Loading npm security reports…
@inkeep/open-knowledge@0.68.2: Agent extension lifecycle risk | LPM Firewall
Flagged as agent extension risk
Allowed by default with warning: install-time first-party agent extension setup was detected.
@inkeep/open-knowledge@0.68.2 Local-first, agent-friendly Markdown knowledge base with a cross-platform CLI and web editor
scanned 2mo ago · by lpm-firewall-ai No source evidence establishes malicious installation behavior, secret theft, or remote payload delivery. The package nevertheless has a real, privileged AI-agent configuration capability that should be disclosed to users.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs an OpenKnowledge setup or integration command.
Impact
A user-selected editor or agent may be configured to launch or use OpenKnowledge capabilities.
Mechanism
Writes MCP configuration and agent skill files.
AI rationale
No source evidence establishes malicious installation behavior, secret theft, or remote payload delivery. The package nevertheless has a real, privileged AI-agent configuration capability that should be disclosed to users.
Evidence
dist/index.mjs dist/cli.mjs .agents/skills/<bundle> <editor MCP configuration> <project skill directory>
public snapshot AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
The package implements writing MCP configuration entries for supported editors. It builds global and host-specific AI skill paths under an agent skills directory. Its CLI imports process-launching APIs and can contact a local OpenKnowledge service. Evidence against
package.json contains no preinstall, install, postinstall, or prepare lifecycle hook. The integration code records declined and unsupported outcomes, indicating guarded explicit setup rather than silent installation. The observed network calls use a loopback service; no credential export to an external host was confirmed. The reported eval reference is part of a defensive sandbox policy message, not a demonstrated payload execution path. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem NativeBindings Network Shell WebSocket
29 flagged · loading source 39 patternName = private_key_rsa
severity = critical
line = 39
Critical Critical Secret
Package contains a critical-looking secret pattern.
dist/lib-B82GtN9K.mjs View on unpkg · L39 39 patternName = private_key_rsa
severity = critical
line = 39
1 import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor...
L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`
...
L38: Y3FblSokcA==
L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY-----
L40: [redacted]
...
L67: \r
L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=...
L69:
...
L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}...
L72: `);let o=a;s
6 Critical 19 High 7 Medium 7 Low
Critical Critical Secret dist/lib-B82GtN9K.mjs
Critical Credential Exfiltration dist/index.mjs
Critical Trojan Source Unicode dist/public/assets/dist-CMzT53pm.js
Critical Trigger Reachable Dangerous Capability dist/index.mjs
Critical Previous Version Dangerous Delta dist/src-DjN4slzL.mjs
Critical Secret Pattern dist/lib-B82GtN9K.mjs
High Child Process dist/init-BPjcery5.mjs
High Shell dist/src-DjN4slzL.mjs
High Eval dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs
High Same File Env Network Execution dist/src-DjN4slzL.mjs
High Credential Redirect Persistence dist/cli.mjs
High
Affected versions and remediation This report applies to @inkeep/open-knowledge@0.68.2 .
See all versions of @inkeep/open-knowledge for other recorded verdicts.
