registry / @lensmcp/vite-plugin / 1.25.28
@lensmcp/vite-plugin@1.25.28
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe source supports a privacy warning because replay is enabled by default and captures unmasked inputs. The observed transfer is to the local LensMCP bridge, so the evidence does not establish malicious behavior or justify blocking publication.
Static reason
One or more suspicious static signals were detected.
Trigger
The plugin runs in Vite serve mode and replay is not disabled through its settings or capture file.
Impact
Sensitive form contents may enter the local LensMCP event stream.
Mechanism
The browser recorder captures page events with input masking off by default and sends replay data to the bridge on the configured host and port.
AI rationale
The source supports a privacy warning because replay is enabled by default and captures unmasked inputs. The observed transfer is to the local LensMCP bridge, so the evidence does not establish malicious behavior or justify blocking publication.
Evidence
lib/plugin.jslib/replay-setting.js.lpm-dependency-evidence-1ccb1cf3-a779-4ae6-98fb-c9f55e418aa4/1/npm-linux/replay-source.jspackage.jsonindex.js
Network endpoints1
127.0.0.1
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package entrypoint exports the Vite plugin, and its manifest declares the matching LensMCP bridge and browser runtime dependencies.
- The plugin is enabled by default for Vite serve mode and starts a bridge on 127.0.0.1 with a generated token.
- When replay settings are absent, replay is enabled unless the capture file explicitly disables it; the plugin passes replay configuration to the browser runtime.
- Replay data is sent to an HTTP endpoint built from the bridge host and port, with the generated token.
- The recorder defaults to leaving inputs unmasked and disables password input masking; it blocks only regions marked with its private selector.
- The event mapper accepts publish sources only when they are strings in a fixed allowlist: react, valtio, memory, or client-runtime.
Evidence against
- The observed replay recipient is the package’s loopback bridge, not an unrelated external host; the source shows no separate network destination.
Behavioral surface
EnvironmentVars
Source & flagged code
9 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L11){if(!s)return;o=Q(24).toString("base64url"),c=await ie({host:p,port:e.wsPort??0,bus:n.bus,sessionId:n.sessionId,token:o,...e.wsAllowedOrigins?{allowedOrigins:e.wsAllowedOrigins}:{}}),f=c.po
Medium
Ai Review Evidence
Replay data is sent to an HTTP endpoint built from the bridge host and port, with the generated token.
lib/plugin.jsView on unpkg · L1package.jsonView file
Findings
1 High10 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Dependency Evidencepackage.json
MediumSuspicious Dependency Evidenceindex.js
MediumSuspicious Dependency Evidence.lpm-dependency-evidence-1ccb1cf3-a779-4ae6-98fb-c9f55e418aa4/0/npm-linux/package.json
MediumSuspicious Dependency Evidence.lpm-dependency-evidence-1ccb1cf3-a779-4ae6-98fb-c9f55e418aa4/1/npm-linux/package.json
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidencelib/replay-setting.js
MediumAi Review Evidence.lpm-dependency-evidence-1ccb1cf3-a779-4ae6-98fb-c9f55e418aa4/1/npm-linux/replay-source.js
MediumAi Review Evidence
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.28.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.28 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.