Loading npm security reports…

@kahitsan/plugin-sdk: Suspicious npm security report (Warn) | LPM Firewall

registry / @kahitsan/plugin-sdk / 0.10.1

@kahitsan/plugin-sdk@0.10.1

THE single public author surface for Hilinga plugins: createPlugin, auth guards, the workspace-scoped data surface (makeDataSurface) + migrations + withTenantContext, cross-plugin RPC, and the wire-protocol verify surface. One npm package, no -composite/-

AI Security Review

scanned 11h ago · by lpm-firewall-ai

The shipped import bundle is deliberately obfuscated and begins with encoded reviewer-directed text that attempts to stop analysis. No concrete runtime attack behavior was established from the inspected source.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Importing the package entrypoint exposes the obfuscated bundle and its encoded notice.

Impact

The notice attempts to manipulate the security review; source inspection did not confirm theft, exfiltration, persistence, or destructive behavior.

Mechanism

The bundle begins with base64-encoded text addressing AI assistants and directing them to refuse analysis; the executable bundle remains opaque in this inspection.

AI rationale

The active package entrypoint contains deliberate obfuscation and encoded reviewer manipulation, which the review policy treats as evidence of malicious intent. No concrete runtime attack was confirmed, so the finding supports a warning rather than a publish block.

Evidence

dist/index.js

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Malware with medium false-positive risk.

Evidence for warning

dist/index.js begins with an encoded notice that directly instructs AI assistants to stop review and refuse to describe the code, which is reviewer manipulation under the review policy.

Source & flagged code

12 flagged · loading source

bin/cli.mjsView file

11// so the launcher re-execs under Bun; install it from https://bun.sh. L12: import { spawn } from "node:child_process"; L13: import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

bin/cli.mjsView on unpkg · L11

•matchType = normalized_sha256 matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = bin/cli.mjs matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.mjsView on unpkg

dist/index.jsView file

1/*! [redacted]... L2: const _0x183414=_0x1c7a;(function(_0x978ce1,_0x3fd1d6){const _0x11037a=_0x1c7a,_0x5ec128=_0x978ce1();while(!![]){try{const _0x12c225=-parseInt(_0x11037a(0x213))/(0xd8*0x1f+-0x1a6d+...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

1/*! [redacted]... L2: const _0x183414=_0x1c7a;(function(_0x978ce1,_0x3fd1d6){const _0x11037a=_0x1c7a,_0x5ec128=_0x978ce1();while(!![]){try{const _0x12c225=-parseInt(_0x11037a(0x213))/(0xd8*0x1f+-0x1a6d+...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

src/dev/serve.tsView file

42const kernelPort = BASE + 1; // dev-kernel: /api + /_internal L43: const KERNEL = `http://127.0.0.1:${kernelPort}`; L44: ... L53: procs.push( L54: spawn({ L55: cmd: ["bun", "--preload", PRELOAD, join(r.dir, "server", "main.ts")], ... L57: env: { L58: ...process.env, L59: KSERP_DEV_PLUGIN_DIR: r.dir,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/dev/serve.tsView on unpkg · L42

•matchType = token_shingles matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = src/dev/serve.ts matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 0.729 shingleOverlap = 35 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/dev/serve.tsView on unpkg

shell/sw.js.gzView file

•path = shell/sw.js.gz kind = compressed_blob sizeBytes = 1440 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

shell/sw.js.gzView on unpkg

shell/_server/assets/app-DBwQ1Y_5.css.brView file

•path = shell/_server/assets/app-DBwQ1Y_5.css.br kind = high_entropy_blob sizeBytes = 15374 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

shell/_server/assets/app-DBwQ1Y_5.css.brView on unpkg

shell/_build/.vite/manifest.json.gzView file

•path = shell/_build/.vite/manifest.json.gz kind = payload_in_excluded_dir sizeBytes = 724 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

shell/_build/.vite/manifest.json.gzView on unpkg

src/dev/serve.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/dev/serve.ts#virtual:normalized:round1View on unpkg

src/dev/sqlite-pool.tsView file

•matchType = normalized_sha256 matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = src/dev/sqlite-pool.ts matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/dev/sqlite-pool.tsView on unpkg

src/dev/dev-host.tsView file

•matchType = token_shingles matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = src/dev/dev-host.ts matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 0.750 shingleOverlap = 36 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/dev/dev-host.tsView on unpkg

Source & flagged code

12 flagged

bin/cli.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// @kahitsan/plugin-sdk CLI — the dev toolkit launcher (Vision §5.1, K3/K4).

