registry / @lh8ppl/claude-memory-kit / 0.5.2

@lh8ppl/claude-memory-kit@0.5.2

cmk — the CLI for claude-memory-kit. Per-project, in-repo memory system for Claude Code.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 128 file(s), 1.47 MB of source, external domains: www.apple.com

Source & flagged code

5 flagged

src/poison-guard.mjsView file

Lines 79-119javascript

79 },

80 // AWS secret access key in a key=value shape. The value pattern is

81 // intentionally lenient (40-char Base64-ish) because real AWS secret

82 // keys are 40 chars of Base64. We require the `aws_secret` token

83 // nearby to gate on intent.

84 {

85 id: 'secret_aws_secret_access_key',

86 category: 'secret',

87 re: /(?:aws[_-]?secret[_-]?(?:access[_-]?)?key)[\s:=]+["']?[A-Za-z0-9/+=]{16,}/i,

88 },

89 // Generic api_key / secret / password / passwd / token / bearer

90 // in a key=value shape. 20-char minimum on the value catches

91 // realistic key shapes without flagging short test fixtures

92 // (api_key=abc123 → only 6 chars, skipped).

93 {

94 id: 'secret_generic_credential',

95 category: 'secret',

96 re: /(?:api[_-]?key|secret|password|passwd|token|bearer)[\s:=]+["']?[A-Za-z0-9_\-/+=]{20,}/i,

97 },

98 // PEM private key armor. The "RSA "/"EC "/"OPENSSH "/"PGP "

99 // variants are optional, so plain `-----BEGIN PRIVATE KEY-----`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L99

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L99

100 // also matches.

101 {

102 id: 'secret_pem_private_key',

103 category: 'secret',

104 re: /-----BEGIN (?:RSA |EC |OPENSSH |PGP |DSA |ENCRYPTED )?PRIVATE KEY-----/,

105 },

106 // GitHub personal access token: ghp_ prefix + 36 alphanumeric.

107 // No trailing \b — adjacent alphanumeric padding (in tests; rare in

108 // real input but possible) shouldn't suppress detection. Leading \b

109 // is enough to prevent matching mid-identifier (e.g. "xghp_..." is

110 // not a token).

111 {

112 id: 'secret_github_pat',

113 category: 'secret',

114 re: /\bghp_[A-Za-z0-9]{36}/,

115 },

116 // Task 134: the other GitHub token classes — OAuth (gho_), user-to-server

117 // (ghu_), server-to-server (ghs_), refresh (ghr_). Same ghp_ shape (prefix

118 // + 36 alnum); the 36-char floor is what keeps "ghost"/"ghs config" prose

119 // out (a real English word can't reach prefix+36 alphanumerics).

bin/cmk-weekly-curate.mjsView file

Lines 8-48javascript

8//

9// Composes on weeklyCurate() per design §8.7.1. Always exits 0 — a

10// crashed cron job rotates noise into the scheduler logs without any

11// recovery affordance for the user; the kit's curate.log NDJSON +

12// cooldown marker are the load-bearing observability surfaces.

14import { dirname, join } from 'node:path';

15import { homedir } from 'node:os';

16import { fileURLToPath, pathToFileURL }

src/register-crons.mjsView file

Lines 1-24javascript

1// Cross-platform host-scheduler registration (Task 33.2, T-028).

2//

3// Composes the platform-native scheduler primitive on each OS so the

4// daily-distill bin wrapper runs at 23:00 local time without users

5// learning crontab / launchd / schtasks themselves.

6//

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

7// Per design §8.6.2:

8// Linux → crontab pipe pattern (idempotent via grep -v + re-add)

9// macOS → launchd plist + launchctl bootstrap

Source & flagged code

5 flagged · loading source

src/poison-guard.mjsView file

99patternName = private_key_rsa severity = critical line = 99 matchedText = // varia...---`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L99

99patternName = private_key_rsa severity = critical line = 99 matchedText = // varia...---`

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L99

bin/cmk-weekly-curate.mjsView file

28try { L29: ({ weeklyCurate } = await import(pathToFileURL(weeklyCurateModulePath).href)); L30: ({ makeBackend } = await import(pathToFileURL(makeBackendModulePath).href));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cmk-weekly-curate.mjsView on unpkg · L28

src/register-crons.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @lh8ppl/claude-memory-kit@0.4.4 matchedIdentity = npm:[redacted]:0.4.4 similarity = 0.450 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/register-crons.mjsView on unpkg