Review the evidence and your use of @inkeep/open-knowledge@0.68.2 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-01 17:59:11.084Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
82% Suspicious
AI assessment confidence
Package metadata npm Maintainers abraham-inkeep, nick-inkeep, robert-inkeep +4
Version 0.68.2
Latest on npm 0.88.1
Published Sep 1, 2026
License GPL-3.0-or-later
Dependencies 20
Integrity verified
Package size 29.3 MB
Files 1,660
Keywords knowledge-base markdown local-first mcp ai cli
Supply chain
HighEntropyStrings Minified PossibleObfuscation Protestware Telemetry UrlStrings
scanned 1,267 file(s), 39.4 MB of source, external domains: 0.0.0.0, 127.0.0.1, antigravity.google, api.github.com, api.openai.com, app.excalidraw.com, bun.sh, cdn.agentclientprotocol.com, cdn.jsdelivr.net, chevrotain.io, claude.com, contoh.com, cscott.net, cursor.com, developers.openai.com, discord.gg, docs.claude.com, docs.excalidraw.com, docs.github.com, docs.openclaw.ai, docs.orama.com, ejemplo.com, embed.reddit.com, en.wikipedia.org, esm.sh, example.com, excalidraw-room-persistence.firebaseio.com, exemplo.com, fb.me, foo.bar, giphy.com, gist.github.com, git-scm.com, github.com, gnu.org, googleads.g.doubleclick.net, hermes-agent.nousresearch.com, html.spec.whatwg.org, i.ytimg.com, img.youtube.com, json-schema.org, json.excalidraw.com, kb.example.com, landley.net, langium.org, libraries.excalidraw.com, lodash.com, mermaid.js.org, notes.example.com, openclaw.ai
Oversized source lightweight scan
dist/index.mjs 2.14 MB file, sampled 256 KB
Network ChildProcess EnvironmentVars NativeBindings Shell HighEntropyStrings
dist/public/assets/pdf.worker-CLesOks4.mjs 2.12 MB file, sampled 256 KB
Network ChildProcess HighEntropyStrings UrlStrings example.com www.w3.org
dist/src-DjN4slzL.mjs 2.18 MB file, sampled 256 KB
Network ChildProcess EnvironmentVars Minified UrlStrings cdn.agentclientprotocol.com
Package source executes code through a VM context API.
dist/lib-B82GtN9K.mjs
1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{Ra as r,Va as i,bs as a,es as o,jo as s}from"./src-CDcerRX2.mjs";import{Ct as c}from"./sleep-CFk6IVkN.mjs";import{Bi a...
L2: `),u=!1;for(let e=0;e<l.length;e++){let t=l[e];if(r+=t,u)u=!1;else if(u=t>=`\ud800`&&t<=`\udbff`,u)continue;if(t===`\x1B`||t===``){Vt.lastIndex=e+1;let t=Vt.exec(l)?.groups;if(t?....
High Child Process
Package source references child process execution.
dist/init-BPjcery5.mjs View on unpkg · L1 • matchType = previous_version_dangerous_delta
matchedPackage = @inkeep/open-knowledge@0.68.1
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.68.1
similarity = 0.992
summary = stored previous version shares package body but lacks this dangerous source file
Critical Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/src-DjN4slzL.mjs View on unpkg 26 `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;d(n===void 0?r:`${r}: ${n.slice(0,300)}`)})})}function Tue(e,t=5e3,n){let r=process.platform===`win32`,i=Oue(e);return new...
L27: `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;u(n===void 0?`Node.js version probe failed with ${r}`:`Node.js version probe failed with ${r}: ${n.slice(0,300)}`);return}...
L28: `)}\n`;this.enqueue(e,async()=>{if(!this.appendBroken.has(e))try{await gte(this.eventsPath(e),n)}catch(t){this.appendBroken.add(e),this.log.error({err:t,threadId:e},`[acp-persist] ...
1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$s as l,$t as u,A as d,Aa as f,Ac as p,Ai as m,An as h,Ao as g,Ar as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Cd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Td(n)}return null}function Ed(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Cd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Td(r);i&&t.push(i)}return t}function Pn...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src-DjN4slzL.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$s as l,$t as u,A as d,Aa as f,Ac as p,Ai as m,An as h,Ao as g,Ar as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Cd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Td(n)}return null}function Ed(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Cd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Td(r);i&&t.push(i)}return t}function Pn...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src-DjN4slzL.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$s as l,$t as u,A as d,Aa as f,Ac as p,Ai as m,An as h,Ao as g,Ar as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Cd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Td(n)}return null}function Ed(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Cd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Td(r);i&&t.push(i)}return t}function Pn...
L5: `,i=e.getWriter();try{await i.write(n.encode
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/src-DjN4slzL.mjs View on unpkg · L1 1 import{t as e}from"./chunk-DXB73IDG-BBwE27jK.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons...
