Loading npm security reports…
@inkeep/open-knowledge@0.68.26: AI-agent capability abuse | LPM Firewall
Flagged as AI-agent capability risk
Allowed by default with warning: agent-facing configuration or capability changes need review before use.
@inkeep/open-knowledge@0.68.26 Local-first, agent-friendly Markdown knowledge base with a cross-platform CLI and web editor
scanned 2mo ago · by lpm-firewall-ai This is not malicious by the install-hook or exfiltration criteria, but its explicit CLI integration commands modify AI-agent configuration and warrant a warning classification.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs an OpenKnowledge CLI command that initializes, repairs, or manages integrations.
Impact
The selected agent integration may gain OpenKnowledge MCP or skill entries and corresponding capabilities.
Mechanism
User-invoked AI-agent configuration and skill management
AI rationale
This is not malicious by the install-hook or exfiltration criteria, but its explicit CLI integration commands modify AI-agent configuration and warrant a warning classification.
Evidence
dist/cli.mjs dist/repair-mcp-configs-D65Bk2b6.mjs dist/init-BqMJlqS9.mjs dist/native/index.js
public snapshot AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
The user-invoked CLI includes MCP configuration repair and project skill installation features. The package ships native binaries and a loader that can select a platform-specific binding at runtime. Evidence against
package.json has no preinstall, install, postinstall, or prepare lifecycle hook. Network calls inspected target localhost project services, GitHub, or configured OpenAI endpoints; no credential exfiltration endpoint was found. The flagged curl module is an explicitly invoked sandbox command implementation, not install-time code. Behavioral surface
Source ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem NativeBindings Network Shell WebSocket
Supply chain HighEntropyStrings Minified PossibleObfuscation Protestware
29 flagged · loading source 39 patternName = private_key_rsa
severity = critical
line = 39
Critical Critical Secret
Package contains a critical-looking secret pattern.
dist/lib-B82GtN9K.mjs View on unpkg · L39 39 patternName = private_key_rsa
severity = critical
line = 39
1 import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor...
L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`
...
L38: Y3FblSokcA==
L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY-----
L40: [redacted]
...
L67: \r
L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=...
L69:
...
L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}...
L72: `);let o=a;s
5 Critical 20 High 7 Medium 7 Low
Critical Critical Secret dist/lib-B82GtN9K.mjs
Critical Credential Exfiltration dist/index.mjs
Critical Trojan Source Unicode dist/public/assets/he-IL-ZX43XLGP-KskW1AnW.js
Critical Trigger Reachable Dangerous Capability dist/index.mjs
Critical Secret Pattern dist/lib-B82GtN9K.mjs
High Child Process dist/open-browser-DtPQklA3.mjs
High Shell dist/src-BxqApSys.mjs
High Eval dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs
High Same File Env Network Execution dist/src-BxqApSys.mjs
High Credential Redirect Persistence dist/cli.mjs
High Command Output Exfiltration dist/src-BxqApSys.mjs
Affected versions and remediation This report applies to @inkeep/open-knowledge@0.68.26 .
See all versions of @inkeep/open-knowledge for other recorded verdicts.
Review the evidence and your use of @inkeep/open-knowledge@0.68.26 before allowing it. Restrict the permissions described in this report. Choose an independently verified alternative or release. This report does not establish that other versions are safe. Evidence last updated: 2026-09-08 16:04:45.329Z (UTC) .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced .
84% Suspicious
AI assessment confidence
Package metadata npm Maintainers abraham-inkeep, nick-inkeep, robert-inkeep +4
Version 0.68.26
Latest on npm 0.88.1
Published Sep 8, 2026
License GPL-3.0-or-later
Dependencies 20
Integrity verified
Package size 29.5 MB
Files 1,665
Keywords knowledge-base markdown local-first mcp ai cli
Telemetry
UrlStrings
scanned 1,273 file(s), 40.1 MB of source, external domains: 0.0.0.0, 127.0.0.1, antigravity.google, api.github.com, api.openai.com, app.excalidraw.com, bun.sh, cdn.agentclientprotocol.com, cdn.jsdelivr.net, chevrotain.io, claude.com, contoh.com, cscott.net, cursor.com, developers.openai.com, discord.gg, docs.claude.com, docs.excalidraw.com, docs.github.com, docs.openclaw.ai, docs.orama.com, ejemplo.com, en.wikipedia.org, example.com, excalidraw-room-persistence.firebaseio.com, exemplo.com, fb.me, foo.bar, git-scm.com, github.com, gnu.org, googleads.g.doubleclick.net, hermes-agent.nousresearch.com, html.spec.whatwg.org, i.ytimg.com, img.youtube.com, json-schema.org, json.excalidraw.com, kb.example.com, landley.net, langium.org, libraries.excalidraw.com, lodash.com, mermaid.js.org, notes.example.com, openclaw.ai, opencode.ai, openjsf.org, openknowledge.ai, oss-ai.excalidraw.com
Oversized source lightweight scan
dist/index.mjs 2.14 MB file, sampled 256 KB
Network ChildProcess EnvironmentVars NativeBindings Shell HighEntropyStrings
dist/public/assets/pdf.worker-CLesOks4.mjs 2.12 MB file, sampled 256 KB
Network ChildProcess HighEntropyStrings UrlStrings example.com www.w3.org
dist/src-BxqApSys.mjs 2.20 MB file, sampled 256 KB
Network ChildProcess EnvironmentVars Minified UrlStrings cdn.agentclientprotocol.com
Package source executes code through a VM context API.
