registry / @knockdata/objectexplorer / 0.7.5

@knockdata/objectexplorer@0.7.5

⚠ Under review

The VSCode for Cloud Storage — Explore, Analyze, Search your cloud storage locally with single click

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The inspected entrypoints are a user-started local explorer with no install hook or concrete attack chain. A clean verdict cannot be finalized because the required citation paths exceed the citation limit, so the result stays an unresolved review.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The server starts only when a user runs the objectexplorer command. Nothing runs automatically at npm install.

Impact

No confirmed attack effect was established. The review stays unresolved because a clean citation of every required path cannot fit the citation limit.

Mechanism

The CLI imports the bundled server, listens on localhost, and optionally opens a browser. No harvesting or outbound payload execution was established from those entrypoints.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json names a local explorer CLI and server entry and declares no preinstall, install, or postinstall script.
cli.js loads the bundled server and listens on localhost only after the objectexplorer command runs.
Inspected entrypoints show no independent install-time mutation, secret theft, or remote payload. A clean decision cannot be cited because the required path set exceeds the citation limit.

Evidence against

Child processes in the CLI only open a local browser for the user-started server.
Dependencies are two scoped data libraries, not a runtime dependency on this same package.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Source & flagged code

29 flagged

server/WebServer.mjsView file

181`+Ee:"",Ge!==null?` L182: `+Ge:""))}}}return $}a(qO,"constructClassInstance");function HO(v,D,j){{var Z=mn(D)||"Component",_=v.render;_||(D.prototype&&typeof D.prototype.render=="function"?o("%s(...): No `r... L183: ... L194: Error generating stack: `+Z.message+` L195: `+Z.stack}}a(uy,"getStackByComponentStackNode");var c0=n.ReactCurrentDispatcher,Nc=n.ReactDebugCurrentFrame,yg=0,Zu=1,dy=2,M3=3,py=4,Vp=0,F3=1,Yp=2,u0=12800;function B3(v){return c... L196: `));if(!x)return null;be=Me(x,!0)}return be.shift()},"FS_stdin_getChar"),at={ttys:[],init(){},shutdown(){},register(x,P){at.ttys[x]={input:[],output:[],ops:P},Y.registerDevice(x,at... L197: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function sZe(e){let t=e.match(/^loc

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

server/WebServer.mjsView on unpkg · L181

1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L2: var MNe=Object.create;var e6=Object.defineProperty;var FNe=Object.getOwnPropertyDescriptor;var BNe=Object.getOwnPropertyNames;var UNe=Object.getPrototypeOf,$Ne=Object.prototype.has... L3: `)}catch(n){process.stderr.write(` L4: logger: could not write ${Lg} (${n.code})`)}}function Pr(...e){let t=t6(2,"info");process.stderr.write(` ... L9: `+EX(t,i.offset,i.len))}return n.value}function EX(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")} L10: ${"".padEnd(t)}${"^".repeat(r)}`}function AX(e){return jke(PI,e)}function Pl(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return m6(e.na... L11: `.repeat(o)+t:(e.rawText=t,e.lea

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

server/WebServer.mjsView on unpkg · L1

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

server/WebServer.mjsView on unpkg · L1

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

server/WebServer.mjsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> server/WebServer.mjs L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L2: var MNe=Object.create;var e6=Object.defineProperty;var FNe=Object.getOwnPropertyDescriptor;var BNe=Object.getOwnPropertyNames;var UNe=Object.getPrototypeOf,$Ne=Object.prototype.has... L3: `)}catch(n){process.stderr.write(` L4: logger: could not write ${Lg} (${n.code})`)}}function Pr(...e){let t=t6(2,"info");process.stderr.write(` ... L9: `+EX(t,i.offset,i.len))}return n.value}function EX(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")} L10: ${"".padEnd(t)}${"^".repeat(r)}`}function AX(e){return jke(PI,e)}function Pl(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"uni

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/WebServer.mjsView on unpkg · L1

196`));if(!x)return null;be=Me(x,!0)}return be.shift()},"FS_stdin_getChar"),at={ttys:[],init(){},shutdown(){},register(x,P){at.ttys[x]={input:[],output:[],ops:P},Y.registerDevice(x,at... L197: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function sZe(e){let t=e.match(/^local\[(\*|\d+)\]$/);return t?t[1]==="*"... L198: `).find(n=>n.trim().startsWith("version"));return r?r.split("=")[1].trim():""}catch{return""}}async function l4(e){let t=s4(e),r=[];try{r=await F8.readdir(t)}catch{r=[]}let n=[];fo...

