@lensmcp/vite-plugin@1.25.37
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package is an observability plugin and sends replay to its local bridge, but it silently enables session recording by default and disables masking for password and other form inputs. This is undisclosed runtime telemetry with a material risk of capturing sensitive user-entered data, so it warrants a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.
Trigger
A Vite development server using the plugin serves its injected client; replay is enabled unless explicitly disabled or configured off.
Impact
Sensitive values entered into the observed application may be recorded and made available to the local LensMCP runtime without an explicit replay opt-in.
Mechanism
The replay recorder captures browser session data with general input masking off and password masking explicitly disabled, then POSTs replay payloads to the bridge endpoint.
AI rationale
The package is an observability plugin and sends replay to its local bridge, but it silently enables session recording by default and disables masking for password and other form inputs. This is undisclosed runtime telemetry with a material risk of capturing sensitive user-entered data, so it warrants a warning rather than a malicious verdict.
Evidence
lib/replay-setting.jslib/plugin.js.lpm-dependency-evidence-864755eb-8cca-4cb8-a8d0-708576fac8a7/1/npm-linux/replay-source.js
Network endpoints2
ws://127.0.0.1:<ephemeral-port>127.0.0.1:<ephemeral-port>
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Replay is enabled by default when no option or environment setting is supplied and the capture configuration is absent or unreadable.
- When enabled, the plugin passes replay configuration into the injected browser runtime and constructs its replay endpoint from the bridge host and port.
- The recorder defaults to leaving inputs unmasked and explicitly disables password masking; it sends replay data with HTTP POST.
- The bridge host defaults to 127.0.0.1 and the port is selected locally when unspecified.
Evidence against
- The package describes itself as a frontend observability plugin that streams browser events to LensMCP.
- The plugin normally attaches to Vite's development server, and the inspected replay transport targets the local bridge; no unrelated external collector was identified.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
8 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var Z=Object.defineProperty;var g=(e,n)=>Z(e,"name",{value:n,configurable:!0});var Q=Object.defineProperty,y=g((e,n)=>Q(e,"name",{value:n,configurable:!0}),"g"),ee=Obj...
L2: `);if(t!==D)return null;const u=f??e.wsPort??0,o=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:r,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L11process.env.LENSMCP_VITE_APPLY_ON_BUILD==="1",k=ue(),_=d(()=>!!c&&he({...e.replay!==void 0?{option:e.replay}:{},captureFile:k}),"replayOn");return{name:"@lensmcp/vite-plugin",apply:d((t,u)=>s&&(u.command==="serve"||b),"apply"),enforce:"pre"
Medium
Ai Review Evidence
Replay is enabled by default when no option or environment setting is supplied and the capture configuration is absent or unreadable.
lib/plugin.jsView on unpkg · L12en:r,hmrRecovery:e.hmrRecovery!==!1,...o?{app:o}:{},..._()?{replay:!0}:{}})},async transform(t,u){if(!s||!R)return null;const o=u.split("?")[0]??u;if(o.includes("/node_modules/")||
Findings
1 High9 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencelib/replay-setting.js
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidence.lpm-dependency-evidence-864755eb-8cca-4cb8-a8d0-708576fac8a7/1/npm-linux/replay-source.js
MediumAi Review Evidence.lpm-dependency-evidence-864755eb-8cca-4cb8-a8d0-708576fac8a7/1/npm-linux/replay-source.js
MediumAi Review Evidence.lpm-dependency-evidence-864755eb-8cca-4cb8-a8d0-708576fac8a7/1/npm-linux/replay-source.js
MediumAi Review Evidencelib/plugin.js
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.37.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.