registry / @mnemom/mnemom / 0.17.0-next.9
@mnemom/mnemom@0.17.0-next.9
⚠ Under reviewTransparent AI agent tracing
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcedist/lib/oauth.jsView file
25import * as crypto from "node:crypto";
L26: import { execFile } from "node:child_process";
L27: import { getApiUrl } from "./config.js";
High
dist/rc-proxy.mjsView file
74// stdout: exactly one line, `READY <port> <ca.pem path>`, once listening. Node ≥ 18, no deps.
L75: import http from "node:http";
L76: import https from "node:https";
...
L80: import path from "node:path";
L81: import { execFileSync } from "node:child_process";
L82:
L83: const MITM_HOST = "api.anthropic.com";
L84: const env = process.env;
L85:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/rc-proxy.mjsView on unpkg · L7473//
L74: // stdout: exactly one line, `READY <port> <ca.pem path>`, once listening. Node ≥ 18, no deps.
L75: import http from "node:http";
L76: import https from "node:https";
...
L80: import path from "node:path";
L81: import { execFileSync } from "node:child_process";
L82:
...
L86: function die(msg) {
L87: process.stderr.write(`mnemom-code-rc-proxy: ${msg}\n`);
L88: process.exit(2);
Findings
4 High2 Medium5 Low
HighChild Processdist/lib/oauth.js
HighSame File Env Network Executiondist/rc-proxy.mjs
HighCommand Output Exfiltrationdist/rc-proxy.mjs
HighSemantic Analysis Limiteddist/commands/agent.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @mnemom/mnemom@0.17.0-next.9.
See all versions of @mnemom/mnemom for other recorded verdicts.
- Review the evidence and your use of @mnemom/mnemom@0.17.0-next.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.