registry / @lensmcp/vite-plugin / 1.25.33
@lensmcp/vite-plugin@1.25.33
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe plugin's default replay behavior can collect unmasked page input and send it to the local bridge, a meaningful privacy risk that is not clearly surfaced in the README. The behavior fits the observability purpose and uses a local endpoint, so the source does not establish malicious exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
A developer enables the plugin and starts Vite; replay is on by default unless disabled.
Impact
Sensitive text entered into the page may be captured and sent to the local LensMCP bridge.
Mechanism
The injected rrweb recorder captures page activity and posts replay data to the plugin's bridge.
AI rationale
The plugin's default replay behavior can collect unmasked page input and send it to the local bridge, a meaningful privacy risk that is not clearly surfaced in the README. The behavior fits the observability purpose and uses a local endpoint, so the source does not establish malicious exfiltration.
Evidence
lib/types.d.tslib/plugin.js.lpm-dependency-evidence-eccf4000-5d6f-41dc-be02-f1fc55366fb8/1/npm-linux/lib/replay/types.js.lpm-dependency-evidence-eccf4000-5d6f-41dc-be02-f1fc55366fb8/1/npm-linux/lib/replay/recorder.js.lpm-dependency-evidence-eccf4000-5d6f-41dc-be02-f1fc55366fb8/1/npm-linux/lib/replay/uploader.js
Network endpoints2
127.0.0.1:<ephemeral-port>/replay127.0.0.1:<ephemeral-port>/replay/blob
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Session replay records the page and streams it to the bridge; it is on by default unless disabled by configuration.
- Replay defaults to maskAllInputs=false, and the recorder also disables password input masking; only elements marked data-lens-private are blocked by default.
- Replay uploads use the bridge host and port configured by the plugin, whose documented default host is localhost.
Evidence against
- The package is a Vite observability plugin, and browser event capture is part of its stated purpose.
- The package metadata defines no lifecycle scripts.
- The bridge defaults to localhost and the plugin uses a per-start token; no unrelated external endpoint was identified.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
6 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L12http://${e.host}:${e.port}`)}, ${e.token?`token: ${JSON.stringify(e.token)}, `:""}tabId: TAB_ID, ${e.app?`app: ${JSON.stringify(e.app)}, `:""}fetch: NATIVE_FETCH }`:"";return`// @lensmcp/client-runtim
Medium
Ai Review Evidence
Replay uploads use the bridge host and port configured by the plugin, whose documented default host is localhost.
lib/plugin.jsView on unpkg · L2lib/types.d.tsView file
Findings
1 High7 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencelib/types.d.ts
MediumAi Review Evidence.lpm-dependency-evidence-eccf4000-5d6f-41dc-be02-f1fc55366fb8/1/npm-linux/lib/replay/types.js
MediumAi Review Evidence.lpm-dependency-evidence-eccf4000-5d6f-41dc-be02-f1fc55366fb8/1/npm-linux/lib/replay/recorder.js
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidencelib/types.d.ts
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.33.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.33 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.