registry / @lensmcp/vite-plugin / 1.24.4
@lensmcp/vite-plugin@1.24.4
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe runtime behavior is consistent with a Vite diagnostics plugin: its default bridge host is loopback, and its client reports browser events to that bridge. The scanner’s bridge signal is explained by the manifest’s matching LensMCP bridge dependency and the source’s local event transport.
Static reason
One or more suspicious static signals were detected.
Trigger
A Vite host loads the plugin for development; it is enabled by default.
Impact
This supports local debugging; the inspected source does not establish an attack or external credential disclosure.
Mechanism
The injected client sends readiness, console, error, and fetch metadata over WebSocket to the bridge, which defaults to loopback.
AI rationale
The runtime behavior is consistent with a Vite diagnostics plugin: its default bridge host is loopback, and its client reports browser events to that bridge. The scanner’s bridge signal is explained by the manifest’s matching LensMCP bridge dependency and the source’s local event transport.
Evidence
package.jsonindex.jslib/plugin.js
Network endpoints1
127.0.0.1
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points package imports to index.js and lists matching LensMCP bridge and instrumentation dependencies.
- The plugin defaults to enabled for Vite serve and uses 127.0.0.1 as its default host.
- The development server creates a tokenized bridge on that host using an ephemeral port by default.
- The injected client sends browser readiness and diagnostic events, including console and fetch metadata, through the bridge.
- The entrypoint exports the Vite plugin and its bridge envelope helper.
Evidence against
- The inspected source shows no package-selected external recipient or credential collection; the observed event transport is the plugin’s local development bridge.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
9 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var $=Object.defineProperty;var g=(e,t)=>$(e,"name",{value:t,configurable:!0});var G=Object.defineProperty,h=g((e,t)=>G(e,"name",{value:t,configurable:!0}),"u");import...
L2: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L11tchRoots");export function lensmcpVitePlugin(e={},t={}){const r=e.enabled??!0,p=e.wsHost??"127.0.0.1",i=e.injectClient??!0;let f,c,s;const l=x(t),m=e.aliasValtio??!0,S=e.transformSource??!0,w=e.applyO
Low
Ai Review Evidence
The plugin defaults to enabled for Vite serve and uses 127.0.0.1 as its default host.
lib/plugin.jsView on unpkg · L11async configureServer(n){if(!r)return;s=J(24).toString("base64url"),c=await ee({host:p,port:e.wsPort??0,bus:t.bus,sessionId:t.sessionId,token:s,...e.wsAllowedOrigins?{allowedOrigins:e.wsAllowedOrigins}:{}}),f=c.port,n.middlewares.use(ne(c)),n.ws.on("
Low
Ai Review Evidence
Findings
1 High2 Medium9 Low
HighCopied Package Dependency Bridgelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowSuspicious Dependency Evidencepackage.json
LowSuspicious Dependency Evidencepackage.json
LowAi Review Evidencelib/plugin.js
LowAi Review Evidencelib/plugin.js
LowAi Review Evidencelib/plugin.js
LowAi Review Evidencelib/plugin.js
LowAi Review Evidencelib/plugin.js
LowAi Review Evidencelib/plugin.js
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.24.4.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.24.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.