registry / @inkeep/open-knowledge / 0.86.19

@inkeep/open-knowledge@0.86.19

⚠ Under review

Local-first, agent-friendly Markdown knowledge base with a cross-platform CLI and web editor

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The inspected text does not establish a concrete attack, and the manifest does not show an install lifecycle hook. The native configuration binaries could not be assessed as readable source, so a clean verdict is not supported.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Package functionality that loads the native configuration module.

Impact

Unknown until the native module behavior is resolved.

Mechanism

The runtime has a loader for the native configuration module; the native binaries themselves could not be assessed as readable source.

AI rationale

Evidence

package.jsondist/index.mjsdist/native/native-config.linux-arm64-musl.nodedist/native/native-config.linux-x64-gnu.nodedist/native/native-config.linux-x64-musl.nodedist/native/native-config.win32-arm64-msvc.nodedist/native/native-config.darwin-x64.nodedist/native/native-config.darwin-arm64.nodedist/native/native-config.linux-arm64-gnu.node

Decision evidence

public snapshot

AI called this Manual Review at 61.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest exposes command-line entrypoints and lists build scripts; the inspected scripts do not show an install lifecycle hook.
The runtime loader can load a native configuration module, whose platform-specific binaries could not be assessed as readable source.

Evidence against

The inspected agent-integration excerpts show configuration path mappings, but do not establish an attack or a consumer-project mutation.
The inspected source did not establish credential transfer or another concrete attack.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Source & flagged code

20 flagged

dist/src-C9gZ883x.mjsView file

Lines 1-16javascript

1import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$c as t,$u as n,Bf as r,Bl as i,Ca as a,Ef as o,Ff as s,G as c,If as l,Mf as u,Sa as d,Tf as ee,U as f,Vl as p,W as m,Yc as h,bf as g,el as te,jf as _,kf as v,l as y,u as ne}from"./md-manager-BGnqyqi1-BzZ_8EQ9.mjs";import{Ao as b,At as x,Ea as S,Qn as C,Ri as w,Si as T,Tr as E,Ts as D,as as O,bi as k,cr as re,fr as A,is as j,m as ie,mi as ae,ns as M,os as N,si as P,xi as oe,zi as se}from"./dist-CbA9Te53.mjs";import{t as ce}from"./yazl-BBz29IQN.mjs";import{ct as le,st as ue,wt as F}from"./init-D1_2kwSe.mjs";import{l as de,w as fe}from". ...

2`)[0]??``).replace(/\S*\/journal\/\S*/g,`<journal path>`).replace(/\b[0-9a-f]{32}\b/gi,`<id>`);return`exit ${e.status}${t===``?``:`: ${t}`}`}function J(e,t,n){return{schemaVersion:1,platform:e,source:t,outcome:`none-in-window`,readFrom:n,windowDays:7,foreignIgnored:0,unparseable:0,droppedOverCap:0,events:[]}}function Tt(e,t){return{...e,outcome:`

3`);if(n===-1)return null;let r,i;try{r=Dt(JSON.parse(t.slice(0,n))),i=Dt(JSON.parse(t.slice(n+1

4`)){if(!e.includes(`"event":"desktop.boot"`))continue;let t=/"pid":(\d+)/.exec(e)?.[1];t!==void 0&&n.add(Number(t))}}catch{i=!0}}return{pids:n,unreadable:i}}function Rt(e,t){if(e===`systemd-oomd`){let e=/^Killed (\S+)/.exec(t);if(e===null)return null;let n=e[1]?.split(`/`).pop()??``;return{origin:`systemd-oomd`,action:`oomd-kill`,pid:null,processName:null,unit:bt.test(n)?n:null,trigger:/swap used/.test(t)?`swap`:/memory pressure/.test(t)?`memory-pressure`:null}}if(e!==`kernel`)return null;let n=/Killed process (\d+)

5`)){if(i.trim()===``||i.startsWith(`-- `))continue;let e=Pt.exec(i);if(e===null){r+=1;continue}let[,a=``,o=``,s=``]=e;if(!bt.test(s)){n+=

6`)){if(i.trim()===``||i.startsWith(`-- `))continue;let e=Pt.exec(i);if(e===null){r+=1;continue}let[,a=``