L2:
High Eval
Package source references dynamic code evaluation.
dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/native/index.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/native/index.js View on unpkg 5 L6: const { readFileSync } = require('fs')
L7: let nativeBinding = null
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/native/index.js View on unpkg · L5 1 import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type:e,offset:this.offset,indent:this.indent,source:this.source}
Critical Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjs View on unpkg · L1 1 Cross-file remote execution chain: dist/index.mjs spawns dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs; helper contains network access plus dynamic code execution.
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
High Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.mjs View on unpkg · L1 411 Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/index.mjs
L411: `:a>=n?`\r
L412: `:`\r`,s}t.exports.getPreferredLineEnding=E;function D(e,t){let n=t&&t.homedir&&t.homedir();return n?e.replace(/^~($|\/|\\)/,`${n}$1`):e}t.exports.expandTildePath=D;function O(e){l...
L413: `),t,f,d.startLine-1,d);d.children=r,c=c.concat(r[FG.flatTokensSymbol])}}else o===`exit`&&(g===`htmlFlow`&&(m=!1),m||(a&&(Object.freeze(d.children),Object.freeze(d)),d=u.pop()))}re...
L414: `,editColumn:r.length+1})}};function YG(e){switch(e[0]){case`~`:return`tilde`;default:return`backtick`}}var XG={names:[`MD048`,`code-fence-style`],description:`Code fence style`,ta...
L415: `)],d);let{effectiveConfig:_,rulesEnabled:v,rulesSeverity:y}=Sq(e,i,o),b=[...v.keys()];return s=new Map(v),c=s,u(t,p),u
High Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjs View on unpkg · L411 • Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
import{o as e}from"./chunk-DTipWd-i.mjs";import{Ao as t,Cs as n,Di as r,Ei as i,Go as a,Hs as o,P as s,Ro as c,Ti as l,Uo as u,Xi as d,Yi as f,Yo as p,Zs as m,a as h,as as g,da as ...
`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function ni(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(...
`)}var Fi=class extends Error{constructor(e,t,n){super(Pi(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.cap...
`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new
High Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjs View on unpkg 155 contains invisible/control Unicode U+FEFF (zero width no-break space)
`,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/public/assets/dist-CMzT53pm.js View on unpkg · L155 dist/native/native-config.linux-arm64-musl.node View file • path = dist/native/native-config.linux-arm64-musl.node
kind = native_binary
sizeBytes = 797800
magicHex = [redacted]
Medium Ships Native Binary
Package ships native binary artifacts.
dist/native/native-config.linux-arm64-musl.node View on unpkg dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 30
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/open-browser-B0EHWyOL.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/open-browser-C1ODtLI7.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-HOUHSVGY-msG2U0fQ.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-4I5QYGJK-DDH8bQMO.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-PUDLZKDR-7CuClQq1.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-JQJVKLGR-D2vc6Tqj.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-Q4XR5HBZ-DE_erWE4.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-WRU74C26-BESBlKtm.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/public/assets/chunk-XPW4576I-DZebSSCr.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-ZIRB5QZD-B2znOhor.mjs View on unpkg • matchType = token_shingles
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/public/assets/diagram-G4DWMVQ6-Ba38EFwg.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/diagram-Q27KOJAE-BQ1RHwya.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/dist-bundle-GEZgvZIe.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/dist-bundle-EXrl9_Zm.mjs View on unpkg dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js View file 1 patternName = google_api_key
severity = high
line = 1
High Secret Pattern
Google API key in dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js
dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js View on unpkg · L1 Command Output Exfiltration
dist/src-DjN4slzL.mjs
High Cross File Remote Execution Context dist/index.mjs
High Trigger Reachable Credential Exfiltration dist/index.mjs
High Trigger Reachable Command Output Exfiltration dist/index.mjs
