registry / Remote code execution / @knockdata/objectexplorer / 0.6.4

@knockdata/objectexplorer@0.6.4

The VSCode for Cloud Storage — Explore, Analyze, Search your cloud storage locally with single click

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No lifecycle hook or confirmed malicious behavior was found, but the package bundles remote-code retrieval and command-backed dependency installation in a local server with access to user-selected files and cloud configuration. This warrants a warning rather than a publication block.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Running the CLI and using audio conversion or the application's Python-package installation feature.

Impact

A compromised remote component or unsafe local-server use could execute untrusted code in the user's application context.

Mechanism

Remote component retrieval and shell-backed package installation.

AI rationale

Evidence

package.jsoncli.jsserver/WebServer.mjsapp/assets/AudioConverterWorker.jsapp/assets/esm-worker.js

Network endpoints1

unpkg.com

Decision evidence

public snapshot

AI called this Suspicious at 74.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

An audio worker has a hard-coded remote FFmpeg JavaScript URL.
The audio worker fetches caller-provided core and WebAssembly URLs before loading FFmpeg.
The server builds and runs a pip-install command from a supplied package argument.
The server locates the Google application-credentials path from the environment or user profile.
The CLI starts the bundled server against the selected working folder and creates a user data directory.
The manifest exposes both the CLI and bundled WebServer entry points.

Evidence against

The manifest contains no preinstall, install, or postinstall lifecycle hook.
The observed command and network facilities are activated through the local application, not during npm installation.
No source inspected showed secret transmission, destructive project mutation, or an attacker-controlled endpoint beyond the remote FFmpeg asset.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem

Source & flagged code

25 flagged

app/assets/WorkerParser.jsView file

51`),t=t.replace(Dm,`�`),e.src=t}function km(e){let t;e.inlineMode?(t=new e.Token(`inline`,``,0),t.content=e.src,t.map=[0,1],t.children=[],e.tokens.push(t)):e.md.block.parse(e.src,e.... L52: `,o.map=[t,e.line],!0}function nh(e,t,n,i){let a=e.bMarks[t]+e.tShift[t],o=e.eMarks[t];if(e.sCount[t]-e.blkIndent>=4||a+3>o)return!1;let s=e.src.charCodeAt(a);if(s!==126&&s!==96)re... L53: https://github.com/highlightjs/highlight.js/issues/2277`),a=e,i=t),n===void 0&&(n=!0);let o={code:i,language:a};ue(`before:highlight`,o);let s=o.result?o.result:b(o.language,o.code...

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L51

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/WorkerParser.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/WorkerParser.jsView on unpkg

server/WebServer.mjsView file

195`));if(!A)return null;be=Me(A,!0)}return be.shift()},"FS_stdin_getChar"),Re={ttys:[],init(){},shutdown(){},register(A,L){Re.ttys[A]={input:[],output:[],ops:L},j.registerDevice(A,Re... L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function vVe(e){let t=e.match(/^local\[(\*|\d+)\]$/);return t?t[1]==="*"... L197: `).find(n=>n.trim().startsWith("version"));return r?r.split("=")[1].trim():""}catch{return""}}async function sy(e){let t=oy(e),r=[];try{r=await d8.readdir(t)}catch{r=[]}let n=[];fo...

High

Shell

Package source references shell execution.

server/WebServer.mjsView on unpkg · L195

180`+ye:"",ze!==null?` L181: `+ze:""))}}}return $}a(LD,"constructClassInstance");function PD(y,R,H){{var X=pn(R)||"Component",_=y.render;_||(R.prototype&&typeof R.prototype.render=="function"?o("%s(...): No `r... L182: ... L193: Error generating stack: `+X.message+` L194: `+X.stack}}a(lS,"getStackByComponentStackNode");var Lm=n.ReactCurrentDispatcher,Sc=n.ReactDebugCurrentFrame,L1=0,Mu=1,cS=2,m6=3,uS=4,vp=0,h6=1,yp=2,Pm=12800;function g6(y){return c... L195: `));if(!A)return null;be=Me(A,!0)}return be.shift()},"FS_stdin_getChar"),Re={ttys:[],init(){},shutdown(){},register(A,L){Re.ttys[A]={input:[],output:[],ops:L},j.registerDevice(A,Re... L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function vVe(e){let t=e.match(/^loc

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

server/WebServer.mjsView on unpkg · L180

•

app/assets/esm-worker.jsView file

Lines 1-1javascript

1const e=`https://unpkg.com/@ffmpeg/core@0.12.9/dist/umd/ffmpeg-core.js`;var t;(function(e){e.LOAD=`LOAD`,e.EXEC=`EXEC`,e.FFPROBE=`FFPROBE`,e.WRITE_FILE=`WRITE_FILE`,e.

app/assets/index.jsView file

928contains invisible/control Unicode U+200B (zero width space) ${g}`)).style(`margin-left`,u?`${+u}px`:null).style(`width`,p===void 0?null:`${+p}px`).style(`font-variant`,T4(o,`normal`)).call(O4,f).node()}var $3=new Map([[`symbol`,ROe],[`color`,t6],[`opacity`,BOe]]);function zOe(e,t,n={}){return(r,a)=>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

app/assets/index.jsView on unpkg · L928

app/assets/lightgbmc.wasmView file

•path = app/assets/lightgbmc.wasm kind = wasm_module sizeBytes = 21264 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

app/assets/lightgbmc.wasmView on unpkg

server/kernel.pyView file

•path = server/kernel.py kind = build_helper sizeBytes = 10781 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

server/kernel.pyView on unpkg

server/objectexplorer-catalog.jarView file

•path = server/objectexplorer-catalog.jar kind = compressed_blob sizeBytes = 17063 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

server/objectexplorer-catalog.jarView on unpkg

•path = server/objectexplorer-catalog.jar kind = nested_archive_needs_inspection sizeBytes = 17063 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

server/objectexplorer-catalog.jarView on unpkg

demo/nl_train_stations.orcView file

•path = demo/nl_train_stations.orc kind = high_entropy_blob sizeBytes = 27653 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

demo/nl_train_stations.orcView on unpkg

cli.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = cli.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli.jsView on unpkg

app/assets/browser.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/browser.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/browser.jsView on unpkg

app/assets/wasm-worker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/wasm-worker.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/wasm-worker.jsView on unpkg

app/assets/AudioConverterWorker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/AudioConverterWorker.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/AudioConverterWorker.jsView on unpkg

app/assets/Workbook.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/Workbook.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/Workbook.jsView on unpkg

Source & flagged code

25 flagged · loading source

app/assets/WorkerParser.jsView file

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L51

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

Findings

1 Critical19 High8 Medium4 Low

CriticalTrojan Source Unicodeapp/assets/index.js

HighChild Processapp/assets/WorkerParser.js

HighShellserver/WebServer.mjs

HighSame File Env Network Executionserver/WebServer.mjs

HighCredential Redirect Persistenceserver/WebServer.mjs

HighCommand Output Exfiltrationserver/WebServer.mjs

HighSandbox Evasion Gated Capabilityserver/WebServer.mjs

HighCloud Metadata Accessserver/WebServer.mjs

HighCross File Remote Execution Contextserver/WebServer.mjs

HighTrigger Reachable Command Output Exfiltrationserver/WebServer.mjs

HighShips High Entropy Blobdemo/nl_train_stations.orc

Affected versions and remediation

This report applies to @knockdata/objectexplorer@0.6.4.

See all versions of @knockdata/objectexplorer for other recorded verdicts.

Review the evidence and your use of @knockdata/objectexplorer@0.6.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 03:30:59.974Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.