@lensmcp/vite-plugin@1.25.51
LensMCP Vite plugin — valtio alias, source transform, and browser event bridge.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package is a legitimate observability plugin, but replay is enabled when its settings cannot be read and the README does not specifically disclose session replay. Because this captures app session activity automatically, warn users; the inspected path sends it to the local bridge rather than an unrelated collector.
Static reason
One or more suspicious static signals were detected.
Trigger
A user adds the plugin and starts a Vite dev server; replay starts when no disabling setting is present and capture settings cannot be read.
Impact
Application session activity may be recorded and sent to the local LensMCP runtime without the README explicitly describing replay collection.
Mechanism
The plugin injects a replay module and supplies it with an HTTP endpoint built from the configured host and port. The default host is loopback.
AI rationale
The package is a legitimate observability plugin, but replay is enabled when its settings cannot be read and the README does not specifically disclose session replay. Because this captures app session activity automatically, warn users; the inspected path sends it to the local bridge rather than an unrelated collector.
Evidence
lib/replay-setting.jslib/plugin.js.lpm-dependency-evidence-82ee2a56-9b55-44c6-be10-3e633fc08773/1/npm-linux/replay-source.js
Network endpoints1
127.0.0.1:<runtime port>
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- When LENSMCP_REPLAY and the replay option are unset, failure to read the capture settings makes replayEnabled return true.
- In Vite's HTML transform, the plugin injects the replay module whenever replay is enabled.
- The replay recorder starts with a dynamically built HTTP endpoint using the plugin's host and port; the default host is 127.0.0.1.
- The package describes its normal browser event streaming, but does not disclose session replay in that description.
Evidence against
- The package has no lifecycle scripts; it runs as a Vite plugin when configured.
- The bridge defaults to loopback and requires a per-server token for WebSocket connections.
- The package's stated purpose is frontend observability, and it documents streaming app events to LensMCP.
Behavioral surface
EnvironmentVars
HighEntropyStringsMinified
Source & flagged code
5 flaggedlib/plugin.jsView file
1package = @lensmcp/vite-plugin; repositoryIdentity = lensmcp; dependency = @babel/core
L1: "use strict";var z=Object.defineProperty;var g=(e,n)=>z(e,"name",{value:n,configurable:!0});var Z=Object.defineProperty,d=g((e,n)=>Z(e,"name",{value:n,configurable:!0}),"c");import...
L2: `);if(t!==B)return null;const u=f??e.wsPort??0,r=process.env.LENSMCP_APP||process.env.NX_TASK_TARGET_PROJECT;return buildInlineClientRuntime({host:p,port:u,token:o,hmrRecovery:e.hm...
L3: (() => {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/plugin.jsView on unpkg · L12return b()&&t.push({tag:"script",attrs:{type:"module",src:U},injectTo:"head-prepend"}),t},handleHotUpdate(t){if(!s)return;const u=t.modules.map(h=>h.file??h.id??null).filter(h=>!!h
Medium
Ai Review Evidence
In Vite's HTML transform, the plugin injects the replay module whenever replay is enabled.
lib/plugin.jsView on unpkg · L2lib/replay-setting.jsView file
Findings
1 High6 Medium1 Low
HighCopied Package Dependency Bridgelib/plugin.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencelib/replay-setting.js
MediumAi Review Evidencelib/plugin.js
MediumAi Review Evidence.lpm-dependency-evidence-82ee2a56-9b55-44c6-be10-3e633fc08773/1/npm-linux/replay-source.js
MediumAi Review EvidenceREADME.md
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @lensmcp/vite-plugin@1.25.51.
See all versions of @lensmcp/vite-plugin for other recorded verdicts.
- Review the evidence and your use of @lensmcp/vite-plugin@1.25.51 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.