registry / @ngockhoale/ukit / 3.4.59
@ngockhoale/ukit@3.4.59
Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).
AI Security Review
scanned 21h ago · by lpm-firewall-aiSource inspection found no install hook or concrete attack behavior. Scanner similarity and structure labels were treated as leads and did not establish malicious activity.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
No malicious trigger was identified; the CLI runs when a user invokes it.
Impact
No harmful effect was established from the inspected source.
Mechanism
The inspected excerpts show application entrypoints, workspace maintenance helpers, and YAML parsing or serialization routines.
AI rationale
Source inspection found no install hook or concrete attack behavior. Scanner similarity and structure labels were treated as leads and did not establish malicious activity.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI and application scripts, with no install lifecycle hook; bin/ukit imports the CLI entrypoint.
- The required integration locations concern workspace probing, gateway settings, repair of broken hooks, uninstall cleanup, and update snapshots; inspected excerpts establish no unconsented broad agent-control mutation.
- The flagged watchdog, agent runtime, and development or release scripts are presented in source as task supervision, runtime support, and bounded development or release tooling; no attack behavior was established in the inspected excerpts.
- The inspected dependency manifest identifies yaml 2.9.1, and the required dependency excerpts concern YAML parsing, composition, and stringification.
Evidence against
- Scanner similarity and hidden-payload labels identify files to inspect but do not establish harmful behavior; the inspected source excerpts support product, runtime, development, or YAML-library roles.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcesrc/core/runtimeConfig.jsView file
9L10: const require = createRequire(import.meta.url);
L11: const { version: PACKAGE_VERSION } = require('../../package.json');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
src/core/runtimeConfig.jsView on unpkg · L9scripts/release/verify-release.mjsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = scripts/release/verify-release.mjs
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/release/verify-release.mjsView on unpkg1import { spawn } from 'node:child_process';
L2: import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';
...
L6:
L7: const rootDir = process.cwd();
L8: const npmCacheDir = path.join(os.tmpdir(), 'ukit-npm-cache');
...
L14: // UKIT_VERIFY_STEP_TIMEOUT_MS overrides the step budget for tests.
L15: const STEP_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_STEP_TIMEOUT_MS) || 10 * 60 * 1000; // 10 min
L16: const REGISTRY_TIMEOUT_MS = Number(process.env.UKIT_VERIFY_REGISTRY_TIMEOUT_MS) || 60 * 1000; // 1 min
...
L18: // Opt-in post-publish registry-parity check (Release Policy invariant: npm and git always hold
L19: // the same latest version). Only meaningful AFTER `npm publish` — before publish the registry is
L20: // behind by definition — so it is gated behind --post-
Low
Weak Crypto
Package source references weak cryptographic algorithms.
scripts/release/verify-release.mjsView on unpkg · L1template_project/.claude/hooks/task-watchdog.shView file
•path = template_project/.claude/hooks/task-watchdog.sh
kind = payload_in_excluded_dir
sizeBytes = 11622
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
template_project/.claude/hooks/task-watchdog.shView on unpkg•path = template_project/.claude/hooks/task-watchdog.sh
kind = build_helper
sizeBytes = 11622
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
template_project/.claude/hooks/task-watchdog.shView on unpkgsrc/core/agentRuntime/artifacts.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 7
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/core/agentRuntime/artifacts.jsView on unpkgscripts/dev/capture-omp-stall.mjsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = scripts/dev/capture-omp-stall.mjs
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/dev/capture-omp-stall.mjsView on unpkgscripts/measure-decision-gateway.mjsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = scripts/measure-decision-gateway.mjs
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
scripts/measure-decision-gateway.mjsView on unpkgsrc/core/agentRuntime/adapters.jsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = src/core/agentRuntime/adapters.js
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/core/agentRuntime/adapters.jsView on unpkgtemplate_project/.claude/ukit/runtime/handoff-intent.mjsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = template_project/.claude/ukit/runtime/handoff-intent.mjs
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
template_project/.claude/ukit/runtime/handoff-intent.mjsView on unpkgsrc/core/agentRuntime/supervisor.jsView file
•matchType = normalized_sha256
matchedPackage = @ngockhoale/ukit@3.4.54
matchedPath = [redacted].js
matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:3.4.54
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
src/core/agentRuntime/supervisor.jsView on unpkgFindings
8 High4 Medium5 Low
HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh
HighSemantic Analysis Limitedsrc/core/agentRuntime/artifacts.js
HighKnown Malware Source Similarityscripts/dev/capture-omp-stall.mjs
HighKnown Malware Source Similarityscripts/measure-decision-gateway.mjs
HighKnown Malware Source Similarityscripts/release/verify-release.mjs
HighKnown Malware Source Similaritysrc/core/agentRuntime/adapters.js
HighKnown Malware Source Similaritytemplate_project/.claude/ukit/runtime/handoff-intent.mjs
HighKnown Malware Source Similaritysrc/core/agentRuntime/supervisor.js
MediumDynamic Requiresrc/core/runtimeConfig.js
MediumEnvironment Vars
MediumShips Build Helpertemplate_project/.claude/hooks/task-watchdog.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptoscripts/release/verify-release.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@3.4.59.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@3.4.59 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.