High Semantic Analysis Limited dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1
High Known Malware Source Similarity dist/native/index.js
High Known Malware Source Similarity dist/open-browser-C1ODtLI7.mjs
High Known Malware Source Similarity dist/chunk-4I5QYGJK-DDH8bQMO.mjs
High Known Malware Source Similarity dist/chunk-JQJVKLGR-D2vc6Tqj.mjs
High Known Malware Source Similarity dist/chunk-WRU74C26-BESBlKtm.mjs
High Known Malware Source Similarity dist/chunk-ZIRB5QZD-B2znOhor.mjs
High Known Malware Source Similarity dist/diagram-Q27KOJAE-BQ1RHwya.mjs
High Known Malware Source Similarity dist/dist-bundle-EXrl9_Zm.mjs
High Secret Pattern dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js
Medium Dynamic Require dist/native/index.js
Medium Unsafe Vm Context dist/lib-B82GtN9K.mjs
Medium Ships Native Binary dist/native/native-config.linux-arm64-musl.node
Medium Structural Risk Force Deep Review
Low Weak Crypto dist/src-DjN4slzL.mjs
Runtime surface package.json
Entrypoints exports map bin → ok, open-knowledge
Runtime node >=24
Artifact 66.9 MB · 1,660 files 1 signature(s) · provenance
Install lifecycle No install hooks · other: build, build:app, build:assets, build:cli +8
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem NativeBindings Network Shell WebSocket HighEntropyStrings Minified PossibleObfuscation Protestware Telemetry UrlStrings CopyleftLicense
29 flagged 39 patternName = private_key_rsa
severity = critical
line = 39
Critical Critical Secret
Package contains a critical-looking secret pattern.
dist/lib-B82GtN9K.mjs View on unpkg · L39 39 patternName = private_key_rsa
severity = critical
line = 39
1 import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor...
L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`
...
L38: Y3FblSokcA==
L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY-----
L40: [redacted]
...
L67: \r
L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=...
L69:
...
L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}...
L72: `);let o=a;s
Medium Unsafe Vm Context
Package source executes code through a VM context API.
dist/lib-B82GtN9K.mjs View on unpkg · L1 Lines 1-21 javascript
1 import {i as e,o as t,t as n} from "./chunk-DTipWd-i.mjs" ; import {Ra as r,Va as i,bs as a,es as o,jo as s} from "./src-CDcerRX2.mjs" ; import {Ct as
• matchType = previous_version_dangerous_delta
matchedPackage = @inkeep/open-knowledge@0.68.1
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.68.1
similarity = 0.992
summary = stored previous version shares package body but lacks this dangerous source file
Critical Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/src-DjN4slzL.mjs View on unpkg 26 `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;d(n===void 0?r:`${r}: ${n.slice(0,300)}`)})})}function Tue(e,t=5e3,n){let r=process.platform===`win32`,i=Oue(e);return new...
L27: `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;u(n===void 0?`Node.js version probe failed with ${r}`:`Node.js version probe failed with ${r}: ${n.slice(0,300)}`);return}...
L28: `)}\n`;this.enqueue(e,async()=>{if(!this.appendBroken.has(e))try{await gte(this.eventsPath(e),n)}catch(t){this.appendBroken.add(e),this.log.error({err:t,threadId:e},`[acp-persist] ...
1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$s as l,$t as u,A as d,Aa as f,Ac as p,Ai as m,An as h,Ao as g,Ar as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Cd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Td(n)}return null}function Ed(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Cd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Td(r);i&&t.push(i)}return t}function Pn...
L5: `,i=e.getWriter();try{await i.write(n.encode
Lines 1-5 javascript
1 import {t as e} from "./chunk-DXB73IDG-BBwE27jK.mjs" ; function t (){ let e = [{prop: `Function` ,target:globalThis,violationType: `function_constructor` ,strategy: `throw` ,reason: `Function constructor allows arbitrary code execution` },{prop: `eval` ,target:globalThis,violationType: `eval`
Lines 1-25 javascript
4 /* auto-generated by NAPI-RS */
6 const { readFileSync } = require ( 'fs' )
7 let nativeBinding = null
1 import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type:e,offset:this.offset,indent:this.indent,source:this.source}
Critical Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjs View on unpkg · L1 • Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
import{o as e}from"./chunk-DTipWd-i.mjs";import{Ao as t,Cs as n,Di as r,Ei as i,Go as a,Hs as o,P as s,Ro as c,Ti as l,Uo as u,Xi as d,Yi as f,Yo as p,Zs as m,a as h,as as g,da as ...
