registry / @lh8ppl/claude-memory-kit / 0.4.4

@lh8ppl/claude-memory-kit@0.4.4

cmk — the CLI for claude-memory-kit. Per-project, in-repo memory system for Claude Code.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 109 file(s), 1.20 MB of source, external domains: www.apple.com

Source & flagged code

5 flagged

src/poison-guard.mjsView file

Lines 78-118javascript

78 },

79 // AWS secret access key in a key=value shape. The value pattern is

80 // intentionally lenient (40-char Base64-ish) because real AWS secret

81 // keys are 40 chars of Base64. We require the `aws_secret` token

82 // nearby to gate on intent.

83 {

84 id: 'secret_aws_secret_access_key',

85 category: 'secret',

86 re: /(?:aws[_-]?secret[_-]?(?:access[_-]?)?key)[\s:=]+["']?[A-Za-z0-9/+=]{16,}/i,

87 },

88 // Generic api_key / secret / password / passwd / token / bearer

89 // in a key=value shape. 20-char minimum on the value catches

90 // realistic key shapes without flagging short test fixtures

91 // (api_key=abc123 → only 6 chars, skipped).

92 {

93 id: 'secret_generic_credential',

94 category: 'secret',

95 re: /(?:api[_-]?key|secret|password|passwd|token|bearer)[\s:=]+["']?[A-Za-z0-9_\-/+=]{20,}/i,

96 },

97 // PEM private key armor. The "RSA "/"EC "/"OPENSSH "/"PGP "

98 // variants are optional, so plain `-----BEGIN PRIVATE KEY-----`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L98

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L98

99 // also matches.

100 {

101 id: 'secret_pem_private_key',

102 category: 'secret',

103 re: /-----BEGIN (?:RSA |EC |OPENSSH |PGP |DSA |ENCRYPTED )?PRIVATE KEY-----/,

104 },

105 // GitHub personal access token: ghp_ prefix + 36 alphanumeric.

106 // No trailing \b — adjacent alphanumeric padding (in tests; rare in

107 // real input but possible) shouldn't suppress detection. Leading \b

108 // is enough to prevent matching mid-identifier (e.g. "xghp_..." is

109 // not a token).

110 {

111 id: 'secret_github_pat',

112 category: 'secret',

113 re: /\bghp_[A-Za-z0-9]{36}/,

114 },

115 // Task 134: the other GitHub token classes — OAuth (gho_), user-to-server

116 // (ghu_), server-to-server (ghs_), refresh (ghr_). Same ghp_ shape (prefix

117 // + 36 alnum); the 36-char floor is what keeps "ghost"/"ghs config" prose

118 // out (a real English word can't reach prefix+36 alphanumerics).

bin/cmk-weekly-curate.mjsView file

Lines 8-48javascript

8//

9// Composes on weeklyCurate() per design §8.7.1. Always exits 0 — a

10// crashed cron job rotates noise into the scheduler logs without any

11// recovery affordance for the user; the kit's curate.log NDJSON +

12// cooldown marker are the load-bearing observability surfaces.

14import { dirname, join } from 'node:path';

15import { homedir } from 'node:os';

16import { fileURLToPath, pathToFileURL }

src/register-crons.mjsView file

Lines 1-24javascript

1// Cross-platform host-scheduler registration (Task 33.2, T-028).

2//

3// Composes the platform-native scheduler primitive on each OS so the

4// daily-distill bin wrapper runs at 23:00 local time without users

5// learning crontab / launchd / schtasks themselves.

6//

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

7// Per design §8.6.2:

8// Linux → crontab pipe pattern (idempotent via grep -v + re-add)

9// macOS → launchd plist + launchctl bootstrap

src/inject-context.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @lh8ppl/claude-memory-kit@0.4.3 matchedIdentity = npm:[redacted]:0.4.3 similarity = 0.821 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/inject-context.mjsView on unpkg

Source & flagged code

5 flagged · loading source

src/poison-guard.mjsView file

98patternName = private_key_rsa severity = critical line = 98 matchedText = // varia...---`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L98

98patternName = private_key_rsa severity = critical line = 98 matchedText = // varia...---`

