@lensmcp/vite-plugin@1.25.42
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe plugin's default behavior includes browser session replay that is not described in its README, so users may not expect page activity to be captured. The inspected upload path targets the configured local bridge, and I found no unrelated external collector or credential theft; this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
A project enables the plugin and runs Vite in serve mode; replay defaults to enabled.
Impact
Page-session data may be captured and delivered to the local LensMCP runtime without the replay behavior being described in the README.
Mechanism
The plugin injects a replay module that starts a recorder and posts replay data to the configured host and port.
AI rationale
The plugin's default behavior includes browser session replay that is not described in its README, so users may not expect page activity to be captured. The inspected upload path targets the configured local bridge, and I found no unrelated external collector or credential theft; this warrants a warning rather than a block.
Evidence
lib/replay-setting.jslib/plugin.js.lpm-dependency-evidence-7206ef60-c836-4cef-9dfe-f10b3baf3edf/1/npm-linux/lib/replay/start.js.lpm-dependency-evidence-7206ef60-c836-4cef-9dfe-f10b3baf3edf/1/npm-linux/replay-source.js
Network endpoints2
127.0.0.1:<ephemeral-port> (default replay endpoint; host and port configurable)ws://127.0.0.1:<ephemeral-port> (default browser event bridge; host and port configurable)
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Session replay is enabled by default unless disabled by an environment setting, plugin option, or capture file.
- When replay is enabled, the Vite plugin injects a replay script; the recorder starts automatically and tracks page interactions.
- Replay data is POSTed to the configured endpoint; the plugin builds that endpoint from its host and port settings.
- The README describes browser event streaming over a local WebSocket but does not mention session replay.
Evidence against
- The plugin is intended for development-time browser observability, and its README describes sending captured events to a local WebSocket.
- The replay endpoint defaults to the plugin's loopback host; no unrelated external collector was identified.
- The package entry point exports the plugin and does not start it on import.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
7 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L1•matchType = malicious_source_fingerprint_signature
signature = 118688338f0ed54a
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @lensmcp/vite-plugin@1.25.41
matchedPath = lib/plugin.js
matchedIdentity = npm:QGxlbnNtY3Avdml0ZS1wbHVnaW4:1.25.41
similarity = 1.000
shingleOverlap = 5
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
lib/plugin.jsView on unpkg2t,r);return h?{code:h.code,map:h.map}:null},transformIndexHtml(){if(!a||!s)return;const t=[{tag:"script",attrs:{type:"module",src:j},injectTo:"head-prepend"}];return b()&&t.push({tag:"script",attrs:{type:"module",src:U},injectTo:"head-prepend"}),t},handleHotUp
Findings
2 High7 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
HighKnown Malware Source Fingerprint Signaturelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencelib/replay-setting.js
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidence.lpm-dependency-evidence-7206ef60-c836-4cef-9dfe-f10b3baf3edf/1/npm-linux/lib/replay/start.js
MediumAi Review Evidence.lpm-dependency-evidence-7206ef60-c836-4cef-9dfe-f10b3baf3edf/1/npm-linux/replay-source.js
MediumAi Review EvidenceREADME.md
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.42.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.42 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.