdf.worker-CLesOks4.mjs2.12 MB file, sampled 256 KB
NetworkChildProcessHighEntropyStringsUrlStringsexample.comwww.w3.org
dist/src-e2udu2Rw.mjs2.19 MB file, sampled 256 KB
NetworkChildProcessEnvironmentVarsMinifiedUrlStringscdn.agentclientprotocol.com
Source & flagged code
28 flagged · loading sourcedist/lib-B82GtN9K.mjsView file
39patternName = private_key_rsa
severity = critical
line = 39
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/lib-B82GtN9K.mjsView on unpkg · L3939patternName = private_key_rsa
severity = critical
line = 39
Critical
1import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor...
L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`
...
L38: Y3FblSokcA==
L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY-----
L40: [redacted]
...
L67: \r
L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=...
L69:
...
L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}...
L72: `);let o=a;s
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
dist/lib-B82GtN9K.mjsView on unpkg · L11import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor...
L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`
...
L38: Y3FblSokcA==
L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY-----
L40: [redacted]
...
L67: \r
L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=...
L69:
...
L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}...
L72: `);let o=a;s
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/lib-B82GtN9K.mjsView on unpkg · L1dist/start-Cs062mlI.mjsView file
1import{Gs as e,Is as t,Us as n,Ws as r,zs as i}from"./src-B2bAQ64a.mjs";import{L as a}from"./sleep-zea4v2sB.mjs";import{Ln as o,s,t as c,ti as l}from"./src-e2udu2Rw.mjs";import{A a...
L2: `)))}let O=o.port===void 0?void 0:Number(o.port),k=h.overrides.find(e=>e.envVar===`PORT`)?.value,A=O??k??s.server?.port,j=B({explicitDir:o.reactShellDistDir,only:o.only,findBundled...
High
Child Process
Package source references child process execution.
dist/start-Cs062mlI.mjsView on unpkg · L1dist/index.mjsView file
1import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type:e,offset:this.offset,indent:this.indent,source:this.source}
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjsView on unpkg · L11Trigger-reachable chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L1183L184: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let n of e.seen.entries()){let r=n[1];if(t===n[0]){a(n);continue}if(e.external){let r=e.exter...
L185: `),o=r-1;if(o<0||o>=a.length)return``;let s=a[o]??``,c=t-(i-1)+s.length,l=Math.max(1,Math.min(n,c)-t),u=[],d=String(o+2).length;for(let e=Math.max(0,o-1);e<=Math.min(a.length-1,o+1...
High
411`:a>=n?`\r
L412: `:`\r`,s}t.exports.getPreferredLineEnding=E;function D(e,t){let n=t&&t.homedir&&t.homedir();return n?e.replace(/^~($|\/|\\)/,`${n}$1`):e}t.exports.expandTildePath=D;function O(e){l...
L413: `),t,f,d.startLine-1,d);d.children=r,c=c.concat(r[PG.flatTokensSymbol])}}else o===`exit`&&(g===`htmlFlow`&&(m=!1),m||(a&&(Object.freeze(d.children),Object.freeze(d)),d=u.pop()))}re...
L414: `,editColumn:r.length+1})}};function JG(e){switch(e[0]){case`~`:return`tilde`;default:return`backtick`}}var YG={names:[`MD048`,`code-fence-style`],description:`Code fence style`,ta...
L415: `)],d);let{effectiveConfig:_,rulesEnabled:v,rulesSeverity:y}=xq(e,i,o),b=[...v.keys()];return s=new Map(v),c=s,u(t,p),u(t,m,h),u(t,g),{effectiveConfig:_,enabledRulesPerLineNumber:l...
...
L420: `)}function n
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsView on unpkg · L4111Cross-file remote execution chain: dist/index.mjs spawns dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs; helper contains network access plus dynamic code execution.