`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function ni(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(...
`)}var Fi=class extends Error{constructor(e,t,n){super(Pi(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.cap...
`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new
High Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjs View on unpkg 155 contains invisible/control Unicode U+FEFF (zero width no-break space)
`,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/public/assets/dist-CMzT53pm.js View on unpkg · L155 dist/native/native-config.linux-arm64-musl.node View file • path = dist/native/native-config.linux-arm64-musl.node
kind = native_binary
sizeBytes = 797800
magicHex = [redacted]
Medium Ships Native Binary
Package ships native binary artifacts.
dist/native/native-config.linux-arm64-musl.node View on unpkg dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 30
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/open-browser-B0EHWyOL.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/open-browser-C1ODtLI7.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-HOUHSVGY-msG2U0fQ.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-4I5QYGJK-DDH8bQMO.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-PUDLZKDR-7CuClQq1.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-JQJVKLGR-D2vc6Tqj.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/chunk-Q4XR5HBZ-DE_erWE4.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-WRU74C26-BESBlKtm.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/public/assets/chunk-XPW4576I-DZebSSCr.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-ZIRB5QZD-B2znOhor.mjs View on unpkg • matchType = token_shingles
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/public/assets/diagram-G4DWMVQ6-Ba38EFwg.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/diagram-Q27KOJAE-BQ1RHwya.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/dist-bundle-GEZgvZIe.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/dist-bundle-EXrl9_Zm.mjs View on unpkg dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js View file 1 patternName = google_api_key
severity = high
line = 1
High Secret Pattern
Google API key in dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js
dist/public/assets/chunk-ZUYEQ4TG-qbwUPqcX.js View on unpkg · L1 c}
from
"./sleep-CFk6IVkN.mjs"
;
import
{Bi
as
l,Cn
as
u,En
as
d,Fr
as
f,Ir
as
p,La
as
m,Mi
as
h,Ni
as
g,Pr
as
_,Rr
as
v,Sn
as
y,bi
as
b,bn
as
x,d
as
S,f
as
C,gr
as
ee,lr
as
te,or
as
ne,p
as
re,sr
as
ie,vr
as
ae,xi
as
oe,yi
as
se,yn
as
ce}
from
"./src-DjN4slzL.mjs"
;
import
{I
as
w,P
as
le}
from
"./fs-traced-C8gNIaHq.mjs"
;
import
{C
as
ue,a
as
T,d
as
de,f
as
fe,i
as
pe,l
as
me,n
as
he,o
as
ge,s
as
_e,t
as
ve,u
as
ye,x
as
be,y
as
xe}
from
"./resolve-project-root-CE3DfbZs.m ..
.
2 `),u=!1;for(let e=0;e<l.length;e++){let t=l[e];if(r+=t,u)u=!1;else if(u=t>=` \ ud800 `&&t<=` \ udbff `,u)continue;if(t===` \ x1B `||t===` `){Vt.lastIndex=e+1;let t=Vt.exec(l)?.groups;if(t?.code!==void 0){let e=Number.parseFloat(t.code);i=e===39?void 0:e}else t?.uri!==void 0&&(a=t.uri.length===0?void 0:t.uri)}if(l[e+1]===`
High Child Process
Package source references child process execution.
