registry / @melaya/runner / 1.1.51
@melaya/runner@1.1.51
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiInspected source shows provider-directed credential use and runner-aligned reporting, with no confirmed attack behavior. Source for the selected Playwright and Socket.IO client dependencies was unavailable, so their behavior remains unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Importing the runner loads its connection module and declared runtime dependencies.
Impact
The available evidence does not establish an attack, but the incomplete dependency source prevents a clean verdict.
Mechanism
The available source shows provider-specific model checks, runner-server failure reporting, and user-initiated browser sign-in behavior; the behavior of two selected dependencies could not be reviewed.
AI rationale
Inspected source shows provider-directed credential use and runner-aligned reporting, with no confirmed attack behavior. Source for the selected Playwright and Socket.IO client dependencies was unavailable, so their behavior remains unresolved.
Evidence
package.jsondist/connection.jsdist/detect.jsdist/installReport.jsdist/lumaLogin.js
Network endpoints3
api.anthropic.com/v1/models?limit=100api.github.com/copilot_internal/v2/tokenapi.melaya.org
Decision evidence
public snapshotAI called this Manual Review at 83.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package declares Playwright and Socket.IO client as runtime dependencies, and the connection module imports the Socket.IO client.
- Local model detection reads saved provider credentials and sends them to the corresponding provider API to check available models.
- Install-failure reporting requires a runner token and posts to the configured server, defaulting to Melaya; it can be disabled with an environment setting.
- The browser provisioner describes Chromium setup as explicitly gated, and Luma login stores browser session state under the Melaya user directory.
Evidence against
- The inspected package snapshot does not include source for the selected Playwright and Socket.IO client dependencies, so their behavior could not be resolved.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalDbProbe.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.51.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.51 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.