registry / Credential exfiltration / @lensmcp/vite-plugin

@lensmcp/vite-plugin

LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.

This report shows the evidence for @lensmcp/vite-plugin@1.25.44. 3 of 87 known versions are blocked or flagged. The newest version, 1.25.58, is allowed. See all versions.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The plugin enables browser replay by default, and the recorder config explicitly leaves password values unmasked before uploading replay data. This automatically collects credentials that the observability purpose does not need, so the package should be blocked.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

A Vite development server uses the plugin and serves a page with replay enabled; replay is enabled by default when no capture setting disables it.

Impact

Credentials entered into instrumented pages can be captured and made available through the replay service without an explicit replay opt-in.

Mechanism

The injected replay recorder captures page state and input events without masking password values, then POSTs replay data to the configured bridge.

Attack narrative

When the plugin serves a page with replay enabled, its recorder captures password inputs without masking them and uploads replay data to the bridge. Replay is enabled by default when no capture setting disables it, so users can expose credentials entered into an instrumented app without explicitly opting into replay.

AI rationale

Evidence

lib/replay-setting.jslib/plugin.js.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.js.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.js.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.js

Network endpoints2

127.0.0.1:<ephemeral-port>/replay127.0.0.1:<ephemeral-port>/replay/blob

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

Replay defaults to enabled when no capture setting is present.
When replay is enabled, the Vite plugin injects its replay module into served pages.
The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.
The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.
The replay uploader POSTs replay data and blobs to the bridge’s /replay and /replay/blob paths.

Evidence against

The package is intended to provide browser observability, and its replay upload destination defaults to a local bridge.
The manifest has no lifecycle scripts; replay runs when the configured Vite development server serves a page.

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsMinified

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 58.2 KB of source

Source & flagged code

9 flagged

lib/plugin.jsView file

1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import... L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm... L3: (() => {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

lib/plugin.jsView on unpkg · L1

•matchType = malicious_source_fingerprint_signature signature = 118688338f0ed54a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @lensmcp/vite-plugin@1.25.41 matchedPath = lib/plugin.js matchedIdentity = npm:QGxlbnNtY3Avdml0ZS1wbHVnaW4:1.25.41 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/plugin.jsView on unpkg

2transformIndexHtml(){if(!a||!s)return;const t=[{tag:"script",attrs:{type:"module",src:j},injectTo:"head-prepend"}];return b()&&t.push({tag:"script",attrs:{type:"module",src:U},inje

High

Ai Review Evidence

When replay is enabled, the Vite plugin injects its replay module into served pages.

lib/plugin.jsView on unpkg · L2

2endpoint: ${JSON.stringify(`http://${e.host}:${e.port}`)}, ${e.token?`token: ${JSON.stringify(e.token)}, `:""}tabId: TAB_ID, ${e.app?`app: ${JSON.stringify(e.app)}, `:""}fetch: NAT

High

Ai Review Evidence

The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.

lib/plugin.jsView on unpkg · L2

1127.0.0.1",a=e.injectClient??!0;let f,c,o;const l=V(n),m=e.aliasValtio??!0,S=e.transformSource??!0,v=e.applyOnBuild??process.env.LENSMCP_VITE_APPLY_ON_BUILD==="1",k=ce(),b=d(()=>!!

High

Ai Review Evidence

The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.

lib/plugin.jsView on unpkg · L1

lib/replay-setting.jsView file

1catch{return!0}}t(replayEnabled,"replayEnabled"),o(replayEnabled,"replayEnabled");export function captureFilePath(r=process.env,e=process.cwd()){return u(s(c(r,e)),"capture.json")}

High

Ai Review Evidence

Replay defaults to enabled when no capture setting is present.

lib/replay-setting.jsView on unpkg · L1

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.jsView file

1DEV_PRIVACY={maskAllInputs:!1,blockSelector:"[data-lens-private]"},DEFAULT_LIMITS={flushMs:2e3,flushChars:256*1024,flushEvents:2e3,checkoutEveryMs:18e4,pendingChars:8*1024*1024,blo

High

Ai Review Evidence

The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.jsView on unpkg · L1

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.jsView file

1maskAllInputs:t.maskAllInputs,...t.maskAllInputs?{}:{maskInputOptions:{password:!1}},...t.maskTextSelector?{maskTextSelector:t.maskTextSelector}:{},...t.blockSelector?{blockSelecto

High

Ai Review Evidence

The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.jsView on unpkg · L1

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.jsView file

1t this.post("/replay/blob",{sha:o,enc:f?"gzip":"identity"},f??r);if(h.status>=200&&h.status<300){this.o.known.add(o);continue}const l=c(h.status);if(l)return l;throw new Error(`blob ${h.status}`)}const s=await this.post("/replay",this.params(t.summary,t.enc,[...t.blobs.keys()]),t.body);if(s.status>=200&&s.status<300)re

High

Ai Review Evidence

The replay uploader POSTs replay data and blobs to the bridge’s /replay and /replay/blob paths.

