@lensmcp/vite-plugin@1.25.39
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe default replay path captures unmasked form values, including passwords, and sends them to the local LensMCP receiver. Although replay fits the package's observability purpose and the inspected endpoint is local, automatic collection of credentials is unnecessary for that purpose and warrants blocking.
Static reason
One or more suspicious static signals were detected.
Trigger
The plugin is configured in Vite and its dev server serves a page; replay is enabled by default unless explicitly turned off.
Impact
App users' entered credentials and other sensitive form values may be captured and made available through local replay storage.
Mechanism
The plugin injects a replay recorder that does not mask inputs or passwords, then posts replay data to the LensMCP bridge on the configured host and port.
Attack narrative
When enabled through normal Vite configuration, the plugin enables replay by default and injects a browser recorder. Its defaults leave input values unmasked and explicitly disable password masking, then upload replay data to the local LensMCP bridge. This collects credentials from app users without a separate replay opt-in; no unrelated external collector was found.
AI rationale
The default replay path captures unmasked form values, including passwords, and sends them to the local LensMCP receiver. Although replay fits the package's observability purpose and the inspected endpoint is local, automatic collection of credentials is unnecessary for that purpose and warrants blocking.
Evidence
lib/replay-setting.jslib/plugin.js.lpm-dependency-evidence-feadea18-818d-4046-8252-efc0b803611b/1/npm-linux/lib/replay/types.js.lpm-dependency-evidence-feadea18-818d-4046-8252-efc0b803611b/1/npm-linux/lib/replay/recorder.js.lpm-dependency-evidence-feadea18-818d-4046-8252-efc0b803611b/1/npm-linux/lib/replay/uploader.js
Network endpoints2
ws://127.0.0.1:<ephemeral>/?token=...127.0.0.1:<ephemeral>/replay/*
Decision evidence
public snapshotAI called this Malicious at 90.0% confidence as Malware with low false-positive risk.
Evidence for block
- With no explicit replay setting, a missing or unreadable capture file makes replay enabled by default.
- When replay is enabled, the Vite plugin injects its replay module into served pages.
- The replay recorder defaults to unmasked inputs and explicitly disables password masking.
- Replay uploads use an HTTP endpoint built from the bridge host and port; the bridge defaults to 127.0.0.1.
Evidence against
- The package is presented as a development observability plugin that captures browser events for LensMCP.
- The inspected replay transport points to the local bridge; no unrelated external collector was identified.
- The package metadata has no lifecycle scripts; the plugin activates when configured in Vite.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
6 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L12transformIndexHtml(){if(!a||!s)return;const t=[{tag:"script",attrs:{type:"module",src:j},injectTo:"head-prepend"}];return b()&&t.push({tag:"script",attrs:{type:"module",src:U},injectTo:"head
High
Ai Review Evidence
When replay is enabled, the Vite plugin injects its replay module into served pages.
lib/plugin.jsView on unpkg · L22ws://${e.host}:${e.port}${e.token?`/?${re}=${encodeURIComponent(e.token)}`:""}`,s=e.replay?`{ endpoint: ${JSON.stringify(`http://${e.host}:${e.port}`)
High
Findings
6 High2 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
HighAi Review Evidencelib/replay-setting.js
HighAi Review Evidencelib/plugin.js
HighAi Review Evidence.lpm-dependency-evidence-feadea18-818d-4046-8252-efc0b803611b/1/npm-linux/lib/replay/recorder.js
HighAi Review Evidencelib/plugin.js
HighAi Review Evidence.lpm-dependency-evidence-feadea18-818d-4046-8252-efc0b803611b/0/npm-linux/lib/constants.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.39.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Avoid installing @lensmcp/vite-plugin@1.25.39. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.