7`);_.addBuffer(Buffer.from(A,`utf8`),`README.md`),_.end();let j=we(r);return _.outputStream.pipe(j),await new Promise((e,t)=>{j.on(`close`,e),j.on(`error`,t)}),i?.info({bundlePath:r,fileCount:g.length,redactionCount:C},`bundle written`),{zipPath:r,summary:{projectSlug:s,files:g,redactions:h,redactedLineCount:C,generatedAt:S.generatedAt}}}var wn=n(),Tn=e(ce(),1),Z=e(pe(),1);function En(e){let t=N(`user`,e,e);return j({absPath:t,sideline:!1,warn:()=>{}}).value.appearance?.language??`system`}function Dn({home:e=q(),env:t=process.env}={}){let n=En(e),{override:r,preferenceList:a}=O(t),{locale:o,so ...

8`),i=n.split(`

9`),a=[];for(let e=0;e<i.length;e++){let n=i[e]??``;if(e!==i.length-1||n!==``){if(n.length===0){a.push(``

10`)}\n`:a.join(`

11`);K(e,o)}function Nn(e,t){let n=U(e,`utf-8`);if(n.trim().length!==0)try{let r=jn(JSON.

12`)?`

13`:``;K(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=kn(n,t.contentDirSpellings);r!==n&&K(e,r)}}function Pn

14`)}\n`:null}catch{return null}}function sr(e){let t=R(e,`.git`,`ok`);if(!V(t))return null;let n=ve(`git`

15`:`not-running (${x})\n`;K(R(g,`state`,`server-status.txt`),k);let re=e.diagnosticReports===void 0?`not-collected (no collection attempted)`:st(e.diagnosticReports,_);if(K(R(g,`state`,`diagnostic-reports-status.txt`),`${re}\n`),K(R(g,vt),rn(e.osTerminationEvidence)),e.processDir&&V(e.processDir)){let t=R(g,`process`);H(t,{recursive:!0}),Ce(e.processDir,t,{recursive:!0})}let A=e.redact===!0;A&&Bn({stagingDir:g,contentDir:n}),e.note&&K(R(g,`

16`)}async function pi(e={}){let t=e.discover??C,n=e.inspect??(e=>$(e,`server`)),r=e.log??(e=>console.log

Long lines were clipped for display.

dist/dist-CbA9Te53.mjsView file

87var t=null;try{t=new WebAssembly.Instance(new WebAssembly.Module(new Uint8Array([0,97,115,109,1,0,0,0,1,13,2,96,0,1,127,96,4,127,127,127,127,1,127,3,7,6,0,1,1,1,1,1,6,6,1,127,1,65,... L88: changing to the minimum size of: 2`),this._maxSize=2)}record(e){this.updateByIncrement(e,1)}setStartTime(e){this.startTime=e}toPointValue(){return{hasMinMax:this._recordMinMax,min:... L89: \t- OR - create a new view with the name ${e.name} and description '${e.description}' and InstrumentSelector ${r}

High

Shell

Package source references shell execution.

dist/dist-CbA9Te53.mjsView on unpkg · L87

86*/ L87: var t=null;try{t=new WebAssembly.Instance(new WebAssembly.Module(new Uint8Array([0,97,115,109,1,0,0,0,1,13,2,96,0,1,127,96,4,127,127,127,127,1,127,3,7,6,0,1,1,1,1,1,6,6,1,127,1,65,... L88: changing to the minimum size of: 2`),this._maxSize=2)}record(e){this.updateByIncrement(e,1)}setStartTime(e){this.startTime=e}toPointValue(){return{hasMinMax:this._recordMinMax,min:... L89: \t- OR - create a new view with the name ${e.name} and description '${e.description}' and InstrumentSelector ${r} ... L97: causes have become circular...`;let o=r(e);return o?(t.add(e),a+` L98: caused by: `+i(o,t)):a},a=e=>i(e,new Set),o=(e,t,i)=>{if(!n(e))return``;let a=i?``:e.message||``;if(t.has(e))return a+`: ...`;let s=r(e);if(s){t.add(e);let n=typeof e.cause==`funct... L99: `:`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/dist-CbA9Te53.mjsView on unpkg · L86

