@mnemonik/cli@7.160.0
Mnemonik installer and local project helper
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe helper’s unrestricted-looking parameters and bearer transmission leave a conditional credential exposure unresolved, but no caller or unrelated destination was verified. Warn without blocking.
Static reason
One or more suspicious static signals were detected.
Trigger
A caller invokes the exported hook request helper.
Impact
If a caller supplies a saved service credential and an unrelated server, that credential could be exposed; this source does not establish that such a call occurs.
Mechanism
The helper posts JSON to the supplied server and places the supplied token in the authorization header.
AI rationale
The helper’s unrestricted-looking parameters and bearer transmission leave a conditional credential exposure unresolved, but no caller or unrelated destination was verified. Warn without blocking.
Evidence
dist/runtime/signers.js
Decision evidence
public snapshotAI called this Suspicious at 66.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The exported hook request helper accepts a server and token, then sends the token as a bearer credential.
- The inspected code does not establish where the helper’s token comes from or whether its recipient is restricted to the intended service.
- The manifest defines no install lifecycle scripts.
Evidence against
- The helper’s caller and configuration were not established, so the inspected source does not prove that saved credentials reach an unrelated endpoint.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/diagnostics.jsView file
923import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L924: import { execFile, execFileSync } from "node:child_process";
L925: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L9235256var func = `(${args}) => { ${body} };`;
L5257: ASM_CONSTS[start] = eval(func);
L5258: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
1 Critical6 High4 Medium4 Low
CriticalRemote Response Code Executiondist/scanner/service.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighCommand Output Exfiltrationdist/runtime/signers.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @mnemonik/cli@7.160.0.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.160.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.