registry / @melaya/runner / 1.1.77
@melaya/runner@1.1.77
Run Melaya AI pipelines locally with your own LM Studio or Ollama models
AI Security Review
scanned 6h ago · by lpm-firewall-aiThe flagged credential accesses are used for model discovery against the credential-owning services, and discovery is part of the runner’s stated purpose. The source also shows that Luma login is user-triggered and that metadata addresses are classified in browser authorization code; no malicious behavior was established.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Provider discovery runs when the CLI starts; Luma browser login starts after a server login request.
Impact
No unauthorized collection, unrelated credential transfer, or harmful automatic action was established.
Mechanism
Discovery reads provider credentials and calls the corresponding provider APIs to enumerate available models. Browser authorization code identifies cloud metadata addresses for protection.
AI rationale
The flagged credential accesses are used for model discovery against the credential-owning services, and discovery is part of the runner’s stated purpose. The source also shows that Luma login is user-triggered and that metadata addresses are classified in browser authorization code; no malicious behavior was established.
Network endpoints6
api.anthropic.comapi.github.comapi.githubcopilot.com127.0.0.1:1234127.0.0.1:11434luma.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a runner CLI and a library entry point; its only lifecycle script is prepublishOnly, which runs the build.
- Provider discovery sends Claude and GitHub credentials to their respective providers to retrieve model information.
- The CLI starts provider discovery as part of runner startup and publishes the resulting model list.
- Luma sign-in opens a visible browser only after the Melaya server requests login.
- The browser authorization code classifies cloud metadata addresses for protection.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
20 flaggeddist/uvBootstrap.jsView file
20import { homedir, platform, arch } from "os";
L21: import { execFile } from "child_process";
L22: import { spawnTracked as spawn, registerSetupChild, terminateTree } from "./processTree.js";
High
Child Process
Package source references child process execution.
dist/uvBootstrap.jsView on unpkg · L20•matchType = normalized_sha256
matchedPackage = @melaya/runner@1.1.73
matchedPath = dist/uvBootstrap.js
matchedIdentity = npm:QG1lbGF5YS9ydW5uZXI:1.1.73
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/uvBootstrap.jsView on unpkgdist/lumaLogin.jsView file
52const child = spawn("npx", ["playwright", "install", "chromium"], {
L53: shell: true,
L54: stdio: ["ignore", "pipe", "pipe"],
Findings
18 High5 Medium5 Low
HighChild Processdist/uvBootstrap.js
HighShelldist/lumaLogin.js
HighSandbox Evasion Gated Capabilitydist/browserProvisioner.js
HighCloud Metadata Accessdist/browserAuthz.js
HighRuntime Package Installdist/lumaLogin.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/browserProvisioner.js
HighKnown Malware Source Similaritydist/codeWorker.js
HighKnown Malware Source Similaritydist/detect.js
HighKnown Malware Source Similaritydist/vaults.js
HighKnown Malware Source Similaritydist/cli.js
High
Affected versions and remediation
This report applies to @melaya/runner@1.1.77.
See all versions of @melaya/runner for other recorded verdicts.
- Review the evidence and your use of @melaya/runner@1.1.77 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.