Loading npm security reports…
Native Messaging Host for Mearl — bridges Chrome Extension and local socket server
LPM treats this as warn-only first-party agent extension lifecycle risk. Npm postinstall runs the native-host binary with --init and registers first-party Chrome Native Messaging hosts for the Mearl extension. A matching Chrome extension can later launch this local process. This is package-owned host setup, not a write into foreign agent product configs.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L2Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgA single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L97Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L2Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/install.jsView on unpkg · L1This report applies to @mearl/native-host@2.9.3.
See version security history for other recorded verdicts.
Evidence last updated: .
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L766Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/index.jsView on unpkg · L67A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg · L2This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkgManifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgSource combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L85Source reaches cloud instance metadata or link-local credential endpoints.
dist/index.jsView on unpkg · L2Source exposes local file and command tools to a remote model endpoint.
dist/index.jsView on unpkg · L100A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L85A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkgInstall-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L2A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L97Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L2Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/install.jsView on unpkg · L1Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L54Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L54Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L766Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
dist/index.jsView on unpkg · L67A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg · L2This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkgManifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgSource combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L85Source reaches cloud instance metadata or link-local credential endpoints.
dist/index.jsView on unpkg · L2Source exposes local file and command tools to a remote model endpoint.
dist/index.jsView on unpkg · L100A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/index.jsView on unpkg · L85A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.jsView on unpkg