dist/lib-B82GtN9K.mjs
1 import{Bi as e}from"./src-BxqApSys.mjs";import{execFile as t}from"node:child_process";const n=new Set([`http:`,`https:`]),r=/[\u0000-\u0020\u007F-\u009F"'`\\&|<>^()$;{}[\]*?!~]/;fu...
L2: //# sourceMappingURL=open-browser-DtPQklA3.mjs.map
High Child Process
Package source references child process execution.
dist/open-browser-DtPQklA3.mjs View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/open-browser-B0EHWyOL.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/open-browser-DtPQklA3.mjs View on unpkg 26 `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;d(n===void 0?r:`${r}: ${n.slice(0,300)}`)})})}function bde(e,t=5e3,n){let r=process.platform===`win32`,i=Cde(e);return new...
L27: `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;u(n===void 0?`Node.js version probe failed with ${r}`:`Node.js version probe failed with ${r}: ${n.slice(0,300)}`);return}...
L28: `)}\n`;this.enqueue(e,async()=>{if(!this.appendBroken.has(e))try{await ine(this.eventsPath(e),n)}catch(t){this.appendBroken.add(e),this.log.error({err:t,threadId:e},`[acp-persist] ...
1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$t as l,A as u,Aa as d,Ac as f,Ai as p,An as m,Ao as h,Ar as g,As as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Wu))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Ku(n)}return null}function qu(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Wu))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Ku(r);i&&t.push(i)}return t}function hr...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src-BxqApSys.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$t as l,A as u,Aa as d,Ac as f,Ai as p,An as m,Ao as h,Ar as g,As as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Wu))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Ku(n)}return null}function qu(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Wu))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Ku(r);i&&t.push(i)}return t}function hr...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src-BxqApSys.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$t as l,A as u,Aa as d,Ac as f,Ai as p,An as m,Ao as h,Ar as g,As as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Wu))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Ku(n)}return null}function qu(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Wu))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Ku(r);i&&t.push(i)}return t}function hr...
L5: `,i=e.getWriter();try{await i.write(n.encode
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/src-BxqApSys.mjs View on unpkg · L1 1 import{t as e}from"./chunk-DXB73IDG-BBwE27jK.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons...
L2:
High Eval
Package source references dynamic code evaluation.
dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/native/index.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/native/index.js View on unpkg 5 L6: const { readFileSync } = require('fs')
L7: let nativeBinding = null
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/native/index.js View on unpkg · L5 1 import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type:e,offset:this.offset,indent:this.indent,source:this.source}
Critical Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjs View on unpkg · L1 1 Cross-file remote execution chain: dist/index.mjs spawns dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs; helper contains network access plus dynamic code execution.
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
High Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.mjs View on unpkg · L1 411 Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/index.mjs
L411: `:a>=n?`\r
L412: `:`\r`,s}t.exports.getPreferredLineEnding=E;function D(e,t){let n=t&&t.homedir&&t.homedir();return n?e.replace(/^~($|\/|\\)/,`${n}$1`):e}t.exports.expandTildePath=D;function ee(e){...
L413: `),t,f,d.startLine-1,d);d.children=r,c=c.concat(r[MG.flatTokensSymbol])}}else o===`exit`&&(g===`htmlFlow`&&(m=!1),m||(a&&(Object.freeze(d.children),Object.freeze(d)),d=u.pop()))}re...
L414: `,editColumn:r.length+1})}};function KG(e){switch(e[0]){case`~`:return`tilde`;default:return`backtick`}}var qG={names:[`MD048`,`code-fence-style`],description:`Code fence style`,ta...
