@ngockhoale/ukit@3.4.58
Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe runtime client can forward a shared gateway credential to a package-default endpoint, but the inspected source does not establish that the recipient is unrelated or unauthorized. This unresolved credential-forwarding risk warrants a warning; the package has no npm lifecycle scripts.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A runtime caller submits decision questions while the decision plane is enabled.
Impact
If the default endpoint is not the intended recipient of that gateway credential, it could be exposed there; available evidence does not establish that recipient's identity.
Mechanism
The client resolves a default endpoint and may use the host's shared gateway token to authenticate its request.
AI rationale
The runtime client can forward a shared gateway credential to a package-default endpoint, but the inspected source does not establish that the recipient is unrelated or unauthorized. This unresolved credential-forwarding risk warrants a warning; the package has no npm lifecycle scripts.
Evidence
src/core/gatewayProbe.jssrc/decision/client.js
Network endpoints1
openai.unicjsc.com
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The decision client defaults to openai.unicjsc.com and can fall back to the host's shared gateway token.
- When enabled and given questions, the client sends a request to the resolved endpoint with authentication headers and a body containing state and questions.
- The manifest exposes UKit as a CLI and declares no npm lifecycle scripts.
Evidence against
- The decision plane can be disabled, and a sensitive-value check runs before the request is sent.
- The package source describes the default as its UNIC provider; the reviewed code does not establish who controls that endpoint.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcesrc/core/runtimeConfig.jsView file
9L10: const require = createRequire(import.meta.url);
L11: const { version: PACKAGE_VERSION } = require('../../package.json');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
src/core/runtimeConfig.jsView on unpkg · L9scripts/release/verify-release.mjsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = scripts/release/verify-release.mjs
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release/verify-release.mjsView on unpkg1import { spawn } from 'node:child_process';
L2: import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';
...
L6:
L7: const rootDir = process.cwd();
L8: const npmCacheDir = path.join(os.tmpdir(), 'ukit-npm-cache');
...
L14: // UKIT_VERIFY_STEP_TIMEOUT_MS overrides the step budget for tests.
L15: const STEP_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_STEP_TIMEOUT_MS) || 10 * 60 * 1000; // 10 min
L16: const REGISTRY_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_REGISTRY_TIMEOUT_MS) || 60 * 1000; // 1 min
...
L18: // Opt-in post-publish registry-parity check (Release Policy invariant: npm and git always hold
L19: // the same latest version). Only meaningful AFTER `npm publish` — before publish the registry is
L20: // behind by definition — so it is gated behind --post-
Findings
8 High4 Medium5 Low
HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh
HighSemantic Analysis Limitedsrc/core/agentRuntime/artifacts.js
HighKnown Malware Source Similarityscripts/dev/capture-omp-stall.mjs
HighKnown Malware Source Similarityscripts/measure-decision-gateway.mjs
HighKnown Malware Source Similarityscripts/release/verify-release.mjs
HighKnown Malware Source Similaritysrc/core/agentRuntime/adapters.js
HighKnown Malware Source Similaritytemplate_project/.claude/ukit/runtime/handoff-intent.mjs
HighKnown Malware Source Similaritysrc/core/agentRuntime/supervisor.js
MediumDynamic Requiresrc/core/runtimeConfig.js
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @ngockhoale/ukit@3.4.58.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@3.4.58 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.