4// daily-distill bin wrapper runs at 23:00 local time without users L5: // learning crontab / launchd / schtasks themselves. L6: // ... L30: L31: import { spawnSync } from 'node:child_process'; L32: import { existsSync, mkdirSync, writeFileSync, unlinkSync } from 'node:fs'; ... L56: export function detectPlatform() { L57: return process.platform; // 'linux' | 'darwin' | 'win32' (other: bsd etc.) L58: } ... L70: function macOsPlistPath(entryName) { L71: return join(homedir(), 'Library', 'LaunchAgents', `com.cmk.${entryName}.plist`); L72: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

Findings

2 Critical1 High4 Medium5 Low

CriticalCritical Secretsrc/poison-guard.mjs

CriticalSecret Patternsrc/poison-guard.mjs

HighPrevious Version Dangerous Deltasrc/register-crons.mjs

MediumDynamic Requirebin/cmk-weekly-curate.mjs

MediumEnvironment Vars

MediumInstall Persistencesrc/register-crons.mjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

src/poison-guard.mjsView file

Lines 79-119javascript

79 },

80 // AWS secret access key in a key=value shape. The value pattern is

81 // intentionally lenient (40-char Base64-ish) because real AWS secret

82 // keys are 40 chars of Base64. We require the `aws_secret` token

83 // nearby to gate on intent.

84 {

85 id: 'secret_aws_secret_access_key',

86 category: 'secret',

87 re: /(?:aws[_-]?secret[_-]?(?:access[_-]?)?key)[\s:=]+["']?[A-Za-z0-9/+=]{16,}/i,

88 },

89 // Generic api_key / secret / password / passwd / token / bearer

90 // in a key=value shape. 20-char minimum on the value catches

91 // realistic key shapes without flagging short test fixtures

92 // (api_key=abc123 → only 6 chars, skipped).

93 {

94 id: 'secret_generic_credential',

95 category: 'secret',

96 re: /(?:api[_-]?key|secret|password|passwd|token|bearer)[\s:=]+["']?[A-Za-z0-9_\-/+=]{20,}/i,

97 },

98 // PEM private key armor. The "RSA "/"EC "/"OPENSSH "/"PGP "

99 // variants are optional, so plain `-----BEGIN PRIVATE KEY-----`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L99

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L99

100 // also matches.

101 {

102 id: 'secret_pem_private_key',

103 category: 'secret',

104 re: /-----BEGIN (?:RSA |EC |OPENSSH |PGP |DSA |ENCRYPTED )?PRIVATE KEY-----/,

105 },

106 // GitHub personal access token: ghp_ prefix + 36 alphanumeric.

107 // No trailing \b — adjacent alphanumeric padding (in tests; rare in

108 // real input but possible) shouldn't suppress detection. Leading \b

109 // is enough to prevent matching mid-identifier (e.g. "xghp_..." is

110 // not a token).

111 {

112 id: 'secret_github_pat',

113 category: 'secret',

114 re: /\bghp_[A-Za-z0-9]{36}/,

115 },

116 // Task 134: the other GitHub token classes — OAuth (gho_), user-to-server

117 // (ghu_), server-to-server (ghs_), refresh (ghr_). Same ghp_ shape (prefix

118 // + 36 alnum); the 36-char floor is what keeps "ghost"/"ghs config" prose

119 // out (a real English word can't reach prefix+36 alphanumerics).

bin/cmk-weekly-curate.mjsView file

Lines 8-48javascript

8//

9// Composes on weeklyCurate() per design §8.7.1. Always exits 0 — a

10// crashed cron job rotates noise into the scheduler logs without any

11// recovery affordance for the user; the kit's curate.log NDJSON +

12// cooldown marker are the load-bearing observability surfaces.

14import { dirname, join } from 'node:path';

15import { homedir } from 'node:os';

16import { fileURLToPath, pathToFileURL }

src/register-crons.mjsView file

Lines 1-24javascript

1// Cross-platform host-scheduler registration (Task 33.2, T-028).

2//

3// Composes the platform-native scheduler primitive on each OS so the

4// daily-distill bin wrapper runs at 23:00 local time without users

5// learning crontab / launchd / schtasks themselves.

6//

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

7// Per design §8.6.2:

8// Linux → crontab pipe pattern (idempotent via grep -v + re-add)

9// macOS → launchd plist + launchctl bootstrap