registry / @knockdata/objectexplorer / 0.5.10

@knockdata/objectexplorer@0.5.10

The VSCode for Cloud Storage — Explore, Analyze, Search your cloud storage locally with single click

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No install-time malware chain was found, but the unrelated hard-coded email-service capability is a concrete and poorly scoped risk. The normal CLI does not enable that developer route, so blocking as malware is not supported by the inspected source.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

A caller starts WebServer in development mode with a data directory and posts a download subscription request.

Impact

The route can transmit caller-supplied email addresses and create local subscription records for an unrelated service.

Mechanism

Hard-coded third-party email service use in a developer API route.

AI rationale

Evidence

server/WebServer.mjssubscriptions.jsonnotifiedSubscriptions.json

Network endpoints2

api.resend.comawheelmaker.com

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The server bundle includes an unrelated A Wheel Maker email workflow and a hard-coded Resend credential.
A developer-mode subscription endpoint sends email to a caller-supplied address when its type is "download".
This workflow is enabled only when WebServer is explicitly started in development mode with a data directory.

Evidence against

package.json has no install or lifecycle scripts and no self-dependency.
The CLI is explicitly user-invoked and starts a local server before opening a browser.
The OpenAI translation call is behind an API route and token check; it is not an install-time action.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings

Source & flagged code

23 flagged

app/assets/WorkerParser.jsView file

51`),t=t.replace(Dm,`�`),e.src=t}function km(e){let t;e.inlineMode?(t=new e.Token(`inline`,``,0),t.content=e.src,t.map=[0,1],t.children=[],e.tokens.push(t)):e.md.block.parse(e.src,e.... L52: `,o.map=[t,e.line],!0}function nh(e,t,n,i){let a=e.bMarks[t]+e.tShift[t],o=e.eMarks[t];if(e.sCount[t]-e.blkIndent>=4||a+3>o)return!1;let s=e.src.charCodeAt(a);if(s!==126&&s!==96)re... L53: https://github.com/highlightjs/highlight.js/issues/2277`),a=e,i=t),n===void 0&&(n=!0);let o={code:i,language:a};ue(`before:highlight`,o);let s=o.result?o.result:b(o.language,o.code...

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L51

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.5.9 matchedPath = app/assets/WorkerParser.js matchedIdentity = npm:[redacted]:0.5.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/WorkerParser.jsView on unpkg

server/WebServer.mjsView file

1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L2: var B3e=Object.create;var k6=Object.defineProperty;var U3e=Object.getOwnPropertyDescriptor;var $3e=Object.getOwnPropertyNames;var z3e=Object.getPrototypeOf,G3e=Object.prototype.has... L3: `)}function tn(...e){let t=L6(2,"info");process.stderr.write(` L4: ${t.link} ${M6(e)}`),F6("INFO ",e,t.short)}function pi(...e){let t=L6(2,"warn");process.stderr.write(` ... L8: `+xH(t,a.offset,a.len))}return n.value}function xH(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,a,o)=>a?"\u2409":o?"\u240D":"\u240A")} L9: ${"".padEnd(t)}${"^".repeat(r)}`}function NH(e){return Ywe(VR,e)}function _l(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return V6(e.na... L10: `.repea

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

server/WebServer.mjsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> server/WebServer.mjs L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L2: var B3e=Object.create;var k6=Object.defineProperty;var U3e=Object.getOwnPropertyDescriptor;var $3e=Object.getOwnPropertyNames;var z3e=Object.getPrototypeOf,G3e=Object.prototype.has... L3: `)}function tn(...e){let t=L6(2,"info");process.stderr.write(` L4: ${t.link} ${M6(e)}`),F6("INFO ",e,t.short)}function pi(...e){let t=L6(2,"warn");process.stderr.write(` ... L8: `+xH(t,a.offset,a.len))}return n.value}function xH(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,a,o)=>a?"\u2409":o?"\u240D":"\u240A")} L9: ${"".padEnd(t)}${"^".repeat(r)}`}function NH(e){return Ywe(VR,e)}function _l(e){if(!e.type)throw new Error("This is not an AST node."

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

app/assets/esm-worker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.5.9 matchedPath = app/assets/esm-worker.js matchedIdentity = npm:[redacted]:0.5.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/esm-worker.jsView on unpkg

1const e=`https://unpkg.com/@ffmpeg/core@0.12.9/dist/umd/ffmpeg-core.js`;var t;(function(e){e.LOAD=`LOAD`,e.EXEC=`EXEC`,e.FFPROBE=`FFPROBE`,e.WRITE_FILE=`WRITE_FILE`,e.READ_FILE=`RE...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/assets/esm-worker.jsView on unpkg · L1

app/assets/index.jsView file

815contains invisible/control Unicode U+200B (zero width space) ${g}`)).style(`margin-left`,u?`${+u}px`:null).style(`width`,p===void 0?null:`${+p}px`).style(`font-variant`,E4(o,`normal`)).call(k4,f).node()}var e6=new Map([[`symbol`,Uwe],[`color`,n6],[`opacity`,Gwe]]);function Wwe(e,t,n={}){return(r,a)=>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

app/assets/index.jsView on unpkg · L815

app/assets/lightgbmc.wasmView file

•path = app/assets/lightgbmc.wasm kind = wasm_module sizeBytes = 21264 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

app/assets/lightgbmc.wasmView on unpkg

demo/nl_train_stations.orcView file

•path = demo/nl_train_stations.orc kind = high_entropy_blob sizeBytes = 27653 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

demo/nl_train_stations.orcView on unpkg

cli.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.5.9 matchedPath = cli.js matchedIdentity = npm:[redacted]:0.5.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli.jsView on unpkg

app/assets/browser.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.5.9 matchedPath = app/assets/browser.js matchedIdentity = npm:[redacted]:0.5.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/browser.jsView on unpkg

app/assets/wasm-worker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.5.9 matchedPath = app/assets/wasm-worker.js matchedIdentity = npm:[redacted]:0.5.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/wasm-worker.jsView on unpkg

app/assets/AudioConverterWorker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.5.9 matchedPath = app/assets/AudioConverterWorker.js matchedIdentity = npm:[redacted]:0.5.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/AudioConverterWorker.jsView on unpkg

Source & flagged code

23 flagged · loading source

app/assets/WorkerParser.jsView file

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L51

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

Findings

4 Critical17 High6 Medium3 Low

CriticalHardcoded Runtime Data Exfiltrationserver/WebServer.mjs

CriticalTrojan Source Unicodeapp/assets/index.js

CriticalTrigger Reachable Dangerous Capabilityserver/WebServer.mjs

CriticalPrevious Version Dangerous Deltaserver/WebServer.mjs

HighChild Processapp/assets/WorkerParser.js

HighShellserver/WebServer.mjs

HighSame File Env Network Executionserver/WebServer.mjs

HighCredential Redirect Persistenceserver/WebServer.mjs

HighCommand Output Exfiltrationserver/WebServer.mjs

HighCloud Metadata Accessserver/WebServer.mjs

HighCross File Remote Execution Contextserver/WebServer.mjs

Affected versions and remediation

This report applies to @knockdata/objectexplorer@0.5.10.

See all versions of @knockdata/objectexplorer for other recorded verdicts.

Review the evidence and your use of @knockdata/objectexplorer@0.5.10 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-05 09:26:28.933Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.