1Cross-file remote execution chain: dist/dist-CbA9Te53.mjs spawns dist/chunk-5QMZ5MUS-BuB3i_B5.mjs; helper contains network access plus dynamic code execution. L1: import{a as e,i as t,n,o as r,r as i,t as a}from"./rolldown-runtime-tZXQYakl.mjs";import{$ as o,$a as s,$c as c,$d as l,$i as u,$n as d,$o as f,$r as p,$s as m,$t as h,$u as g,A as... L2: `,t),r=n===-1?e.length:n;if(r>t&&e[r-1]===`\r`&&--r,r-t>1024)return 0;let i=e.slice(t,r);return i.length===0||!hoe.test(i)&&!goe.test(i)?0:i.length}const voe=/&#(?:x[0-9A-Fa-f]+|X[... ... L66: </div>`}];function koe(e){return["```html preview",e.html,"```"].join(` L67: `)}const Aoe=[{name:`--chart-1`,light:`oklch(0.62 0.19 259)`,dark:`oklch(0.72 0.14 259)`},{name:`--chart-2`,light:`oklch(0.58 0.14 145)`,dark:`oklch(0.73 0.13 145)`},{name:`--char

dist/chunk-5QMZ5MUS-B37CnsNb.mjs#virtual:string-array:round1View file

1import{t as e}from"./chunk-DXB73IDG-MLBj3lvC.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons... L2: `);n.register(`data:text/javascript,${encodeURIComponent(e)}`),i.importHooksRegistered=!0}}catch(e){console.debug(`[DefenseInDepthBox] Could not register import() hooks:`,e instanc...

High

Eval

Package source references dynamic code evaluation.

dist/chunk-5QMZ5MUS-B37CnsNb.mjs#virtual:string-array:round1View on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-5QMZ5MUS-B37CnsNb.mjs#virtual:string-array:round1View on unpkg · L1

dist/index.mjsView file

1import{a as e,i as t,n,r,t as i}from"./rolldown-runtime-DPpTSio4.mjs";import"./libesm-CSMdpGMF.mjs";import"./chunk-B74TABJS-DAm9lxFL.mjs";import"./chunk-R6VWJ2ZL-Cu1kOJ3f.mjs";impo... L2: `)){let e=r.replace(tt,``),i=Qe.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if($e.test(e)){n=void 0;continue}n&&et.test(e)&&(n.active=!0)}return t}const rt={stable:... L3: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ... L4: `))}};const rte={major:4,minor:4,patch:3},In=F(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=rte;let r=[...e._zod.def.checks??[]];e._zod.tra... L5: if (${n}.issues.length) { ... L182: `],o,s=0

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.mjsView on unpkg · L1

1Trigger-reachable chain: manifest.exports -> dist/index.mjs L1: import{a as e,i as t,n,r,t as i}from"./rolldown-runtime-DPpTSio4.mjs";import"./libesm-CSMdpGMF.mjs";import"./chunk-B74TABJS-DAm9lxFL.mjs";import"./chunk-R6VWJ2ZL-Cu1kOJ3f.mjs";impo... L2: `)){let e=r.replace(tt,``),i=Qe.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if($e.test(e)){n=void 0;continue}n&&et.test(e)&&(n.active=!0)}return t}const rt={stable:... L3: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ... L4: `))}};const rte={major:4,minor:4,patch:3},In=F(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=rte;let r=[...e._zod.def.checks??[]];e.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.mjsView on unpkg · L1

dist/cli.mjsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.mjs: import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$s as n,$u as r,Af as i,Bf as a,Ed as o,Ef as s,Eo as c,F as l,Fo as u,Fr as d,Gc as f,Hc as p,Hd as m,Ho as h,Ic... `)}const _a={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)},va=T({title:E().optional(),error:E().optional(),message:E().optional()});function ya(){let... `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Ea(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(... `;return`${I(`Error:`)} this project's git remote is ${n}, which is not a Git

