registry / @melaya/runner / 1.1.55
@melaya/runner@1.1.55
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiStatic inspection found no confirmed attack behavior. The declared runtime dependencies playwright and socket.io-client were not available for source review, so their behavior remains unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The unresolved dependency behavior would be activated when the runner imports or uses those dependencies.
Impact
The available source does not establish malicious impact, but the dependency behavior cannot be cleared by this inspection.
Mechanism
The package uses socket.io-client for its cloud connection and playwright for browser discovery; their dependency source could not be assessed here.
AI rationale
Static inspection found no confirmed attack behavior. The declared runtime dependencies playwright and socket.io-client were not available for source review, so their behavior remains unresolved.
Evidence
package.jsondist/connection.jsdist/browserProvisioner.js
Network endpoints1
api.anthropic.com/v1/models?limit=100
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares playwright and socket.io-client as runtime dependencies; the package imports them for browser discovery and its cloud connection, but their source is not included in the inspected dependency snapshot.
- The CLI reads local Claude and Codex credentials to detect available models; the Claude token is sent to Anthropic’s model-list endpoint for that purpose.
- The runner handles server pipeline events and checks a code signature before proceeding.
Evidence against
- The manifest has no npm install hook; its prepublishOnly script runs the build.
- Inspected credential flow is consistent with provider model detection, and the pipeline event handler includes a signature check.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalDbProbe.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.55.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.55 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.