registry / @melaya/runner / 1.1.61
@melaya/runner@1.1.61
Run Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource review resolves the scanner signals as expected runner behavior: provider tokens are used with provider APIs for model discovery, while the runner token authenticates to the configured platform. No concrete attack behavior was found in the inspected entrypoints, credential callers, provisioning paths, or browser network guard.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user starts the runner with a platform token; connector login and provisioning occur through their respective setup or login flows.
Impact
No confirmed unauthorized credential transfer, destructive behavior, or other attack impact was established.
Mechanism
The runner checks provider availability, connects to the configured platform, and provisions local runtimes or browsers under the inspected guards.
AI rationale
Source review resolves the scanner signals as expected runner behavior: provider tokens are used with provider APIs for model discovery, while the runner token authenticates to the configured platform. No concrete attack behavior was found in the inspected entrypoints, credential callers, provisioning paths, or browser network guard.
Network endpoints5
api.anthropic.comapi.github.comapi.githubcopilot.comapi.melaya.orggithub.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install hook; its prepublishOnly script runs the build.
- Provider detection reads local credentials to check availability. Claude and Copilot tokens go to their respective provider APIs for model discovery; Codex detection checks local auth and reads its model cache.
- The runner requires a platform token and defaults to api.melaya.org; it sends detected model names to that server as part of its connection.
- LinkedIn and Luma login flows are started by connection events, use a browser sign-in, and return captured cookies through the runner connection.
- Python provisioning runs during runner setup; browser downloads require explicit authorization, and browser network checks deny private and link-local addresses, including metadata IPs.
- The inspected chalk, commander, and ora dependency manifests and entrypoints contain no install scripts and show ordinary CLI or terminal-output functionality.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalDbProbe.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.61.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.61 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.