dist/init-BPjcery5.mjs View on unpkg · L1 3 `){a&&(r+=Wt(``));let e=i?Ht(i):void 0;i&&e&&(r+=Ut(e))}else t===`
4 `&&(i&&Ht(i)&&(r+=Ut(i)),a&&(r+=Wt(a)))}return r},Jt=/ \r ? \n /;function Yt(e,t,n){return String(e).normalize().split(Jt).map(e=>qt(e,t,n)).join(`
5 `)}function Xt(e,t){return e.split(`
6 `).flatMap(e=>Yt(e,t,{trim:!1,wordWrap:!1}).split(`
7 `).map(e=>e.trimEnd())).join(`
8 `)}function Zt(){return(0,Et.default)({defaultWidth:80,output:at().output})}function Qt({active:e,renderedItems:t,pageSize:n,loop:r}){let i=wt({lastPointer:e,lastActive:void 0}),{lastPointer:a,lastActive:o}=i.current,s=Math.floor(n/2),c=t.reduce((e,t)=>e+t.length,0),l=t.slice(0,e).reduce((e,t)=>e+t.length,0),u=l;if(c>n)if(r)u=a,o!=null&&o<e&&e-o<n&&(u=Math.min(s,Math.abs(e-o)===1?Math.min(a+(t[o]?.length??0),Math.max(l,a)):a+e-o));else{let r=t.slice(e).reduce((e,t)=>e+t.length,0);u=r<n-s?n-r:Math.min(l,s)}return i.current.lastPointer=u,i.current.lastActive=e,u}function $t({items:e,active:t,ren ...
9 ` )),c = s. reduce (( e , t ) => e + t. length , 0 ), l = e => s[e] ?? [],u = Qt ({active:t,renderedItems:s,pageSize:r,loop:i}),d = l (t). slice ( 0 ,r),f = u + d. length <= r ? u : r - d. length ,p = Array. from ({length:r});p. splice (f,d. length , ... d); let m =new Set ([t]),h = f + d. length ,g = o (t + 1 ); for (;h < r &&! m. has (g) && (i && c > r ? g !== t : g > t);){ let e = l (g). slice ( 0 ,r - h);p. splice (h,e. length , ... e),m. add (g),h += e. length ,g = o (g + 1 )} for (h = f - 1 ,g = o (t - 1 );h >= 0 &&! m. has (g) && (i && c > r ? g !== t : g < t);){ let e = l (g),t = e. slice (Math. max ( 0 ,e. length - h - 1 ));p. splice (h - t. length + 1 ,t. length , ... t),m. add (g),h -= t. length ,g = o (g - 1 )} return p. filter ( e =>typeof e == `string` ). join ( `
10 ` )} var en = t ( n ((( t , n ) => { let r = e ( `stream` );n.exports =class extends r { #e = null ; constructor ( e = {}){ super (e), this .writable = this .readable =! 0 , this .muted =! 1 , this . on ( `pipe` , this ._onpipe), this .replace = e.replace, this ._prompt = e.prompt || null , this ._hadControl =! 1 }# t ( e , t ){ return this ._dest ? this ._dest[e] : this ._src ? this ._src[e] : t}# n ( e , ... t ){ typeof this ._dest?.[e] == `function` && this ._dest[e]( ... t), typeof this ._src?.[e] == `function` && this ._src[e]( ... t)} get isTTY (){ return this .#e === null ? this . #t ( `isTTY` , ! 1 ) : this .#e} set isTTY ( e ){ this .#e = e} get rows (){ return this . #t ( `rows` )} get columns (){ return this . #t ( `columns` )}mute(){t ...