L415: `)],d);let{effectiveConfig:_,rulesEnabled:v,rulesSeverity:y}=yq(e,i,o),b=[...v.keys()];return s=new Map(v),c=s,u(t,p),u
High Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjs View on unpkg · L411 • Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
import{o as e}from"./chunk-DTipWd-i.mjs";import{$s as t,Bo as n,Di as r,Ei as i,Go as a,I as o,Mo as s,Ni as c,Oi as l,Qi as u,Ts as d,Ws as f,Zi as p,Zo as m,a as h,bo as g,fs as ...
`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function si(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(...
`)}var Bi=class extends Error{constructor(e,t,n){super(zi(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.cap...
`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new
High Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjs View on unpkg dist/public/assets/he-IL-ZX43XLGP-KskW1AnW.js View file 4 contains invisible/control Unicode U+200F (right-to-left mark)
השינויים שלך לא ישמרו!`,localStorageQuotaExceeded:`הגעת למכסת השימוש בזיכרון הדפדפן. השינויים לא יישמרו.`},o={unsupportedFileType:`סוג הקובץ אינו נתמך.`,imageInsertError:`לא ניתן היה להוסיף את התמונה. אנא נסה שוב מאוחר יותר...`,fileTooBig:`
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/public/assets/he-IL-ZX43XLGP-KskW1AnW.js View on unpkg · L4 dist/native/native-config.linux-arm64-musl.node View file • path = dist/native/native-config.linux-arm64-musl.node
kind = native_binary
sizeBytes = 797800
magicHex = [redacted]
Medium Ships Native Binary
Package ships native binary artifacts.
dist/native/native-config.linux-arm64-musl.node View on unpkg dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 26
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-4I5QYGJK-CYvb6li-.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-4I5QYGJK-DDH8bQMO.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-5RXB4S5H-BzE89W2t.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-5RXB4S5H-BjTcEq8c.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-JQJVKLGR-oHxUxbQ4.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-JQJVKLGR-D2vc6Tqj.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-WRU74C26-C2Rb3ATV.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-WRU74C26-BESBlKtm.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-ZIRB5QZD-C6fEPe3t.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-ZIRB5QZD-B2znOhor.mjs View on unpkg • matchType = token_shingles
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/diagram-Q27KOJAE-BQ1RHwya.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/dist-bundle-GEZgvZIe.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/dist-bundle-EXrl9_Zm.mjs View on unpkg dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js View file 1 patternName = google_api_key
severity = high
line = 1
High Secret Pattern
Google API key in dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js
dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js View on unpkg · L1 High
Cross File Remote Execution Context
dist/index.mjs
High Trigger Reachable Credential Exfiltration dist/index.mjs
High Trigger Reachable Command Output Exfiltration dist/index.mjs
High Semantic Analysis Limited dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1
High Known Malware Source Similarity dist/native/index.js
High Known Malware Source Similarity dist/open-browser-DtPQklA3.mjs
High Known Malware Source Similarity dist/chunk-4I5QYGJK-DDH8bQMO.mjs
High Known Malware Source Similarity dist/chunk-5RXB4S5H-BjTcEq8c.mjs
High Known Malware Source Similarity dist/chunk-JQJVKLGR-D2vc6Tqj.mjs
High Known Malware Source Similarity dist/chunk-WRU74C26-BESBlKtm.mjs
High Known Malware Source Similarity dist/chunk-ZIRB5QZD-B2znOhor.mjs
High Known Malware Source Similarity dist/diagram-Q27KOJAE-BQ1RHwya.mjs
High Known Malware Source Similarity dist/dist-bundle-EXrl9_Zm.mjs
High Secret Pattern dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js
Medium Dynamic Require dist/native/index.js
Medium Unsafe Vm Context dist/lib-B82GtN9K.mjs
Medium Ships Native Binary dist/native/native-config.linux-arm64-musl.node
Medium Structural Risk Force Deep Review
Low Weak Crypto dist/src-BxqApSys.mjs
Runtime surface package.json Entrypoints exports map bin → ok, open-knowledge
Runtime node >=24
Artifact 67.7 MB · 1,665 files 1 signature(s) · provenance
Install lifecycle No install hooks · other: build, build:app, build:assets, build:cli +8
Behavioral surface ChildProcess Crypto DynamicRequire EnvironmentVars Eval Filesystem NativeBindings Network Shell WebSocket HighEntropyStrings Minified PossibleObfuscation Protestware Telemetry UrlStrings CopyleftLicense
29 flagged 39 patternName = private_key_rsa
severity = critical
line = 39
Critical Critical Secret
Package contains a critical-looking secret pattern.
dist/lib-B82GtN9K.mjs View on unpkg · L39 39 patternName = private_key_rsa
severity = critical
line = 39
1 import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor...
