registry / @mnemonik/cli / 7.140.2
@mnemonik/cli@7.140.2
⚠ Under reviewMnemonik installer and local project helper
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no npm lifecycle hook, and the inspected credential and dynamic-evaluation excerpts do not prove an attack. The runtime update and installation behavior was not fully traced, so the available source does not support a confident clean or malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the `mnemonik` CLI, including its install command.
Impact
The inspected code does not establish credential theft or unauthorized changes, but the complete update and installation behavior remains unresolved.
Mechanism
The CLI validates its installed-package context, then verifies or installs a managed runtime; generated WebAssembly support also constructs functions dynamically.
AI rationale
The manifest has no npm lifecycle hook, and the inspected credential and dynamic-evaluation excerpts do not prove an attack. The runtime update and installation behavior was not fully traced, so the available source does not support a confident clean or malicious verdict.
Evidence
package.jsondist/bin.jsdist/runtime/bootstrap.jsdist/runtime/selfUpdate.jsdist/runtime/signers.js
Decision evidence
public snapshotAI called this Manual Review at 55.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json has no npm lifecycle scripts.
- The CLI bootstraps only from a verified installed package and routes execution through its runtime store.
- Credential readers reject declarations with caller-supplied authorization headers or tokens.
- Generated WebAssembly glue uses eval to construct functions from module-provided data.
Evidence against
- The manifest defines the CLI entrypoints and no install hook.
- The inspected auth code does not establish an unrestricted credential transfer.
- The eval match is in WebAssembly runtime glue; the inspected excerpt does not show attacker-controlled input reaching it.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/diagnostics.jsView file
919import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L920: import { execFile, execFileSync } from "node:child_process";
L921: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L9195244var func = `(${args}) => { ${body} };`;
L5245: ASM_CONSTS[start] = eval(func);
L5246: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
2 Critical6 High4 Medium4 Low
CriticalRemote Response Code Executiondist/runtime/selfUpdate.js
CriticalPrevious Version Dangerous Deltadist/runtime/signers.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighCommand Output Exfiltrationdist/runtime/signers.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @mnemonik/cli@7.140.2.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.140.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.