registry / @melaya/runner / 1.1.57
@melaya/runner@1.1.57
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected source supports ordinary provider discovery and user-requested Luma sign-in, with browser authorization denying private and metadata targets. The selected Playwright and Socket.IO dependency implementations remain unverified, so the package cannot be marked clean from this source snapshot.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Using the package invokes its runtime dependencies; the inspected Luma browser setup runs only when its sign-in flow is requested.
Impact
The unresolved dependency source prevents a clean determination; inspected package code does not establish an attack.
Mechanism
The package uses Socket.IO to connect to its service and Playwright for browser sign-in, but the dependency implementations could not be inspected in this snapshot.
AI rationale
The inspected source supports ordinary provider discovery and user-requested Luma sign-in, with browser authorization denying private and metadata targets. The selected Playwright and Socket.IO dependency implementations remain unverified, so the package cannot be marked clean from this source snapshot.
Evidence
package.jsondist/connection.jsdist/lumaLogin.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares Playwright and Socket.IO as runtime dependencies, but their implementations are outside the inspected source snapshot.
- The runner connection is described as an authenticated Socket.IO connection to the Melaya cloud server.
- Model discovery sends a locally read Copilot token to GitHub's Copilot token endpoint and uses the returned token to request models.
- Luma sign-in loads Playwright and may install Chromium through npx when that user-initiated flow is run.
- Browser authorization code denies loopback, private, link-local, and metadata addresses.
Evidence against
- The inspected excerpts show provider model discovery and Luma sign-in behavior, but do not establish credential disclosure to an unrelated recipient or another concrete attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalDbProbe.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.57.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.57 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.