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L98

bin/cmk-weekly-curate.mjsView file

28try { L29: ({ weeklyCurate } = await import(pathToFileURL(weeklyCurateModulePath).href)); L30: ({ HaikuViaAnthropicApi } = await import(pathToFileURL(compressorModulePath).href));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cmk-weekly-curate.mjsView on unpkg · L28

src/register-crons.mjsView file

4// daily-distill bin wrapper runs at 23:00 local time without users L5: // learning crontab / launchd / schtasks themselves. L6: // ... L30: L31: import { spawnSync } from 'node:child_process'; L32: import { existsSync, mkdirSync, writeFileSync, unlinkSync } from 'node:fs'; ... L56: export function detectPlatform() { L57: return process.platform; // 'linux' | 'darwin' | 'win32' (other: bsd etc.) L58: } ... L70: function macOsPlistPath(entryName) { L71: return join(homedir(), 'Library', 'LaunchAgents', `com.cmk.${entryName}.plist`); L72: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

src/inject-context.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/inject-context.mjsView on unpkg

Findings

2 Critical1 High4 Medium5 Low

CriticalCritical Secretsrc/poison-guard.mjs

CriticalSecret Patternsrc/poison-guard.mjs

HighPrevious Version Dangerous Deltasrc/inject-context.mjs

MediumDynamic Requirebin/cmk-weekly-curate.mjs

MediumEnvironment Vars

MediumInstall Persistencesrc/register-crons.mjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

src/poison-guard.mjsView file

Lines 78-118javascript

78 },

79 // AWS secret access key in a key=value shape. The value pattern is

80 // intentionally lenient (40-char Base64-ish) because real AWS secret

81 // keys are 40 chars of Base64. We require the `aws_secret` token

82 // nearby to gate on intent.

83 {

84 id: 'secret_aws_secret_access_key',

85 category: 'secret',

86 re: /(?:aws[_-]?secret[_-]?(?:access[_-]?)?key)[\s:=]+["']?[A-Za-z0-9/+=]{16,}/i,

87 },

88 // Generic api_key / secret / password / passwd / token / bearer

89 // in a key=value shape. 20-char minimum on the value catches

90 // realistic key shapes without flagging short test fixtures

91 // (api_key=abc123 → only 6 chars, skipped).

92 {

93 id: 'secret_generic_credential',

94 category: 'secret',

95 re: /(?:api[_-]?key|secret|password|passwd|token|bearer)[\s:=]+["']?[A-Za-z0-9_\-/+=]{20,}/i,

96 },

97 // PEM private key armor. The "RSA "/"EC "/"OPENSSH "/"PGP "

98 // variants are optional, so plain `-----BEGIN PRIVATE KEY-----`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L98

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L98

99 // also matches.

100 {

101 id: 'secret_pem_private_key',

102 category: 'secret',

103 re: /-----BEGIN (?:RSA |EC |OPENSSH |PGP |DSA |ENCRYPTED )?PRIVATE KEY-----/,

104 },

105 // GitHub personal access token: ghp_ prefix + 36 alphanumeric.

106 // No trailing \b — adjacent alphanumeric padding (in tests; rare in

107 // real input but possible) shouldn't suppress detection. Leading \b

108 // is enough to prevent matching mid-identifier (e.g. "xghp_..." is

109 // not a token).

110 {

111 id: 'secret_github_pat',

112 category: 'secret',

113 re: /\bghp_[A-Za-z0-9]{36}/,

114 },

115 // Task 134: the other GitHub token classes — OAuth (gho_), user-to-server

116 // (ghu_), server-to-server (ghs_), refresh (ghr_). Same ghp_ shape (prefix

117 // + 36 alnum); the 36-char floor is what keeps "ghost"/"ghs config" prose

118 // out (a real English word can't reach prefix+36 alphanumerics).

bin/cmk-weekly-curate.mjsView file

Lines 8-48javascript

8//

9// Composes on weeklyCurate() per design §8.7.1. Always exits 0 — a

10// crashed cron job rotates noise into the scheduler logs without any

11// recovery affordance for the user; the kit's curate.log NDJSON +

12// cooldown marker are the load-bearing observability surfaces.

14import { dirname, join } from 'node:path';

15import { homedir } from 'node:os';

16import { fileURLToPath, pathToFileURL }

src/register-crons.mjsView file

Lines 1-24javascript

1// Cross-platform host-scheduler registration (Task 33.2, T-028).

2//

3// Composes the platform-native scheduler primitive on each OS so the

4// daily-distill bin wrapper runs at 23:00 local time without users

5// learning crontab / launchd / schtasks themselves.

6//

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

7// Per design §8.6.2:

8// Linux → crontab pipe pattern (idempotent via grep -v + re-add)

9// macOS → launchd plist + launchctl bootstrap

src/inject-context.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/inject-context.mjsView on unpkg