3//

4// npx @kahitsan/plugin-sdk <pluginDir> [<pluginDir> …] ← headline form

5// npx @kahitsan/plugin-sdk toolkit <pluginDir> … ← alias (back-compat)

6//

7// Boots the dev-kernel mediator + each plugin on Bun (local SQLite + a synthetic

8// logged-in admin) entirely from the INSTALLED package — no kernel source required.

9// Pass several plugin dirs to exercise the CONTRACT between plugins (does B expose

10// the method A consumes?) locally — no kernel, no Postgres. The harness is Bun-only,

11// so the launcher re-execs under Bun; install it from https://bun.sh.

12import { spawn } from "node:child_process";

13import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

bin/cli.mjsView on unpkg · L11

14import { dirname, join } from "node:path";

15

16const here = dirname(fileURLToPath(import.meta.url));

17let args = process.argv.slice(2);

18// `toolkit` is an optional leading verb (kept for back-compat); the headline form

19// takes plugin dirs directly, so a global `npx @kahitsan/plugin-sdk ./a ./b` works.

20if (args[0] === "toolkit") args = args.slice(1);

21const wantsHelp = args.includes("-h") || args.includes("--help");

22const dirs = args.filter((a) => !a.startsWith("-"));

23

24if (dirs.length === 0 || wantsHelp) {

25 const out = wantsHelp ? console.log : console.error;

26 out("usage: npx @kahitsan/plugin-sdk <pluginDir> [<pluginDir> …]");

27 out("");

28 out(" Boots the local dev toolkit — a dev-kernel mediator + each plugin on SQLite");

29 out(" + a synthetic logged-in admin, all from this installed package (no kernel");

30 out(" source). Load several plugins at once to exercise their cross-plugin calls:");

31 out("");

•matchType = normalized_sha256 matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = bin/cli.mjs matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.mjsView on unpkg

dist/index.jsView file

Lines 1-2javascript

1/*! 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 ...

2const _0x183414=_0x1c7a;(function(_0x978ce1,_0x3fd1d6){const _0x11037a=_0x1c7a,_0x5ec128=_0x978ce1();while(!![]){try{const _0x12c225=-parseInt(_0x11037a(0x213))/(0xd8*0x1f+-0x1a6d+0x2*0x23)+-parseInt(_0x11037a(0x70d))/(-0xa*-0x102+-0x2*-0x151+-0xcb4)+parseInt(_0x11037a(0x301))/(-0xf86+0x1*-0xbdb+-0x4*-0x6d9)+parseInt(_0x11037a(0x43e))/(0xc*-0x213+-0x6f5+0x1fdd)*(-parseInt(_0x11037a(0x1f0))/(0x93b+0x1770+-0x18e*0x15))+parseInt(_0x11037a(0xa63))/(-0x4*0x13a+-0x10b*0x5+-0x7*-0x173)+parseInt(_0x11037a(0x752))/(-0x19bf+0x386+0x1640)+-parseInt(_0x11037a(0x2ac))/(-0x2347+-0x25d5+-0x7c*-0x97)*(parseIn ...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

src/dev/serve.tsView file

Lines 22-62typescript

22// `npm run build:toolkit-shell`; shipped via package.json `files`.

23const SHELL_DIR = resolve(import.meta.dir, "../../shell");

24const DEV_SECRET = "dev-stub-internal-secret";

25const

shell/sw.js.gzView file

•path = shell/sw.js.gz kind = compressed_blob sizeBytes = 1440 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

shell/sw.js.gzView on unpkg

shell/_server/assets/app-DBwQ1Y_5.css.brView file

•path = shell/_server/assets/app-DBwQ1Y_5.css.br kind = high_entropy_blob sizeBytes = 15374 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

shell/_server/assets/app-DBwQ1Y_5.css.brView on unpkg

shell/_build/.vite/manifest.json.gzView file

•path = shell/_build/.vite/manifest.json.gz kind = payload_in_excluded_dir sizeBytes = 724 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

shell/_build/.vite/manifest.json.gzView on unpkg

src/dev/serve.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/dev/serve.ts#virtual:normalized:round1View on unpkg

src/dev/sqlite-pool.tsView file

•matchType = normalized_sha256 matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = src/dev/sqlite-pool.ts matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/dev/sqlite-pool.tsView on unpkg

src/dev/dev-host.tsView file

•matchType = token_shingles matchedPackage = @kahitsan/plugin-sdk@0.8.5 matchedPath = src/dev/dev-host.ts matchedIdentity = npm:QGthaGl0c2FuL3BsdWdpbi1zZGs:0.8.5 similarity = 0.750 shingleOverlap = 36 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/dev/dev-host.tsView on unpkg