registry / @melaya/runner / 1.1.62
@melaya/runner@1.1.62
⚠ Under reviewRun Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 12d ago · by lpm-firewall-aiInspected package source shows product-aligned provider discovery, configured-server connection, and runtime provisioning, with no confirmed attack. A selected runtime dependency was not fully source-reviewed, so the package cannot be marked clean on this evidence.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The runner starts and loads its runtime dependencies.
Impact
The package's own inspected behavior did not establish an attack; the unavailable dependency source prevents a clean determination.
Mechanism
The package imports socket.io-client and declares Playwright, but the bounded dependency review did not include all of their source.
AI rationale
Inspected package source shows product-aligned provider discovery, configured-server connection, and runtime provisioning, with no confirmed attack. A selected runtime dependency was not fully source-reviewed, so the package cannot be marked clean on this evidence.
Evidence
package.jsondist/connection.js
Network endpoints4
api.melaya.orgapi.anthropic.comapi.github.com/copilot_internal/v2/tokengithub.com/astral-sh/uv/releases/latest/download/
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest has no install lifecycle hook; its prepublishOnly script only builds the package.
- The CLI requires a runner token and defaults to the Melaya server; the connection sends that token to the configured server.
- The inspected provider discovery code sends credentials to the matching Anthropic and GitHub APIs.
- The package declares socket.io-client and Playwright, and imports socket.io-client in its runtime connection module; source for these selected dependencies was not fully available in the bounded review.
Evidence against
- No concrete malicious behavior was established in the inspected package source.
- The Python bootstrap fetches uv from the Astral GitHub release URL; browser provisioning is described as opt-in. These execution-related findings have identifiable product functions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
8 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { spawn, execSync } from "child_process";
L22: const CACHE_DIR = join(homedir(), ".melaya-runner");
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20103if (asset.endsWith(".zip")) {
L104: // Windows only. PowerShell's Expand-Archive is always present and reliably
L105: // reads zips, unlike whatever `tar` happens to be on PATH.
High
dist/browserProvisioner.jsView file
17import { existsSync, readdirSync } from "node:fs";
L18: import { execFile } from "node:child_process";
L19: import { join } from "node:path";
...
L29: function windowsCandidates() {
L30: const pf = process.env["ProgramFiles"] || "C:\\Program Files";
L31: const pf86 = process.env["ProgramFiles(x86)"] || "C:\\Program Files (x86)";
L32: const local = process.env["LOCALAPPDATA"] || join(os.homedir(), "AppData", "Local");
L33: return [
...
L88: async function detectVersion(exePath) {
L89: if (process.platform === "win32") {
L90: try {
...
L128: // Fallback: run the binary with --version. Some Chromium builds print
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/connection.js
HighChild Processdist/uvBootstrap.js
HighShelldist/uvBootstrap.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/linkedinLogin.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperlocalVault.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @melaya/runner@1.1.62.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.62 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.