registry / @myrialabs/ptykit / 0.0.2

@myrialabs/ptykit@0.0.2

PTY sessions over WebSocket for Node & Bun — collaborative rooms, serialized-scrollback reattach, and a resilient browser client with one typed API.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

A host that mounts the server without an authorize hook exposes shell spawning and terminal input over its WebSocket path. This is a dangerous default rather than covert package behavior.

Static reason

No blocking static signals were detected.

Trigger

Host application mounts PtyKit; an unauthenticated WebSocket client sends create-session/input frames.

Impact

Remote code execution with the host process user's permissions on an exposed default-configured deployment.

Mechanism

Unauthenticated remote PTY creation and shell I/O

Rationale

The package is not malicious, but its documented allow-all default combined with remote PTY spawning creates a concrete RCE risk when deployed without authorization. This warrants a warning rather than a publish block.

Evidence

dist/server/pty-kit-server.jsdist/core/session.jsdist/core/detect.jsREADME.mdpackage.jsondist/core/pty-kit.jsdist/core/env.jsdist/core/shell.jsdist/server/transport-node.jsdist/server/transport-bun.js

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Critical Vulnerability with false-positive risk.

@myrialabs/ptykit@0.0.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code