registry / @melaya/runner / 1.1.74
@melaya/runner@1.1.74
Run Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 5h ago · by lpm-firewall-aiThe flagged credential flows use provider credentials with the matching provider APIs to discover available models, and the browser login flow is request-triggered. The package has no install hook; its limited failure telemetry requires a runner token and targets Melaya.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Provider credential checks run when the CLI starts discovery; browser login follows a server login request; failure reporting occurs on startup failure when a runner token is present.
Impact
No malicious collection, unrelated credential transfer, or unintended account action was found in the inspected paths.
Mechanism
Reads provider-specific credentials and uses them with their corresponding APIs to enumerate models. Failure reports send bounded diagnostic fields to the configured Melaya endpoint. Browser authorization rejects private and metadata addresses.
AI rationale
The flagged credential flows use provider credentials with the matching provider APIs to discover available models, and the browser login flow is request-triggered. The package has no install hook; its limited failure telemetry requires a runner token and targets Melaya.
Evidence
dist/detect.jsdist/installReport.jsdist/connection.jsdist/browserAuthz.jsdist/lumaLogin.js
Network endpoints4
api.anthropic.comapi.github.comapi.githubcopilot.comapi.melaya.org
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle hook is prepublishOnly, which runs the build.
- The CLI starts provider discovery after launch; provider credentials are used to query their corresponding services for model availability.
- Claude credentials are sent to api.anthropic.com, and GitHub Copilot credentials are exchanged with api.github.com before querying api.githubcopilot.com.
- Install-failure reporting requires a runner token, sends bounded stage and platform details to the configured Melaya server, and supports an opt-out.
- Luma browser login is triggered by a server login request, not automatically at import or startup.
- Browser authorization code classifies cloud metadata and private addresses as forbidden.
Evidence against
- The static scanner flags process execution, credential flows, and cloud metadata references, but inspected instances serve browser setup, provider discovery, or address blocking.
- The manifest has no preinstall, install, or postinstall hook.
- The package describes connecting local models to Melaya pipelines, consistent with provider discovery and the inspected service calls.
Behavioral surface
Source & flagged code
20 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { execFile } from "child_process";
L22: import { spawnTracked as spawn, registerSetupChild, terminateTree } from "./processTree.js";
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20•matchType = normalized_sha256
matchedPackage = @melaya/runner@1.1.73
matchedPath = dist/uvBootstrap.js
matchedIdentity = npm:QG1lbGF5YS9ydW5uZXI:1.1.73
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/uvBootstrap.jsView on unpkgdist/lumaLogin.jsView file
52const child = spawn("npx", ["playwright", "install", "chromium"], {
L53: shell: true,
L54: stdio: ["ignore", "pipe", "pipe"],
Findings
18 High5 Medium5 Low
HighChild Processdist/uvBootstrap.js
HighShelldist/lumaLogin.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/browserProvisioner.js
HighKnown Malware Source Similaritydist/codeWorker.js
HighKnown Malware Source Similaritydist/computerHostCli.js
HighKnown Malware Source Similaritydist/detect.js
HighKnown Malware Source Similaritydist/vaults.js
High
Affected versions and remediation
This report applies to @melaya/runner@1.1.74.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.