@mnemom/mnemom@0.17.22

⚠ Under review

Transparent AI agent tracing

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 107 file(s), 1.27 MB of source, external domains: 127.0.0.1, aap.mnemom.ai, api-us1.mnemom.ai, api.mnemom.ai, claude.com, docs.mnemom.ai, docs.npmjs.com, gateway-us1.mnemom.ai, gateway.mnemom.ai, preview.mnemom.ai, registry.npmjs.org, slack.com, www.mnemom.ai

Source & flagged code

5 flagged

dist/lib/update/min-version.jsView file

6*/ L7: import { spawnSync } from "node:child_process"; L8: import { canSelfUpdate, PACKAGE_NAME, resolveSettings, } from "./decide.js";

High

Child Process

Package source references child process execution.

dist/lib/update/min-version.jsView on unpkg · L6

dist/lib/oauth.js#virtual:normalized:round1View file

272// Still pending (authorization_pending / slow_down) — emit a heartbeat L273: // every ~15s so a multi-minute approval doesn"t look hung.\n if (waitedMs >= nextHeartbeatMs) {\n display(`…still waiting for you to finish signing in (${Math.ro... L274: * validated (https, or http on loopback) and then passed as a separate argv

High

Shell

Package source references shell execution.

dist/lib/oauth.js#virtual:normalized:round1View on unpkg · L272

dist/rc-proxy.mjsView file

84// stdout: exactly one line, `READY <port> <ca.pem path>`, once listening. Node ≥ 18, no deps. L85: import http from "node:http"; L86: import https from "node:https"; ... L91: import crypto from "node:crypto"; L92: import { execFileSync } from "node:child_process"; L93: import { TURN_HEADER, TurnOrigins, turnHeaderEnabled, turnHeaderFor } from "./turn-origin.mjs"; ... L96: const MITM_HOST = "api.anthropic.com"; L97: const env = process.env; L98:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/rc-proxy.mjsView on unpkg · L84

84// stdout: exactly one line, `READY <port> <ca.pem path>`, once listening. Node ≥ 18, no deps. L85: import http from "node:http"; L86: import https from "node:https"; ... L91: import crypto from "node:crypto"; L92: import { execFileSync } from "node:child_process"; L93: import { TURN_HEADER, TurnOrigins, turnHeaderEnabled, turnHeaderFor } from "./turn-origin.mjs"; ... L99: function die(msg) { L100: process.stderr.write(`mnemom-code-rc-proxy: ${msg}\n`); L101: process.exit(2);

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/rc-proxy.mjsView on unpkg · L84

dist/commands/agent-goal.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/agent-goal.js#virtual:normalized:round1View on unpkg

Source & flagged code

5 flagged · loading source

dist/lib/update/min-version.jsView file

6*/ L7: import { spawnSync } from "node:child_process"; L8: import { canSelfUpdate, PACKAGE_NAME, resolveSettings, } from "./decide.js";

High

Child Process

Package source references child process execution.

dist/lib/update/min-version.jsView on unpkg · L6

dist/lib/oauth.js#virtual:normalized:round1View file

High

Shell

Package source references shell execution.

dist/lib/oauth.js#virtual:normalized:round1View on unpkg · L272

dist/rc-proxy.mjsView file

Findings

5 High2 Medium5 Low

HighChild Processdist/lib/update/min-version.js

HighShelldist/lib/oauth.js#virtual:normalized:round1

HighSame File Env Network Executiondist/rc-proxy.mjs

HighCommand Output Exfiltrationdist/rc-proxy.mjs

HighSemantic Analysis Limiteddist/commands/agent-goal.js#virtual:normalized:round1

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @mnemom/mnemom@0.17.22.

See all versions of @mnemom/mnemom for other recorded verdicts.

Review the evidence and your use of @mnemom/mnemom@0.17.22 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 03:02:54.020Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.