registry / @mnemonik/cli / 7.157.3
@mnemonik/cli@7.157.3
Mnemonik installer and local project helper
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe manifest has no lifecycle scripts or runtime dependencies, and the flagged evaluation sites are in module-function and WebAssembly loading code. The hook sender takes its destination and token as arguments, while the inspected OAuth credential flow uses a separate callback; no concrete attack was established.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the CLI; the hook helper requires a caller to supply its server, token, body, and callback.
Impact
The inspected behavior did not establish unauthorized credential transfer, remote code execution, or an unconsented install-time action.
Mechanism
The helper sends its supplied JSON body with its supplied bearer token. The inspected source does not show saved OAuth credentials being passed to that helper or remote response code being evaluated.
AI rationale
The manifest has no lifecycle scripts or runtime dependencies, and the flagged evaluation sites are in module-function and WebAssembly loading code. The hook sender takes its destination and token as arguments, while the inspected OAuth credential flow uses a separate callback; no concrete attack was established.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines CLI entry points and has empty lifecycle scripts and runtime dependencies.
- The hook helper accepts its server, path, bearer token, and body as arguments, then sends the JSON body to that server.
- The hook-context helper accepts a caller-provided callback and constructs context containing hashes and project identity fields.
- The flagged evaluation sites construct functions from module export bodies; the inspected installer source includes a WebAssembly loader for supplied bytes or a file path.
- Several required CLI, scanner, installer, and project files contain embedded glob-pattern parsing code consistent with path matching.
- Saved CLI OAuth tokens are stored in credential records and passed to a work callback; the hook sender takes a separate token argument.
Evidence against
- The hook helper can send a bearer token and JSON body to its supplied server, but the inspected source does not show saved OAuth credentials being passed to it.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
8 flaggeddist/diagnostics.jsView file
923import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L924: import { execFile, execFileSync } from "node:child_process";
L925: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L9235256var func = `(${args}) => { ${body} };`;
L5257: ASM_CONSTS[start] = eval(func);
L5258: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
1 Critical6 High4 Medium4 Low
CriticalRemote Response Code Executiondist/scanner/service.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighCommand Output Exfiltrationdist/runtime/signers.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @mnemonik/cli@7.157.3.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.157.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.