registry / @ngockhoale/ukit / 3.4.46

@ngockhoale/ukit@3.4.46

Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and inspected configuration, benchmark, and runtime code is consistent with the package’s workspace tooling. The scanner’s source-similarity labels are not evidence of malicious behavior.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A user invokes the ukit command or an explicitly named package script.

Impact

No confirmed attack impact.

Mechanism

The inspected code installs workspace files, maintains project configuration, and runs measurement or support operations; no unconsented install-time behavior was found.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes a command-line entry point and has no install lifecycle hook; its scripts run explicit commands.
The CLI is a workspace installer, and its project changes preserve user settings or apply bounded cleanup to generated configuration.
The agent hooks and probes support user workspace workflows and benchmark/reporting; inspected harnesses use deterministic inputs, temp fixtures, or explicit commands.
Runtime support code redacts secret-shaped tool output; the decision client uses configured gateway credentials and endpoint resolution.
Crash handling fingerprints errors locally; no credential transfer or unrelated account action was identified in the inspected source.
Flagged benchmark and release scripts describe measurement, test, and opt-in release checks; their source-similarity labels do not establish malicious behavior.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Source & flagged code

17 flagged

scripts/bench/runGold.mjsView file

Lines 101-141javascript

101 failures.push(`budget: used ${packet.budget.used} > maxTokens ${maxTokens}`);

102 }

103

104 return {

105 id: testCase.id ?? '(unnamed)',

106 mode: packet.task_type,

107 expectedMode,

108 anchors: [...anchorPaths],

109 expectedAnchors,

110 anchorHits,

111 anchorMisses,

112 budgetUsed: packet.budget?.used ?? 0,

113 maxTokens,

114 routedMode: routed.mode,

115 pass: failures.length === 0,

116 failures,

117 };

118}

119

120export async function runGold({ projectRoot, corpusPath } = {}) {

121 const rootDir = projectRoot ?? REPO_ROOT;

122 const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js'));

123 const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/bench/runGold.mjsView on unpkg · L121

124 const { buildCodeIndex } = await import(path.join(REPO_ROOT, 'src/index/buildIndex.js'));

125 const { INDEX_ARTIFACTS, getArtifactPath } = await import(path.join(REPO_ROOT, 'src/index/paths.js'));

126

127 // The bench needs an index to score anchors; build once when missing.

128 try {

129 await fs.stat(getArtifactPath(rootDir, INDEX_ARTIFACTS.files));

130 } catch {

131 console.log('[bench] index missing — building code index first');

132 await buildCodeIndex({ rootDir });

133 }

134

135 const cases = await loadCorpus(corpusPath ?? DEFAULT_CORPUS);

136 const results = [];

137 for (const testCase of cases) {

138 results.push(await runGoldCase(rootDir, testCase, { compileContext, routeTask }));

139 }

140 return { results, pass: results.every((r) => r.pass) };

141}

scripts/release/verify-release.mjsView file

Lines 1-21javascript

1import { spawn } from 'node:child_process';

2import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';

3import crypto from 'node:crypto';

4import os from 'node:os'

template_project/.claude/hooks/task-watchdog.shView file

•path = template_project/.claude/hooks/task-watchdog.sh kind = payload_in_excluded_dir sizeBytes = 11622 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

template_project/.claude/hooks/task-watchdog.shView on unpkg

•path = template_project/.claude/hooks/task-watchdog.sh kind = build_helper sizeBytes = 11622 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

template_project/.claude/hooks/task-watchdog.shView on unpkg

scripts/bench/decision-runtime-baseline.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/bench/decision-runtime-baseline.mjs#virtual:normalized:round1View on unpkg

scripts/bench/decision-runtime-baseline.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/decision-runtime-baseline.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/decision-runtime-baseline.mjsView on unpkg

scripts/bench/decision-runtime-variant.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/decision-runtime-variant.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/decision-runtime-variant.mjsView on unpkg

scripts/bench/memory-baseline.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/memory-baseline.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/memory-baseline.mjsView on unpkg

scripts/measure-decision-gateway.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/measure-decision-gateway.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/measure-decision-gateway.mjsView on unpkg

scripts/bench/memory-bench.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/memory-bench.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/memory-bench.mjsView on unpkg

scripts/bench/parallel-agents.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/parallel-agents.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/parallel-agents.mjsView on unpkg

scripts/bench/recorder-overhead.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/recorder-overhead.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/recorder-overhead.mjsView on unpkg

scripts/bench/sqlite-spike.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/sqlite-spike.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/sqlite-spike.mjsView on unpkg

scripts/perf/audit-perf.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/perf/audit-perf.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/perf/audit-perf.mjsView on unpkg

src/core/agentRuntime/adapters.jsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = src/core/agentRuntime/adapters.js matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/core/agentRuntime/adapters.jsView on unpkg

scripts/bench/data-foundation.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/bench/data-foundation.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/bench/data-foundation.mjsView on unpkg

Source & flagged code

17 flagged · loading source

scripts/bench/runGold.mjsView file

121const rootDir = projectRoot ?? REPO_ROOT; L122: const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js')); L123: const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/bench/runGold.mjsView on unpkg · L121

scripts/release/verify-release.mjsView file

•matchType = normalized_sha256 matchedPackage = @ngockhoale/ukit@3.4.25 matchedPath = scripts/release/verify-release.mjs matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.25 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/release/verify-release.mjsView on unpkg

1import { spawn } from 'node:child_process'; L2: import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs'; ... L6: L7: const rootDir = process.cwd(); L8: const npmCacheDir = path.join(os.tmpdir(), 'ukit-npm-cache'); ... L14: // UKIT_VERIFY_STEP_TIMEOUT_MS overrides the step budget for tests. L15: const STEP_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_STEP_TIMEOUT_MS) || 10 * 60 * 1000; // 10 min L16: const REGISTRY_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_REGISTRY_TIMEOUT_MS) || 60 * 1000; // 1 min ... L18: // Opt-in post-publish registry-parity check (Release Policy invariant: npm and git always hold L19: // the same latest version). Only meaningful AFTER `npm publish` — before publish the registry is L20: // behind by definition — so it is gated behind --post-

Findings

14 High4 Medium5 Low

HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh

HighSemantic Analysis Limitedscripts/bench/decision-runtime-baseline.mjs#virtual:normalized:round1

HighKnown Malware Source Similarityscripts/bench/decision-runtime-baseline.mjs

HighKnown Malware Source Similarityscripts/bench/decision-runtime-variant.mjs

HighKnown Malware Source Similarityscripts/bench/memory-baseline.mjs

HighKnown Malware Source Similarityscripts/measure-decision-gateway.mjs

HighKnown Malware Source Similarityscripts/bench/memory-bench.mjs

HighKnown Malware Source Similarityscripts/bench/parallel-agents.mjs

HighKnown Malware Source Similarityscripts/bench/recorder-overhead.mjs

High

Affected versions and remediation

This report applies to @ngockhoale/ukit@3.4.46.

See all versions of @ngockhoale/ukit for other recorded verdicts.

Review the evidence and your use of @ngockhoale/ukit@3.4.46 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 18:47:12.972Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.