registry / @melaya/runner / 1.1.13
@melaya/runner@1.1.13
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiInspected source shows a token-required runner and a Claude model-discovery request to Anthropic, with no confirmed attack behavior. The selected socket.io-client and Playwright dependency source remains unresolved in this snapshot, so the package cannot be cleared as clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Starting the CLI loads its connection code; browser login and browser features also use the selected runtime dependencies.
Impact
No harmful effect is established, but behavior within those dependency implementations remains unverified.
Mechanism
The manifest selects socket.io-client and Playwright, but their selected implementations were not available for source inspection.
AI rationale
Inspected source shows a token-required runner and a Claude model-discovery request to Anthropic, with no confirmed attack behavior. The selected socket.io-client and Playwright dependency source remains unresolved in this snapshot, so the package cannot be cleared as clean.
Evidence
package.jsondist/connection.jsdist/linkedinLogin.jsdist/lumaLogin.js
Network endpoints2
api.anthropic.com/v1/models?limit=100wss://api.melaya.org
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest selects socket.io-client and Playwright, and the runner imports socket.io-client on its connection path; their selected dependency source was not available for inspection in this snapshot.
- The CLI requires a runner token to start.
- Model detection reads a local Claude credential and sends its token to Anthropic's models endpoint.
Evidence against
- The inspected credential transfer is to Anthropic's API for model discovery, consistent with the detector's stated purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/codeWorker.jsView file
51// model (--experimental-permission / --permission): fs read/write
L52: // limited to the scratch dir, child_process and worker_threads denied.
L53: //
High
Child Process
Package source references child process execution.
dist/codeWorker.jsView on unpkg · L51dist/lumaLogin.jsView file
51const child = spawn("npx", ["playwright", "install", "chromium"], {
L52: shell: true,
L53: stdio: ["ignore", "pipe", "pipe"],
High
50progress("Preparing browser for Luma sign-in (one-time setup, ~140 MB)…");
L51: const child = spawn("npx", ["playwright", "install", "chromium"], {
L52: shell: true,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
Findings
1 Critical6 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/codeWorker.js
HighShelldist/lumaLogin.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/localRagIngest.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.13.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.