11 `).length, Sn = e => e. split ( `
12 ` ). pop () ?? `` ;var Cn =class { height = 0 ; extraLinesUnderPrompt = 0 ; cursorPos ; rl ; constructor ( e ){ this .rl = e, this .cursorPos = e. getCursorPos ()}write(e){this.rl.output.unmute(),this.rl.output.write(e),this.rl.output.mute()}render(e,t=``){let n=Be(Sn(e)),r=n;this.rl.line.length>0&&(r=r.slice(0,-this.rl.line.length)),this.rl.setPrompt(r),this.cursorPos=this.rl.getCursorPos();let i=Zt();e=Xt(e,i),t=Xt(t,i),n.length%i===0&&(e+=`
14 ` + t : `` ), o = Math. floor (n. length / i) - this .cursorPos.rows + (t ? xn (t) : 0 );o > 0 && ( a + = gn (o)),a += vn (this.cursorPos.cols), this . write ( _n ( this .extraLinesUnderPrompt) + bn ( this .height) + a), this .extraLinesUnderPrompt = o, this .height = xn (a)} checkCursorPos (){let e = this .rl. getCursorPos ();e.cols !== this .cursorPos.cols && ( this . write ( vn (e.cols)), this .cursorPos = e)} done ({clearContent:e}){this.rl.setPrompt( `` );let t=_n(this.extraLinesUnderPrompt);t+=e?bn(this.height): `
15 ` ,t+= ` \x1B [G` ,t+= ` \x1B [?25h` ,this.write(t),this.rl.close()}},wn =class extends Promise { static withResolver (){ let e,t; return {promise: new Promise (( n , r ) => {e = n,t = r}),resolve:e,reject:t}}}; const Tn = globalThis.setImmediate; function En (){ let e = Error.prepareStackTrace,t = []; try {Error. prepareStackTrace = ( e , n ) => { let r = n. slice ( 1 ); return t = r,r}, Error ().stack} catch { return t} return Error.prepareStackTrace = e,t} function Dn ( e ){ let t = En (); return ( n , r = {}) => { let { input :i = process.stdin, signal :a} = r,o =new Set,s =new en.default;s. pipe (r.output ?? process.stdout); let c = Re. createInterface ({terminal: ! 0 ,input:i,output:s});s.mute ...
16 `).filter(e=>{let t=e.trim();return a.has(t)?(o.push(t),!1):!0}).join(`
17 `),c=Vn(s),l=[],u=[];for(let e of t)Bn(c,e)?u.push(e):l.push(e);if(l.length===0&&o.length===0)return{kind:` updated `,appended:l,alreadyPresent:u,removed:[]};let d=l.length===0||s.length===0||s.endsWith(`
19 `,f=l.length===0?``:` ${l. join ( `
20 ` )}\ n `;try{Ie(r.path,` ${s}${d}${f} `,` utf - 8 `)}catch{return{kind:` no - exclude `,reason:` inaccessible `}}return{kind:` updated `,appended:l,alreadyPresent:u,removed:o}}function Nn(e,t){let n=Rn(e);if(n.kind!==` ok `)return n.result;if(!L(n.path))return{kind:` updated `,appended:[],alreadyPresent:[],removed:[]};let r=t.map(e=>zn(e)),i=new Set;for(let e of r)for(let t of e)i.add(t);i.add(On),i.add(kn);for(let t of jn(e))i.add(t);let a;try{a=R(n.path,` utf - 8 `)}catch{return{kind:` no - exclude `,reason:` inaccessible `}}let o=a.split(`
21 `),s=new Set,c=[];for(let e of o){let t=e.trim();if(i.has(t)){s.add(t);continue}c.push(e)}let l=[...s];if(s.size===0)return{kind:` updated `,appended:[],alreadyPresent:[],removed:[]};let u=c.join(`
Long lines were clipped for display.
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src-DjN4slzL.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$s as l,$t as u,A as d,Aa as f,Ac as p,Ai as m,An as h,Ao as g,Ar as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Cd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Td(n)}return null}function Ed(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Cd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Td(r);i&&t.push(i)}return t}function Pn...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src-DjN4slzL.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$s as l,$t as u,A as d,Aa as f,Ac as p,Ai as m,An as h,Ao as g,Ar as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Cd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Td(n)}return null}function Ed(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Cd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Td(r);i&&t.push(i)}return t}function Pn...
