registry / @ngockhoale/ukit / 3.4.45
@ngockhoale/ukit@3.4.45
Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook or self-dependency, and the flagged files inspected resolve to product safeguards or development and measurement tooling. The outbound decision request is package-aligned and filters its state before sending.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A runtime submits a registered model-decision item.
Impact
No malicious impact was established from the inspected behavior.
Mechanism
The client sends filtered state through the configured decision endpoint after sensitive-data checks.
AI rationale
The manifest has no install lifecycle hook or self-dependency, and the flagged files inspected resolve to product safeguards or development and measurement tooling. The outbound decision request is package-aligned and filters its state before sending.
Network endpoints1
openai.unicjsc.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and lists no install lifecycle hook or runtime self-dependency.
- The agent-related locations describe path protection, preserved settings, hook repair, uninstall cleanup, fixtures, probes, benchmarks, audits, or release checks.
- Crash handling hashes error frames, sanitizes crash records, and registers process error handlers.
- The decision client uses the UNIC gateway, sends only registered model-decision requests, and applies a sensitive-data gate to approved state fields.
- The agent runtime adapter redacts tool output before producing a bounded summary.
Evidence against
- The source inspected does not establish malicious behavior behind the scanner's source-similarity hints.
- The inspected outbound decision request is package-aligned and guarded by state filtering and sensitive-data checks.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
Source & flagged code
17 flagged · loading sourcescripts/bench/runGold.mjsView file
121const rootDir = projectRoot ?? REPO_ROOT;
L122: const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js'));
L123: const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/bench/runGold.mjsView on unpkg · L121scripts/release/verify-release.mjsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.25
matchedPath = scripts/release/verify-release.mjs
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release/verify-release.mjsView on unpkg1import { spawn } from 'node:child_process';
L2: import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';
...
L6:
L7: const rootDir = process.cwd();
L8: const npmCacheDir = path.join(os.tmpdir(), 'ukit-npm-cache');
...
L14: // UKIT_VERIFY_STEP_TIMEOUT_MS overrides the step budget for tests.
L15: const STEP_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_STEP_TIMEOUT_MS) || 10 * 60 * 1000; // 10 min
L16: const REGISTRY_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_REGISTRY_TIMEOUT_MS) || 60 * 1000; // 1 min
...
L18: // Opt-in post-publish registry-parity check (Release Policy invariant: npm and git always hold
L19: // the same latest version). Only meaningful AFTER `npm publish` — before publish the registry is
L20: // behind by definition — so it is gated behind --post-
Findings
14 High4 Medium5 Low
HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh
HighSemantic Analysis Limitedscripts/audit/decision-coverage.mjs#virtual:normalized:round1
HighKnown Malware Source Similarityscripts/bench/decision-runtime-baseline.mjs
HighKnown Malware Source Similarityscripts/bench/decision-runtime-variant.mjs
HighKnown Malware Source Similarityscripts/bench/memory-baseline.mjs
HighKnown Malware Source Similarityscripts/measure-decision-gateway.mjs
HighKnown Malware Source Similarityscripts/bench/memory-bench.mjs
HighKnown Malware Source Similarityscripts/bench/parallel-agents.mjs
HighKnown Malware Source Similarityscripts/bench/recorder-overhead.mjs
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @ngockhoale/ukit@3.4.45.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@3.4.45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.