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.jsView on unpkg · L1

Findings

9 High2 Medium1 Low

HighCopied Package Dependency Bridgelib/plugin.js

HighKnown Malware Source Fingerprint Signaturelib/plugin.js

HighAi Review Evidencelib/replay-setting.js

HighAi Review Evidencelib/plugin.js

HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.js

HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.js

HighAi Review Evidencelib/plugin.js

HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @lensmcp/vite-plugin@1.25.44.

The versions list below shows the verdict for each recorded version.

Avoid installing @lensmcp/vite-plugin@1.25.44. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-31 02:27:39.265Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

87 known versions

registry / Credential exfiltration / @lensmcp/vite-plugin

@lensmcp/vite-plugin

LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.

This report shows the evidence for @lensmcp/vite-plugin@1.25.44. 3 of 87 known versions are blocked or flagged. The newest version, 1.25.58, is allowed. See all versions.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

A Vite development server uses the plugin and serves a page with replay enabled; replay is enabled by default when no capture setting disables it.

Impact

Credentials entered into instrumented pages can be captured and made available through the replay service without an explicit replay opt-in.

Mechanism

The injected replay recorder captures page state and input events without masking password values, then POSTs replay data to the configured bridge.

Attack narrative

AI rationale

Evidence

Network endpoints2

127.0.0.1:<ephemeral-port>/replay127.0.0.1:<ephemeral-port>/replay/blob

Decision evidence

public snapshot

AI called this Malicious at 97.0% confidence as Malware with low false-positive risk.

Evidence for block

Replay defaults to enabled when no capture setting is present.
When replay is enabled, the Vite plugin injects its replay module into served pages.
The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.
The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.
The replay uploader POSTs replay data and blobs to the bridge’s /replay and /replay/blob paths.

Evidence against

The package is intended to provide browser observability, and its replay upload destination defaults to a local bridge.
The manifest has no lifecycle scripts; replay runs when the configured Vite development server serves a page.

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsMinified

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 58.2 KB of source

Source & flagged code

9 flagged

lib/plugin.jsView file

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

lib/plugin.jsView on unpkg · L1

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/plugin.jsView on unpkg

2transformIndexHtml(){if(!a||!s)return;const t=[{tag:"script",attrs:{type:"module",src:j},injectTo:"head-prepend"}];return b()&&t.push({tag:"script",attrs:{type:"module",src:U},inje

High

Ai Review Evidence

When replay is enabled, the Vite plugin injects its replay module into served pages.

lib/plugin.jsView on unpkg · L2

2endpoint: ${JSON.stringify(`http://${e.host}:${e.port}`)}, ${e.token?`token: ${JSON.stringify(e.token)}, `:""}tabId: TAB_ID, ${e.app?`app: ${JSON.stringify(e.app)}, `:""}fetch: NAT

High

Ai Review Evidence

The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.

lib/plugin.jsView on unpkg · L2

1127.0.0.1",a=e.injectClient??!0;let f,c,o;const l=V(n),m=e.aliasValtio??!0,S=e.transformSource??!0,v=e.applyOnBuild??process.env.LENSMCP_VITE_APPLY_ON_BUILD==="1",k=ce(),b=d(()=>!!

High

Ai Review Evidence

The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.

lib/plugin.jsView on unpkg · L1

lib/replay-setting.jsView file

1catch{return!0}}t(replayEnabled,"replayEnabled"),o(replayEnabled,"replayEnabled");export function captureFilePath(r=process.env,e=process.cwd()){return u(s(c(r,e)),"capture.json")}

High

Ai Review Evidence

Replay defaults to enabled when no capture setting is present.

lib/replay-setting.jsView on unpkg · L1

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.jsView file

1DEV_PRIVACY={maskAllInputs:!1,blockSelector:"[data-lens-private]"},DEFAULT_LIMITS={flushMs:2e3,flushChars:256*1024,flushEvents:2e3,checkoutEveryMs:18e4,pendingChars:8*1024*1024,blo

High

Ai Review Evidence

The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.jsView on unpkg · L1

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.jsView file

1maskAllInputs:t.maskAllInputs,...t.maskAllInputs?{}:{maskInputOptions:{password:!1}},...t.maskTextSelector?{maskTextSelector:t.maskTextSelector}:{},...t.blockSelector?{blockSelecto

High

Ai Review Evidence

The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.jsView on unpkg · L1

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.jsView file

High

Ai Review Evidence

The replay uploader POSTs replay data and blobs to the bridge’s /replay and /replay/blob paths.

.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.jsView on unpkg · L1

Findings

9 High2 Medium1 Low

HighCopied Package Dependency Bridgelib/plugin.js

HighKnown Malware Source Fingerprint Signaturelib/plugin.js

HighAi Review Evidencelib/replay-setting.js

HighAi Review Evidencelib/plugin.js

HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.js

HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.js

HighAi Review Evidencelib/plugin.js

HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @lensmcp/vite-plugin@1.25.44.

The versions list below shows the verdict for each recorded version.

Avoid installing @lensmcp/vite-plugin@1.25.44. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-31 02:27:39.265Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

87 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @lensmcp

Other credential exfiltration packages

Related packages

More from @lensmcp

Other credential exfiltration packages