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.mjsView on unpkg

dist/public/assets/ku-TR-NAH2Q5B7-B_Ztkp8s.jsView file

Lines 1-6javascript

1import"./chunk-SRAX5OIU-krA6W3W1.js";var e={paste:`دانانەوە`,pasteAsPlaintext:`دایبنێ وەک دەقی سادە`,pasteCharts:`دانانەوەی خشتەکان`,chartType_bar:``,chartType_line:``,chartType_radar:``,chartType_plaintext:``,selectAll:`دیاریکردنی هەموو`,multiSelect:`زیادکردنی بۆ دیاریکراوەکان`,moveCanvas:`تابلۆ بجوڵێنە`

dist/native/native-config.linux-arm64-musl.nodeView file

•path = dist/native/native-config.linux-arm64-musl.node kind = native_binary sizeBytes = 801680 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/native-config.linux-arm64-musl.nodeView on unpkg

dist/chunk-5QMZ5MUS-B37CnsNb.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 31

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-5QMZ5MUS-B37CnsNb.mjs#virtual:normalized:round1View on unpkg

dist/native/index.jsView file

•matchType = token_shingles matchedPackage = @inkeep/open-knowledge@0.31.0 matchedPath = dist/native/index.js matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/native/index.jsView on unpkg

dist/chunk-WRU74C26-CKoV7Oqa.mjsView file

•matchType = normalized_sha256 matchedPackage = @p4code/cli@0.4.12 matchedPath = dist/client/assets/chunk-WRU74C26-C2Rb3ATV.js matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-WRU74C26-CKoV7Oqa.mjsView on unpkg

dist/diagram-Q27KOJAE-7KO1ITMW.mjsView file

•matchType = token_shingles matchedPackage = @p4code/cli@0.4.12 matchedPath = dist/client/assets/diagram-Q27KOJAE-Dp_H6G_V.js matchedIdentity = npm:QHA0Y29kZS9jbGk:0.4.12 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/diagram-Q27KOJAE-7KO1ITMW.mjsView on unpkg

Source & flagged code

20 flagged · loading source

dist/src-C9gZ883x.mjsView file

High

Child Process

Package source references child process execution.

dist/src-C9gZ883x.mjsView on unpkg · L1

1import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$c as t,$u as n,Bf as r,Bl as i,Ca as a,Ef as o,Ff as s,G as c,If as l,Mf as u,Sa as d,Tf as ee,U as f,Vl as p,W as m,Yc ... L2: `)[0]??``).replace(/\S*\/journal\/\S*/g,`<journal path>`).replace(/\b[0-9a-f]{32}\b/gi,`<id>`);return`exit ${e.status}${t===``?``:`: ${t}`}`}function J(e,t,n){return{schemaVersion:... ... L12: `)?` L13: `:``;K(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=kn(n,t.contentDirSpellings);r!==n&&K(e,r)}}function Pn(e,t){let n=U(e,`utf-8`),r=kn(n,t.contentDirSpellings);r!==n&&K(e,r)}f... L14: `)}\n`:null}catch{return null}}function sr(e){let t=R(e,`.git`,`ok`);if(!V(t))return null;let n=ve(`git`,[`-C`,t,`log`,`--oneline`,`-50`],b({encoding:`utf-8`,timeout:2e3}));return ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src-C9gZ883x.mjsView on unpkg · L1

Findings

4 Critical14 High5 Medium6 Low

CriticalCredential Exfiltrationdist/index.mjs

CriticalTrojan Source Unicodedist/public/assets/ku-TR-NAH2Q5B7-B_Ztkp8s.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs

CriticalPrevious Version Dangerous Deltadist/index.mjs

HighChild Processdist/src-C9gZ883x.mjs

HighShelldist/dist-CbA9Te53.mjs

HighEvaldist/chunk-5QMZ5MUS-B37CnsNb.mjs#virtual:string-array:round1

HighSame File Env Network Executiondist/src-C9gZ883x.mjs

HighCredential Redirect Persistencedist/cli.mjs

HighCommand Output Exfiltrationdist/dist-CbA9Te53.mjs

HighCross File Remote Execution Contextdist/dist-CbA9Te53.mjs

Affected versions and remediation

This report applies to @inkeep/open-knowledge@0.86.19.

See all versions of @inkeep/open-knowledge for other recorded verdicts.

Review the evidence and your use of @inkeep/open-knowledge@0.86.19 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-16 14:03:07.059Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.