registry / Telemetry / @lightupai/polaris

@lightupai/polaris

Record and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.

This report shows the evidence for @lightupai/polaris@0.0.175. 0 of 49 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The web app automatically sends signup identities and organization details to an internal Slack channel, and periodically sends signup rollups. This is suspicious runtime telemetry because the inspected source does not disclose this collection or offer a user choice; no credential exfiltration or install-time attack was identified.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user signs up or joins an organization, or the web app’s hourly signup rollup runs.

Impact

Signup details are disclosed to the app operator’s Slack workspace without clear disclosure or user choice in the inspected source.

Mechanism

The app posts signup names, emails, domains, and organization names to Slack using SIGNUP_SLACK_BOT_TOKEN.

AI rationale

Evidence

src/web/app.ts

Network endpoints1

slack.com/api/chat.postMessage

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

Signup and plan notifications include users’ names, email addresses, organization names, and domains, and are sent to Slack.
The signup notification runs automatically after account creation; the source labels it a notification to the internal team.
The web app starts an hourly signup rollup that sends recent signup details to Slack.

Evidence against

The manifest has no install lifecycle scripts; the Slack behavior is in the web app, not an install hook.
The package describes session streaming to Slack as a core feature, and uses a configured Slack bot token for notifications.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

Source & flagged code

7 flagged

scripts/perf-audit.tsView file

14import { mkdirSync, writeFileSync } from "fs"; L15: import { execSync } from "child_process"; L16: import { join } from "path";

High

Child Process

Package source references child process execution.

scripts/perf-audit.tsView on unpkg · L14

33console.log(" Building CSS and starting local server ..."); L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" }); L35: L36: const port = await freePort(); L37: url = `http://localhost:${port}`; L38: L39: const proc = Bun.spawn(["bun", "run", "src/web/serve.ts"], { L40: env: { ...process.env, WEB_PORT: String(port), DATABASE_URL: process.env.DATABASE_URL ?? "postgres://polaris:polaris@localhost:5432/polaris" }, L41: stdout: "pipe",

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/perf-audit.tsView on unpkg · L33

33console.log(" Building CSS and starting local server ..."); L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" }); L35:

Findings

2 Critical5 High5 Medium5 Low

CriticalCredential Exfiltrationsrc/web/app.ts

CriticalPrevious Version Dangerous Deltasrc/daemon/daemon.ts

HighChild Processscripts/perf-audit.ts

HighShell

HighSame File Env Network Executionscripts/perf-audit.ts

HighRuntime Package Installscripts/perf-audit.ts

HighSemantic Analysis Limitedbin/polaris

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdocker/bridge-entrypoint.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @lightupai/polaris@0.0.175.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @lightupai/polaris@0.0.175 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 04:32:08.586Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

49 known versions

0.0.175latestshownSuspiciousTelemetryWarnPublishedNov 3, 2026, 4:29 AM 0.0.174Clean—AllowPublishedNov 3, 2026, 12:44 AM 0.0.173Clean—AllowPublishedNov 3, 2026, 12:25 AM 0.0.171Clean—AllowPublishedNov 2, 2026, 11:44 PM

registry / Telemetry / @lightupai/polaris

@lightupai/polaris

Record and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.

This report shows the evidence for @lightupai/polaris@0.0.175. 0 of 49 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user signs up or joins an organization, or the web app’s hourly signup rollup runs.

Impact

Signup details are disclosed to the app operator’s Slack workspace without clear disclosure or user choice in the inspected source.

Mechanism

The app posts signup names, emails, domains, and organization names to Slack using SIGNUP_SLACK_BOT_TOKEN.

AI rationale

Evidence

src/web/app.ts

Network endpoints1

slack.com/api/chat.postMessage

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

Signup and plan notifications include users’ names, email addresses, organization names, and domains, and are sent to Slack.
The signup notification runs automatically after account creation; the source labels it a notification to the internal team.
The web app starts an hourly signup rollup that sends recent signup details to Slack.

Evidence against

The manifest has no install lifecycle scripts; the Slack behavior is in the web app, not an install hook.
The package describes session streaming to Slack as a core feature, and uses a configured Slack bot token for notifications.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

Source & flagged code

7 flagged

scripts/perf-audit.tsView file

14import { mkdirSync, writeFileSync } from "fs"; L15: import { execSync } from "child_process"; L16: import { join } from "path";

High

Child Process

Package source references child process execution.

scripts/perf-audit.tsView on unpkg · L14

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/perf-audit.tsView on unpkg · L33

33console.log(" Building CSS and starting local server ..."); L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" }); L35:

Findings

2 Critical5 High5 Medium5 Low

CriticalCredential Exfiltrationsrc/web/app.ts

CriticalPrevious Version Dangerous Deltasrc/daemon/daemon.ts

HighChild Processscripts/perf-audit.ts

HighShell

HighSame File Env Network Executionscripts/perf-audit.ts

HighRuntime Package Installscripts/perf-audit.ts

HighSemantic Analysis Limitedbin/polaris

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdocker/bridge-entrypoint.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @lightupai/polaris@0.0.175.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @lightupai/polaris@0.0.175 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 04:32:08.586Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

49 known versions