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.mjsView on unpkg · L11Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.mjsView on unpkg · L1411Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/index.mjs
L411: `:a>=n?`\r
L412: `:`\r`,s}t.exports.getPreferredLineEnding=E;function D(e,t){let n=t&&t.homedir&&t.homedir();return n?e.replace(/^~($|\/|\\)/,`${n}$1`):e}t.exports.expandTildePath=D;function O(e){l...
L413: `),t,f,d.startLine-1,d);d.children=r,c=c.concat(r[PG.flatTokensSymbol])}}else o===`exit`&&(g===`htmlFlow`&&(m=!1),m||(a&&(Object.freeze(d.children),Object.freeze(d)),d=u.pop()))}re...
L414: `,editColumn:r.length+1})}};function JG(e){switch(e[0]){case`~`:return`tilde`;default:return`backtick`}}var YG={names:[`MD048`,`code-fence-style`],description:`Code fence style`,ta...
L415: `)],d);let{effectiveConfig:_,rulesEnabled:v,rulesSeverity:y}=xq(e,i,o),b=[...v.keys()];return s=new Map(v),c=s,u(t,p),u
High
Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjsView on unpkg · L411dist/chunk-5QMZ5MUS-C5NTf5Rj.mjsView file
1import{t as e}from"./chunk-DXB73IDG-BBwE27jK.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons...
L2:
High
Eval
Package source references dynamic code evaluation.
dist/chunk-5QMZ5MUS-C5NTf5Rj.mjsView on unpkg · L1dist/native/index.jsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/native/index.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/native/index.jsView on unpkg5L6: const { readFileSync } = require('fs')
L7: let nativeBinding = null
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/native/index.jsView on unpkg · L5dist/src-DYjywx4Z.mjsView file
1import{o as e}from"./chunk-DTipWd-i.mjs";import{Ha as t,Ia as n,La as r,ac as i,oc as a}from"./src-B2bAQ64a.mjs";import{$ as o,Ct as s,Q as c,c as l,s as u}from"./sleep-zea4v2sB.mj...
L2: `),r=n===-1?t:t.slice(0,n),i=JSON.parse(r);if(typeof i!=`object`||!i)return{kind:`unreadable`};let{name:a,app_name:o,timestamp:s}=i,c=typeof a==`string`?a:typeof o==`string`?o:null...
...
L8: `)?`
L9: `:``;W(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=St(n,t.contentDir);r!==n&&W(e,r)}}function Et(e,t){let n=H(e,`utf-8`),r=St(n,t.contentDir);r!==n&&W(e,r)}function Dt(e){try{...
L10: `)}\n`:null}catch{return null}}function $t(e){let t=R(e,`.git`,`ok`);if(!B(t))return null;let n=fe(`git`,[`-C`,t,`log`,`--oneline`,`-50`],d({encoding:`utf-8`,timeout:2e3}));return ...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src-DYjywx4Z.mjsView on unpkg · L1dist/cli.mjsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
import{o as e}from"./chunk-DTipWd-i.mjs";import{Ao as t,Cs as n,Di as r,Ei as i,Go as a,Hs as o,P as s,Ro as c,Ti as l,Uo as u,Xi as d,Yi as f,Yo as p,Zs as m,a as h,as as g,da as ...
`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function si(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(...
`)}var Bi=class extends Error{constructor(e,t,n){super(zi(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.cap...
