@lensmcp/vite-plugin@1.25.44
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe plugin enables browser replay by default, and the recorder config explicitly leaves password values unmasked before uploading replay data. This automatically collects credentials that the observability purpose does not need, so the package should be blocked.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
A Vite development server uses the plugin and serves a page with replay enabled; replay is enabled by default when no capture setting disables it.
Impact
Credentials entered into instrumented pages can be captured and made available through the replay service without an explicit replay opt-in.
Mechanism
The injected replay recorder captures page state and input events without masking password values, then POSTs replay data to the configured bridge.
Attack narrative
When the plugin serves a page with replay enabled, its recorder captures password inputs without masking them and uploads replay data to the bridge. Replay is enabled by default when no capture setting disables it, so users can expose credentials entered into an instrumented app without explicitly opting into replay.
AI rationale
The plugin enables browser replay by default, and the recorder config explicitly leaves password values unmasked before uploading replay data. This automatically collects credentials that the observability purpose does not need, so the package should be blocked.
Evidence
lib/replay-setting.jslib/plugin.js.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.js.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.js.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.js
Network endpoints2
127.0.0.1:<ephemeral-port>/replay127.0.0.1:<ephemeral-port>/replay/blob
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- Replay defaults to enabled when no capture setting is present.
- When replay is enabled, the Vite plugin injects its replay module into served pages.
- The recorder’s defaults disable masking of all inputs and explicitly set password masking to false.
- The plugin configures replay to use its bridge host and port; the default host is 127.0.0.1.
- The replay uploader POSTs replay data and blobs to the bridge’s /replay and /replay/blob paths.
Evidence against
- The package is intended to provide browser observability, and its replay upload destination defaults to a local bridge.
- The manifest has no lifecycle scripts; replay runs when the configured Vite development server serves a page.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
9 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L1•matchType = malicious_source_fingerprint_signature
signature = 118688338f0ed54a
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @lensmcp/vite-plugin@1.25.41
matchedPath = lib/plugin.js
matchedIdentity = npm:QGxlbnNtY3Avdml0ZS1wbHVnaW4:1.25.41
similarity = 1.000
shingleOverlap = 5
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
lib/plugin.jsView on unpkg2transformIndexHtml(){if(!a||!s)return;const t=[{tag:"script",attrs:{type:"module",src:j},injectTo:"head-prepend"}];return b()&&t.push({tag:"script",attrs:{type:"module",src:U},inje
Findings
9 High2 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
HighKnown Malware Source Fingerprint Signaturelib/plugin.js
HighAi Review Evidencelib/replay-setting.js
HighAi Review Evidencelib/plugin.js
HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/types.js
HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/recorder.js
HighAi Review Evidencelib/plugin.js
HighAi Review Evidencelib/plugin.js
HighAi Review Evidence.lpm-dependency-evidence-89a85519-0329-4054-89ec-9c38d0d6885b/1/npm-linux/lib/replay/uploader.js
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.44.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Avoid installing @lensmcp/vite-plugin@1.25.44. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.