High

Child Process

Package source references child process execution.

server/WebServer.mjsView on unpkg · L196

High

Shell

Package source references shell execution.

server/WebServer.mjsView on unpkg · L196

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. server/WebServer.mjs: `),"blockTransform")})}function cN(e,t){if(!t)return e;let r=typeof t[0]=="string"?t[0]:"[",n=typeof t[1]=="string"?t[1]:"]";return r+e+n}function TJ(e,t,r,n,i){let o=typeof t=="fu... `);n.next.cells.push({colspan:t,rowspan:r,text:i})}closeTableRow(){let t=this._popStackItem();t.next.rows.push(t.cells)}closeTable({tableToString:t,leadingLineBreaks:r=2,trailingLi... `+Z.stack}}a(uy,"getStackByComponentStackNode");var c0=n.ReactCurrentDispatcher,Nc=n.ReactDebugCurrentFrame,yg=0,Zu=1,dy=2,M3=3,py=4,Vp=0,F3=1,Yp=2,u0=12800;function B3(v){return c... `));if(!x)return null;be=Me(x,!0)}return be.shift()},"FS_stdin_getCha

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

server/WebServer.mjsView on unpkg

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

server/WebServer.mjsView on unpkg · L181

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

server/WebServer.mjsView on unpkg · L1

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

server/WebServer.mjsView on unpkg · L1

15`).map(o=>"> "+o).join(` L16: `),"blockTransform")})}function cN(e,t){if(!t)return e;let r=typeof t[0]=="string"?t[0]:"[",n=typeof t[1]=="string"?t[1]:"]";return r+e+n}function TJ(e,t,r,n,i){let o=typeof t=="fu... L17: `)}splitLongWord(t){let r=[],n=0;for(;t.length>this.maxLineLength;){let i=t.substring(0,this.maxLineLength),o=t.substring(this.maxLineLength),s=i.lastIndexOf(this.wrapCharacters[n]... ... L194: Error generating stack: `+Z.message+` L195: `+Z.stack}}a(uy,"getStackByComponentStackNode");var c0=n.ReactCurrentDispatcher,Nc=n.ReactDebugCurrentFrame,yg=0,Zu=1,dy=2,M3=3,py=4,Vp=0,F3=1,Yp=2,u0=12800;function B3(v){return c... L196: `));if(!x)return null;be=Me(x,!0)}return be.shift()},"FS_stdin_getChar"),at={ttys:[],init(){},shutdown(){},register(x,P){at.ttys[x]={input:[],output

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

server/WebServer.mjsView on unpkg · L15

1Cross-file remote execution chain: server/WebServer.mjs spawns app/assets/index.js; helper contains network access plus dynamic code execution. L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L2: var MNe=Object.create;var e6=Object.defineProperty;var FNe=Object.getOwnPropertyDescriptor;var BNe=Object.getOwnPropertyNames;var UNe=Object.getPrototypeOf,$Ne=Object.prototype.has... L3: `)}catch(n){process.stderr.write(` L4: logger: could not write ${Lg} (${n.code})`)}}function Pr(...e){let t=t6(2,"info");process.stderr.write(` ... L9: `+EX(t,i.offset,i.len))}return n.value}function EX(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")} L10: ${"".padEnd(t)}${"^".repeat(r)}`}function AX(e){return jke(PI,e)}function Pl(

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

server/WebServer.mjsView on unpkg · L1

1Trigger-reachable credential exfiltration chain: manifest.main -> server/WebServer.mjs L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L2: var MNe=Object.create;var e6=Object.defineProperty;var FNe=Object.getOwnPropertyDescriptor;var BNe=Object.getOwnPropertyNames;var UNe=Object.getPrototypeOf,$Ne=Object.prototype.has... L3: `)}catch(n){process.stderr.write(` L4: logger: could not write ${Lg} (${n.code})`)}}function Pr(...e){let t=t6(2,"info");process.stderr.write(` ... L9: `+EX(t,i.offset,i.len))}return n.value}function EX(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")} L10: ${"".padEnd(t)}${"^".repeat(r)}`}function AX(e){return jke(PI,e)}function Pl(e){if(!e.type)throw new Error("This is not an AST node.")

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

server/WebServer.mjsView on unpkg · L1

181Trigger-reachable command-output exfiltration chain: manifest.main -> server/WebServer.mjs L181: `+Ee:"",Ge!==null?` L182: `+Ge:""))}}}return $}a(qO,"constructClassInstance");function HO(v,D,j){{var Z=mn(D)||"Component",_=v.render;_||(D.prototype&&typeof D.prototype.render=="function"?o("%s(...): No `r... L183: ... L194: Error generating stack: `+Z.message+` L195: `+Z.stack}}a(uy,"getStackByComponentStackNode");var c0=n.ReactCurrentDispatcher,Nc=n.ReactDebugCurrentFrame,yg=0,Zu=1,dy=2,M3=3,py=4,Vp=0,F3=1,Yp=2,u0=12800;function B3(v){return c... L196: `));if(!x)return null;be=Me(x,!0)}return be.shift()},"FS_stdin_getChar"),at={ttys:[],init(){},shutdown(){},register(x,P){at.ttys[x]={input:[],output:[],ops:P},Y.registerDevice(x,at... L197: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.start

