@lensmcp/vite-plugin@1.25.40
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe plugin’s replay setting defaults to enabled, and the injected client captures interaction text and sends replay data to the LensMCP endpoint. The package documents browser-event forwarding generally but does not disclose that session replay starts automatically, so this warrants a warning rather than a malware block.
Decision evidence
public snapshot- Replay is enabled by default unless LENSMCP_REPLAY is explicitly disabled, an option overrides it, or capture configuration disables it.
- The plugin injects the replay client when replay is enabled and starts a local bridge when the Vite dev server is configured.
- Replay records interaction targets, including their visible text and labels, and uploads recording data to the configured endpoint.
- The package documentation describes captured browser events sent over a local WebSocket, but does not disclose automatic session replay.
- The plugin’s stated purpose is browser-event instrumentation and forwarding captured events to LensMCP over a local WebSocket.
- The bridge defaults to host 127.0.0.1; no unrelated external collector is identified in the inspected replay path.
- The replay feature supports explicit disablement through configuration or LENSMCP_REPLAY.
Source & flagged code
8 flaggedPackage metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L1Source fingerprint signature matches a known malicious package signature; route for source-aware review.
lib/plugin.jsView on unpkgThe plugin injects the replay client when replay is enabled and starts a local bridge when the Vite dev server is configured.
lib/plugin.jsView on unpkg · L1A newly added or changed runtime dependency can resolve to an independently confirmed malicious package version.
package.jsonView on unpkgReplay is enabled by default unless LENSMCP_REPLAY is explicitly disabled, an option overrides it, or capture configuration disables it.
lib/replay-setting.jsView on unpkg · L1Replay records interaction targets, including their visible text and labels, and uploads recording data to the configured endpoint.
.lpm-dependency-evidence-e3331674-ea0c-488c-823a-5193f7346a16/1/npm-linux/lib/replay/target.jsView on unpkg · L1Replay records interaction targets, including their visible text and labels, and uploads recording data to the configured endpoint.
.lpm-dependency-evidence-e3331674-ea0c-488c-823a-5193f7346a16/1/npm-linux/lib/replay/uploader.jsView on unpkg · L1The package documentation describes captured browser events sent over a local WebSocket, but does not disclose automatic session replay.
README.mdView on unpkg · L7Findings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.40.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.