L5: `,i=e.getWriter();try{await i.write(n.encode
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/src-DjN4slzL.mjs View on unpkg · L1 ,strategy:
`throw`
,reason:
`eval() allows arbitrary code execution`
},{prop:
`setTimeout`
,target:globalThis,violationType:
`setTimeout`
,strategy:
`throw`
,reason:
`setTimeout with string argument allows code execution`
},{prop:
`setInterval`
,target:globalThis,violationType:
`setInterval`
,strategy:
`throw`
,reason:
`setInterval with string ...
2
High Eval
Package source references dynamic code evaluation.
dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs View on unpkg · L1 3 This is a defense-in-depth measure and indicates a bug in just-bash. Please report this at security@vercel.com` ,o =class extends Error { violation ; constructor ( e , t ){ super (e + a), this .violation = t, this .name = `SecurityViolationError` }},s =! n && i ?new i : null ,c = 1e3 ; function l ( e , t , ... n ){ return s. run (e,() => t ( ... n))}var u = {enabled: ! 0 ,auditMode: ! 1 }; function d ( e ){ return e ===void 0 ? { ... u,enabled: ! 1 } :typeof e == `boolean` ? { ... u,enabled:e} : { ... u, ... e}}var f =class i { static instance = null ; static importHooksRegistered =! 1 ; static trustedExecutionDepth =new Map; config ; refCount = 0 ; patchFailures = []; activeExecutionIds =new Set;con ...
4 `);n.register(` data : text / javascript ,${ encodeURIComponent (e)} `),i.importHooksRegistered=!0}}catch(e){console.debug(` [DefenseInDepthBox] Could not register import () hooks:`,e instanceof Error ? e.message : e)}} protectModuleLoad (){ if (! n )try{ let t = null ; if ( typeof process< `u` ){ let e = process.mainModule; e &&typeof e== `object` && ( t = e. constructor )} if (! t &&typeof e< `u` &&typeof e.main< `u` && ( t = e.main. constructor ),! t ||typeof t._load != `function` ) return ; let n = t . _load , r = Object . getOwnPropertyDescriptor ( t , `_load` ); this . originalDescriptors . push ({ target : t , prop : `_load` , descriptor : r }); let i = this . createBlockingProxy ( n , `Modu ...
5 //# sourceMappingURL=chunk-5QMZ5MUS-C5NTf5Rj.mjs.map
Long lines were clipped for display.
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/native/index.js View on unpkg · L5 12 if (process.platform === 'linux' ) {
13 musl = isMuslFromFilesystem ()
15 musl = isMuslFromReport ()
18 musl = isMuslFromChildProcess ()
24 const isFileMusl = ( f ) => f. includes ( 'libc.musl-' ) || f. includes ( 'ld-musl-' )
• matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/native/index.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/native/index.js View on unpkg 1 Cross-file remote execution chain: dist/index.mjs spawns dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs; helper contains network access plus dynamic code execution.
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ye,``),i=Ke.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(qe.test(e)){n=void 0;continue}n&&Je.test(e)&&(n.active=!0)}return t}var Ze=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
High Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.mjs View on unpkg · L1 411 Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/index.mjs
L411: `:a>=n?`\r
L412: `:`\r`,s}t.exports.getPreferredLineEnding=E;function D(e,t){let n=t&&t.homedir&&t.homedir();return n?e.replace(/^~($|\/|\\)/,`${n}$1`):e}t.exports.expandTildePath=D;function O(e){l...
L413: `),t,f,d.startLine-1,d);d.children=r,c=c.concat(r[FG.flatTokensSymbol])}}else o===`exit`&&(g===`htmlFlow`&&(m=!1),m||(a&&(Object.freeze(d.children),Object.freeze(d)),d=u.pop()))}re...
L414: `,editColumn:r.length+1})}};function YG(e){switch(e[0]){case`~`:return`tilde`;default:return`backtick`}}var XG={names:[`MD048`,`code-fence-style`],description:`Code fence style`,ta...
L415: `)],d);let{effectiveConfig:_,rulesEnabled:v,rulesSeverity:y}=Sq(e,i,o),b=[...v.keys()];return s=new Map(v),c=s,u(t,p),u
High Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjs View on unpkg · L411