registry / @melaya/runner / 1.1.46
@melaya/runner@1.1.46
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiManual review is warranted because the package selects Playwright and Socket.IO as runtime dependencies, but their source was unavailable in the inspected snapshot. The reviewed package code shows expected service authentication and browser setup, with no confirmed attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Using the runner paths that connect to Melaya or start browser login.
Impact
No malicious effect was confirmed, but those dependency behaviors could not be assessed.
Mechanism
The package imports Socket.IO and dynamically loads Playwright; the corresponding selected dependency source was not available for review.
AI rationale
Manual review is warranted because the package selects Playwright and Socket.IO as runtime dependencies, but their source was unavailable in the inspected snapshot. The reviewed package code shows expected service authentication and browser setup, with no confirmed attack behavior.
Evidence
package.jsondist/connection.jsdist/lumaLogin.js
Decision evidence
public snapshotAI called this Manual Review at 68.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares Playwright and Socket.IO as runtime dependencies.
- The runner uses Socket.IO to connect to the Melaya service.
- The login flow dynamically imports Playwright for browser setup.
- During model detection, the available source sends saved credentials to the matching Anthropic or GitHub API.
Evidence against
- No attack behavior was confirmed in the package source inspected.
- Source for the selected Playwright and Socket.IO dependency releases was unavailable for inspection.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalDbProbe.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.46.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.