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

server/WebServer.mjsView on unpkg · L181

app/assets/index.jsView file

1742contains invisible/control Unicode U+200B (zero width space) ${g}`)).style(`margin-left`,u?`${+u}px`:null).style(`width`,p===void 0?null:`${+p}px`).style(`font-variant`,iQ(o,`normal`)).call(sQ,f).node()}var M$=new Map([[`symbol`,I5e],[`color`,P$],[`opacity`,R5e]]);function L5e(e,t,n={}){return(r,a)=>

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

app/assets/index.jsView on unpkg · L1742

1525`||r===`\r`?(yield[t,n,!0],n+=r===`\r`&&e[n+1]===` L1526: `?2:1,t=n):n+=1}yield[t,n,!0]}function pO(e,t,n){return e[n-1]===uO?e.slice(t,n)+`-`:e.slice(t,n)}function dRe(e,t=1/0){if(t===1/0)return e.split(/\r\n?|\n/g);{let n=t*100,r=[],a,o... L1527: `)}function hHe(e,t,n){let r=[`x: ${t.source}`];n&&r.push(`y: ${n.source}`),r.push(`tip: true`);let a=`{${r.join(`, `)}}`,o=[];return e.x.reduce!==null&&o.push(`x: ${qj(e.x.reduce)...

High

Eval

Package source references dynamic code evaluation.

app/assets/index.jsView on unpkg · L1525

app/assets/esm-worker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.7.0 matchedPath = app/assets/esm-worker.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/esm-worker.jsView on unpkg

1const e=`https://unpkg.com/@ffmpeg/core@0.12.9/dist/umd/ffmpeg-core.js`;var t;(function(e){e.LOAD=`LOAD`,e.EXEC=`EXEC`,e.FFPROBE=`FFPROBE`,e.WRITE_FILE=`WRITE_FILE`,e.READ_FILE=`RE...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/assets/esm-worker.jsView on unpkg · L1

app/assets/lightgbmc.wasmView file

•path = app/assets/lightgbmc.wasm kind = wasm_module sizeBytes = 21264 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

app/assets/lightgbmc.wasmView on unpkg

server/kernel.pyView file

•path = server/kernel.py kind = build_helper sizeBytes = 10781 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

server/kernel.pyView on unpkg

server/objectexplorer-catalog.jarView file

•path = server/objectexplorer-catalog.jar kind = compressed_blob sizeBytes = 17063 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

server/objectexplorer-catalog.jarView on unpkg

•path = server/objectexplorer-catalog.jar kind = nested_archive_needs_inspection sizeBytes = 17063 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

server/objectexplorer-catalog.jarView on unpkg

demo/nl_train_stations.orcView file

•path = demo/nl_train_stations.orc kind = high_entropy_blob sizeBytes = 27653 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

demo/nl_train_stations.orcView on unpkg

app/assets/WorkerParser.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 5

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

app/assets/WorkerParser.jsView on unpkg

cli.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.7.0 matchedPath = cli.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli.jsView on unpkg

app/assets/browser.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.7.0 matchedPath = app/assets/browser.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/browser.jsView on unpkg

app/assets/wasm-worker.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.7.0 matchedPath = app/assets/wasm-worker.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/wasm-worker.jsView on unpkg

app/assets/Workbook.jsView file

•matchType = normalized_sha256 matchedPackage = @knockdata/objectexplorer@0.7.0 matchedPath = app/assets/Workbook.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

app/assets/Workbook.jsView on unpkg

Source & flagged code

29 flagged · loading source

server/WebServer.mjsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

server/WebServer.mjsView on unpkg · L181

Findings

6 Critical18 High7 Medium6 Low

CriticalSame File Env Network Executionserver/WebServer.mjs

CriticalHardcoded Runtime Data Exfiltrationserver/WebServer.mjs

CriticalCredential Exfiltrationserver/WebServer.mjs

CriticalBrowser Credential Phishingserver/WebServer.mjs

CriticalTrojan Source Unicodeapp/assets/index.js

CriticalTrigger Reachable Dangerous Capabilityserver/WebServer.mjs

HighChild Processserver/WebServer.mjs

HighShellserver/WebServer.mjs

HighEvalapp/assets/index.js

HighCredential Redirect Persistenceserver/WebServer.mjs

HighCommand Output Exfiltrationserver/WebServer.mjs

Affected versions and remediation

This report applies to @knockdata/objectexplorer@0.7.5.

See all versions of @knockdata/objectexplorer for other recorded verdicts.

Review the evidence and your use of @knockdata/objectexplorer@0.7.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 16:29:40.967Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.