L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,`
...
L38: Y3FblSokcA==
L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY-----
L40: [redacted]
...
L67: \r
L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=...
L69:
...
L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}...
L72: `);let o=a;s
Medium Unsafe Vm Context
Package source executes code through a VM context API.
dist/lib-B82GtN9K.mjs View on unpkg · L1 1 import{Bi as e}from"./src-BxqApSys.mjs";import{execFile as t}from"node:child_process";const n=new Set([`http:`,`https:`]),r=/[\u0000-\u0020\u007F-\u009F"'`\\&|<>^()$;{}[\]*?!~]/;fu...
L2: //# sourceMappingURL=open-browser-DtPQklA3.mjs.map
High Child Process
Package source references child process execution.
dist/open-browser-DtPQklA3.mjs View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.30.0
matchedPath = dist/open-browser-B0EHWyOL.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/open-browser-DtPQklA3.mjs View on unpkg 26 `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;d(n===void 0?r:`${r}: ${n.slice(0,300)}`)})})}function bde(e,t=5e3,n){let r=process.platform===`win32`,i=Cde(e);return new...
L27: `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;u(n===void 0?`Node.js version probe failed with ${r}`:`Node.js version probe failed with ${r}: ${n.slice(0,300)}`);return}...
L28: `)}\n`;this.enqueue(e,async()=>{if(!this.appendBroken.has(e))try{await ine(this.eventsPath(e),n)}catch(t){this.appendBroken.add(e),this.log.error({err:t,threadId:e},`[acp-persist] ...
1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$t as l,A as u,Aa as d,Ac as f,Ai as p,An as m,Ao as h,Ar as g,As as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Wu))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Ku(n)}return null}function qu(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Wu))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Ku(r);i&&t.push(i)}return t}function hr...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src-BxqApSys.mjs View on unpkg · L1 1 import{t as e}from"./chunk-DXB73IDG-BBwE27jK.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons...
L2:
High Eval
Package source references dynamic code evaluation.
dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs View on unpkg · L1 • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/native/index.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/native/index.js View on unpkg 5 L6: const { readFileSync } = require('fs')
L7: let nativeBinding = null
Medium Dynamic Require
Package source references dynamic require/import behavior.
dist/native/index.js View on unpkg · L5 1 import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type:e,offset:this.offset,indent:this.indent,source:this.source}
Critical Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
L116: `,e)+1}return{type
Critical Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjs View on unpkg · L1 • Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.mjs:
import{o as e}from"./chunk-DTipWd-i.mjs";import{$s as t,Bo as n,Di as r,Ei as i,Go as a,I as o,Mo as s,Ni as c,Oi as l,Qi as u,Ts as d,Ws as f,Zi as p,Zo as m,a as h,bo as g,fs as ...
`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function si(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(...
`)}var Bi=class extends Error{constructor(e,t,n){super(zi(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.cap...
`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new
High Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.mjs View on unpkg dist/public/assets/he-IL-ZX43XLGP-KskW1AnW.js View file 4 contains invisible/control Unicode U+200F (right-to-left mark)
השינויים שלך לא ישמרו!`,localStorageQuotaExceeded:`הגעת למכסת השימוש בזיכרון הדפדפן. השינויים לא יישמרו.`},o={unsupportedFileType:`סוג הקובץ אינו נתמך.`,imageInsertError:`לא ניתן היה להוסיף את התמונה. אנא נסה שוב מאוחר יותר...`,fileTooBig:`
Critical Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/public/assets/he-IL-ZX43XLGP-KskW1AnW.js View on unpkg · L4 dist/native/native-config.linux-arm64-musl.node View file • path = dist/native/native-config.linux-arm64-musl.node
kind = native_binary
sizeBytes = 797800
magicHex = [redacted]
Medium Ships Native Binary
Package ships native binary artifacts.
