registry / @knockdata/objectexplorer / 0.6.5

@knockdata/objectexplorer@0.6.5

The VSCode for Cloud Storage — Explore, Analyze, Search your cloud storage locally with single click

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package contains real, user-triggered execution and network-capable features, but no confirmed malicious installation or stealth behavior. Downgrade to a warning because the exposed package-installation capability and opaque bundled surface leave material risk.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The user runs the CLI and uses the local application features.

Impact

A local user or another party able to access the service could cause Python package installation or submit chosen text to OpenAI; no automatic install-time attack was found.

Mechanism

Local server exposing filesystem, package-installation, and optional OpenAI translation features.

AI rationale

Evidence

cli.jsserver/WebServer.mjsapp/assets/index.js

Network endpoints1

api.openai.com/v1

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The command-line launcher starts a local server with filesystem access to the chosen folder.
The bundled server can create virtual environments and invoke uv to install Python packages.
The bundled server reads an OpenAI API key from the environment and sends translation requests to the OpenAI API.
Large minified bundles and opaque data artifacts make complete source-level assurance impractical.

Evidence against

package.json has no preinstall, install, postinstall, or other lifecycle script.
The launcher’s browser-opening and local-server behavior follows explicit command execution.
No source evidence showed credential harvesting, hidden persistence, destructive activity, or automatic network execution at installation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

25 flagged

app/assets/WorkerParser.jsView file

51`),t=t.replace(Dm,`�`),e.src=t}function km(e){let t;e.inlineMode?(t=new e.Token(`inline`,``,0),t.content=e.src,t.map=[0,1],t.children=[],e.tokens.push(t)):e.md.block.parse(e.src,e.... L52: `,o.map=[t,e.line],!0}function nh(e,t,n,i){let a=e.bMarks[t]+e.tShift[t],o=e.eMarks[t];if(e.sCount[t]-e.blkIndent>=4||a+3>o)return!1;let s=e.src.charCodeAt(a);if(s!==126&&s!==96)re... L53: https://github.com/highlightjs/highlight.js/issues/2277`),a=e,i=t),n===void 0&&(n=!0);let o={code:i,language:a};ue(`before:highlight`,o);let s=o.result?o.result:b(o.language,o.code...

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L51

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/WorkerParser.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/WorkerParser.jsView on unpkg

server/WebServer.mjsView file

195`));if(!A)return null;be=Me(A,!0)}return be.shift()},"FS_stdin_getChar"),Re={ttys:[],init(){},shutdown(){},register(A,L){Re.ttys[A]={input:[],output:[],ops:L},j.registerDevice(A,Re... L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function vVe(e){let t=e.match(/^local\[(\*|\d+)\]$/);return t?t[1]==="*"... L197: `).find(n=>n.trim().startsWith("version"));return r?r.split("=")[1].trim():""}catch{return""}}async function sy(e){let t=oy(e),r=[];try{r=await d8.readdir(t)}catch{r=[]}let n=[];fo...

High

Shell

Package source references shell execution.

server/WebServer.mjsView on unpkg · L195

180`+ye:"",ze!==null?` L181: `+ze:""))}}}return $}a(LD,"constructClassInstance");function PD(y,R,H){{var X=pn(R)||"Component",_=y.render;_||(R.prototype&&typeof R.prototype.render=="function"?o("%s(...): No `r... L182: ... L193: Error generating stack: `+X.message+` L194: `+X.stack}}a(lS,"getStackByComponentStackNode");var Lm=n.ReactCurrentDispatcher,Sc=n.ReactDebugCurrentFrame,L1=0,Mu=1,cS=2,m6=3,uS=4,vp=0,h6=1,yp=2,Pm=12800;function g6(y){return c... L195: `));if(!A)return null;be=Me(A,!0)}return be.shift()},"FS_stdin_getChar"),Re={ttys:[],init(){},shutdown(){},register(A,L){Re.ttys[A]={input:[],output:[],ops:L},j.registerDevice(A,Re... L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function vVe(e){let t=e.match(/^loc

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

server/WebServer.mjsView on unpkg · L180

•

app/assets/esm-worker.jsView file

Lines 1-1javascript

1const e=`https://unpkg.com/@ffmpeg/core@0.12.9/dist/umd/ffmpeg-core.js`;var t;(function(e){e.LOAD=`LOAD`,e.EXEC=`EXEC`,e.FFPROBE=`FFPROBE`,e.WRITE_FILE=`WRITE_FILE`,e.

app/assets/index.jsView file

928contains invisible/control Unicode U+200B (zero width space) ${g}`)).style(`margin-left`,u?`${+u}px`:null).style(`width`,p===void 0?null:`${+p}px`).style(`font-variant`,T4(o,`normal`)).call(O4,f).node()}var $3=new Map([[`symbol`,ROe],[`color`,t6],[`opacity`,BOe]]);function zOe(e,t,n={}){return(r,a)=>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

app/assets/index.jsView on unpkg · L928

app/assets/lightgbmc.wasmView file

•path = app/assets/lightgbmc.wasm kind = wasm_module sizeBytes = 21264 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

app/assets/lightgbmc.wasmView on unpkg

server/kernel.pyView file

•path = server/kernel.py kind = build_helper sizeBytes = 10781 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

server/kernel.pyView on unpkg

server/objectexplorer-catalog.jarView file

•path = server/objectexplorer-catalog.jar kind = compressed_blob sizeBytes = 17063 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

server/objectexplorer-catalog.jarView on unpkg

•path = server/objectexplorer-catalog.jar kind = nested_archive_needs_inspection sizeBytes = 17063 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

server/objectexplorer-catalog.jarView on unpkg

demo/nl_train_stations.orcView file

•path = demo/nl_train_stations.orc kind = high_entropy_blob sizeBytes = 27653 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

demo/nl_train_stations.orcView on unpkg

cli.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = cli.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli.jsView on unpkg

app/assets/browser.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/browser.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/browser.jsView on unpkg

app/assets/wasm-worker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/wasm-worker.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/wasm-worker.jsView on unpkg

app/assets/AudioConverterWorker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/AudioConverterWorker.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/AudioConverterWorker.jsView on unpkg

app/assets/Workbook.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.6.2 matchedPath = app/assets/Workbook.js matchedIdentity = npm:[redacted]:0.6.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/Workbook.jsView on unpkg

Source & flagged code

25 flagged · loading source

app/assets/WorkerParser.jsView file

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L51

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

Findings

1 Critical19 High8 Medium4 Low

CriticalTrojan Source Unicodeapp/assets/index.js

HighChild Processapp/assets/WorkerParser.js

HighShellserver/WebServer.mjs

HighSame File Env Network Executionserver/WebServer.mjs

HighCredential Redirect Persistenceserver/WebServer.mjs

HighCommand Output Exfiltrationserver/WebServer.mjs

HighSandbox Evasion Gated Capabilityserver/WebServer.mjs

HighCloud Metadata Accessserver/WebServer.mjs

HighCross File Remote Execution Contextserver/WebServer.mjs

HighTrigger Reachable Command Output Exfiltrationserver/WebServer.mjs

HighShips High Entropy Blobdemo/nl_train_stations.orc

Affected versions and remediation

This report applies to @knockdata/objectexplorer@0.6.5.

See all versions of @knockdata/objectexplorer for other recorded verdicts.

Review the evidence and your use of @knockdata/objectexplorer@0.6.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 06:29:56.375Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.