registry / @lensmcp/vite-plugin / 1.25.26
@lensmcp/vite-plugin@1.25.26
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe default replay behavior creates a meaningful privacy risk because it records unmasked inputs, including passwords. The bridge defaults to loopback and the source does not establish unrelated external exfiltration, so this warrants a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
A project runs Vite serve with the plugin enabled and no replay opt-out configured.
Impact
Sensitive text entered into the observed page may be sent to the local collector without a separate replay opt-in.
Mechanism
The plugin injects a browser recorder; its defaults leave inputs unmasked and it posts replay chunks to the bridge host and port.
AI rationale
The default replay behavior creates a meaningful privacy risk because it records unmasked inputs, including passwords. The bridge defaults to loopback and the source does not establish unrelated external exfiltration, so this warrants a warning rather than a publish block.
Evidence
lib/plugin.jslib/replay-setting.js.lpm-dependency-evidence-6842f6c2-ab98-4541-8202-0268e402dbc7/1/npm-linux/replay-source.js
Network endpoints2
127.0.0.1:<port>/replay (default host)<configured wsHost>:<port>/replay
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The plugin is enabled by default for Vite serve and defaults its bridge host to 127.0.0.1; it starts that bridge and injects the client.
- Replay is enabled when no disabling environment setting or capture-file value is present, and the plugin injects the replay module when replay is enabled.
- The recorder defaults to leaving inputs unmasked and explicitly disables password masking; it captures page events for replay.
- Replay chunks are posted to an endpoint derived from the plugin host and port. This can expose sensitive page input to the local collector.
- The publish-event mapper filters sources through a predicate, sanitizes titles and messages, and redacts raw network URLs in the returned event record.
Evidence against
- The replay destination uses the plugin's configured host and port, which default to 127.0.0.1; the inspected source does not establish transfer to an unrelated external service.
Behavioral surface
EnvironmentVars
HighEntropyStrings
Source & flagged code
5 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L11wsHost??"127.0.0.1",a=e.injectClient??!0;let f,c,o;const l=V(n),m=e.aliasValtio??!0,S=e.transformSource??!0,v=e.applyOnBuild??process.env.LENSMCP_VITE_APPLY_ON_BUILD==="1",k=ce(),b=d(()=>!!c&&de({...e.replay!==void 0?{option:e.replay}:{},captureFile:k}),"replayOn");return{name:"@lensmcp/vi
Medium
Ai Review Evidence
Replay chunks are posted to an endpoint derived from the plugin host and port. This can expose sensitive page input to the local collector.
lib/plugin.jsView on unpkg · L1lib/replay-setting.jsView file
Findings
1 High6 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidencelib/replay-setting.js
MediumAi Review Evidence.lpm-dependency-evidence-6842f6c2-ab98-4541-8202-0268e402dbc7/1/npm-linux/replay-source.js
MediumAi Review Evidence.lpm-dependency-evidence-6842f6c2-ab98-4541-8202-0268e402dbc7/0/npm-linux/lib/event-mappers.js
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.26.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.