dist/native/native-config.linux-arm64-musl.node View on unpkg dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View file • stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 26
High Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/awk2-BBAGSFUB-ClUuupKf.mjs#virtual:normalized:round1 View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-4I5QYGJK-CYvb6li-.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-4I5QYGJK-DDH8bQMO.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-5RXB4S5H-BzE89W2t.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-5RXB4S5H-BjTcEq8c.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-JQJVKLGR-oHxUxbQ4.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-JQJVKLGR-D2vc6Tqj.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-WRU74C26-C2Rb3ATV.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-WRU74C26-BESBlKtm.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/chunk-ZIRB5QZD-C6fEPe3t.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/chunk-ZIRB5QZD-B2znOhor.mjs View on unpkg • matchType = token_shingles
matchedPackage = @p4code/cli@0.4.6
matchedPath = dist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.js
matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.6
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/diagram-Q27KOJAE-BQ1RHwya.mjs View on unpkg • matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.36.0
matchedPath = dist/dist-bundle-GEZgvZIe.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/dist-bundle-EXrl9_Zm.mjs View on unpkg dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js View file 1 patternName = google_api_key
severity = high
line = 1
High Secret Pattern
Google API key in dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js
dist/public/assets/chunk-A66AFZZU-BMhkYg5H.js View on unpkg · L1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$t as l,A as u,Aa as d,Ac as f,Ai as p,An as m,Ao as h,Ar as g,As as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Wu))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Ku(n)}return null}function qu(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Wu))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Ku(r);i&&t.push(i)}return t}function hr...
L5: `,i=e.getWriter();try{await i.write(n.encode
High Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src-BxqApSys.mjs View on unpkg · L1 1 import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$ as r,$a as i,$i as a,$n as o,$o as s,$r as c,$t as l,A as u,Aa as d,Ac as f,Ai as p,An as m,Ao as h,Ar as g,As as _,...
L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str...
L3: `)){let e=t.trim();if(!e.startsWith(Wu))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Ku(n)}return null}function qu(e){if(!e)ret...
L4: `)){let e=n.trim();if(!e.startsWith(Wu))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Ku(r);i&&t.push(i)}return t}function hr...
L5: `,i=e.getWriter();try{await i.write(n.encode
Low Weak Crypto
Package source references weak cryptographic algorithms.
dist/src-BxqApSys.mjs View on unpkg · L1 1 Cross-file remote execution chain: dist/index.mjs spawns dist/chunk-5QMZ5MUS-C5NTf5Rj.mjs; helper contains network access plus dynamic code execution.
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1
High Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.mjs View on unpkg · L1 1 Trigger-reachable credential exfiltration chain: manifest.exports -> dist/index.mjs
L1: import{a as e,i as t,n,r,t as i}from"./chunk-DHbaKqs-.mjs";import"./libesm-qUf-Au5c.mjs";import{t as a}from"./yazl-BlMyAOcT.mjs";import"./chunk-B74TABJS-BJwhrR8a.mjs";import"./chun...
L2: `)){let e=r.replace(Ze,``),i=Je.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(Ye.test(e)){n=void 0;continue}n&&Xe.test(e)&&(n.active=!0)}return t}var $e=i((e=>{let...
...
L82: `:`
L83: `)+(a.substring(1)||` `),n=!0,r=!1;break;case`%`:e[i+1]?.[0]!==`#`&&(i+=1),n=!1;break;default:n||(r=!0),n=!1}}return{comment:t,afterEmptyLine:r}}e.Composer=class{constructor(e={}){...
L84: `}];switch(c[0]){case`|`:case`>`:{let e=c.indexOf(`
...
L115: `)+1;for(;e!==0;)this.onNewLine(this.offset+e),e=this.source.indexOf(`
High Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/index.mjs View on unpkg · L1 411 Trigger-reachable command-output exfiltration chain: manifest.exports -> dist/index.mjs
L411: `:a>=n?`\r
L412: `:`\r`,s}t.exports.getPreferredLineEnding=E;function D(e,t){let n=t&&t.homedir&&t.homedir();return n?e.replace(/^~($|\/|\\)/,`${n}$1`):e}t.exports.expandTildePath=D;function ee(e){...
L413: `),t,f,d.startLine-1,d);d.children=r,c=c.concat(r[MG.flatTokensSymbol])}}else o===`exit`&&(g===`htmlFlow`&&(m=!1),m||(a&&(Object.freeze(d.children),Object.freeze(d)),d=u.pop()))}re...
L414: `,editColumn:r.length+1})}};function KG(e){switch(e[0]){case`~`:return`tilde`;default:return`backtick`}}var qG={names:[`MD048`,`code-fence-style`],description:`Code fence style`,ta...
L415: `)],d);let{effectiveConfig:_,rulesEnabled:v,rulesSeverity:y}=yq(e,i,o),b=[...v.keys()];return s=new Map(v),c=s,u(t,p),u
High Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.mjs View on unpkg · L411