`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjsView on unpkgdist/public/assets/ku-TR-NAH2Q5B7-1bSkaN_S.jsView file
4contains invisible/control Unicode U+200C (zero width non-joiner)
گۆڕانکارییەکانت سەیڤ ناکرێن!`,localStorageQuotaExceeded:``},o={unsupportedFileType:`جۆری فایلی پشتگیری نەکراو.`,imageInsertError:`نەیتوانی وێنە داخڵ بکات. دواتر هەوڵ بدە`,fileTooBig:`فایلەکە زۆر گەورەیە. زۆرترین قەبارەی ڕێگەپێدراو {{maxSiz
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/public/assets/ku-TR-NAH2Q5B7-1bSkaN_S.jsView on unpkg · L4dist/native/native-config.linux-arm64-musl.nodeView file
•path = dist/native/native-config.linux-arm64-musl.node
kind = native_binary
sizeBytes = 797800
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/native/native-config.linux-arm64-musl.nodeView on unpkgdist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 29
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1View on unpkgdist/open-browser-H-QKQd10.mjsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.1
matchedPath = dist/open-browser-c8D-FzSc.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/open-browser-H-QKQd10.mjsView on unpkgdist/chunk-4I5QYGJK-DDH8bQMO.mjsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-HOUHSVGY-msG2U0fQ.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-4I5QYGJK-DDH8bQMO.mjsView on unpkgdist/chunk-JQJVKLGR-D2vc6Tqj.mjsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-PUDLZKDR-7CuClQq1.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-JQJVKLGR-D2vc6Tqj.mjsView on unpkgdist/chunk-WRU74C26-BESBlKtm.mjsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-Q4XR5HBZ-DE_erWE4.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-WRU74C26-BESBlKtm.mjsView on unpkgdist/chunk-ZIRB5QZD-B2znOhor.mjsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/public/assets/chunk-XPW4576I-DZebSSCr.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-ZIRB5QZD-B2znOhor.mjsView on unpkgdist/diagram-Q27KOJAE-BQ1RHwya.mjsView file
•matchType = token_shingles
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/public/assets/diagram-G4DWMVQ6-Ba38EFwg.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/diagram-Q27KOJAE-BQ1RHwya.mjsView on unpkgdist/dist-bundle-EXrl9_Zm.mjsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/dist-bundle-GEZgvZIe.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/dist-bundle-EXrl9_Zm.mjsView on unpkgdist/public/assets/chunk-A66AFZZU-D5J-3i2I.jsView file
1patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in dist/public/assets/chunk-A66AFZZU-D5J-3i2I.js
dist/public/assets/chunk-A66AFZZU-D5J-3i2I.jsView on unpkg · L1Findings
5 Critical19 High7 Medium7 Low
CriticalCritical Secretdist/lib-B82GtN9K.mjs
CriticalCredential Exfiltrationdist/index.mjs
CriticalTrojan Source Unicodedist/public/assets/ku-TR-NAH2Q5B7-1bSkaN_S.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
CriticalSecret Patterndist/lib-B82GtN9K.mjs
HighChild Processdist/start-Cs062mlI.mjs
HighShelldist/index.mjs
HighEvaldist/chunk-5QMZ5MUS-C5NTf5Rj.mjs
HighSame File Env Network Executiondist/src-DYjywx4Z.mjs
HighCredential Redirect Persistencedist/cli.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighCross File Remote Execution Contextdist/index.mjs
HighTrigger Reachable Credential Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighSemantic Analysis Limiteddist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritydist/native/index.js
HighKnown Malware Source Similaritydist/open-browser-H-QKQd10.mjs
HighKnown Malware Source Similaritydist/chunk-4I5QYGJK-DDH8bQMO.mjs
HighKnown Malware Source Similaritydist/chunk-JQJVKLGR-D2vc6Tqj.mjs
HighKnown Malware Source Similaritydist/chunk-WRU74C26-BESBlKtm.mjs
HighKnown Malware Source Similaritydist/chunk-ZIRB5QZD-B2znOhor.mjs
HighKnown Malware Source Similaritydist/diagram-Q27KOJAE-BQ1RHwya.mjs
HighKnown Malware Source Similaritydist/dist-bundle-EXrl9_Zm.mjs
HighSecret Patterndist/public/assets/chunk-A66AFZZU-D5J-3i2I.js
MediumDynamic Requiredist/native/index.js
MediumUnsafe Vm Contextdist/lib-B82GtN9K.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Native Binarydist/native/native-config.linux-arm64-musl.node
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/lib-B82GtN9K.mjs
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowCopyleft License
Affected versions and remediation
This report applies to @inkeep/open-knowledge@0.68.11.
See all versions of @inkeep/open-knowledge for other recorded verdicts.
- Review the evidence and your use of @inkeep/open-knowledge@0.68.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.