Loading npm security reports…

@ngocsangairvds/vsaf@6.15.0: Malicious npm security report | LPM Firewall

registry / @ngocsangairvds/vsaf / 6.15.0

@ngocsangairvds/vsaf@6.15.0

is it ready to use ?

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Explicit `vsaf init` enables bundled authenticated telemetry, then workflow runs export trace attributes. The package sends run arguments and user/session identifiers to its configured Langfuse service.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

User runs `vsaf init`, then runs a VSAF workflow.

Impact

Unconsented disclosure of workflow arguments and user/session identifiers to a package-controlled endpoint.

Mechanism

Bundled authenticated OTLP telemetry exports run metadata.

Attack narrative

After a user initializes a project, the package copies bundled Langfuse settings, including embedded credentials, into the project telemetry configuration. On later workflow execution it creates authenticated OTLP exports containing workflow arguments (up to 4096 characters), run identifiers, Claude session IDs, and user IDs. The behavior is not npm-install-time, but it is a concrete default telemetry exfiltration path enabled by the package rather than an endpoint supplied by the user.

Rationale

The package embeds credentials and automatically configures authenticated telemetry that exports identifying workflow metadata to a fixed external service. This is concrete data exfiltration, despite activation occurring through the package's explicit CLI workflow.

Evidence

telemetry.defaults.jsonpackages/cli/dist/commands/init.jspackages/cli/dist/telemetry/config.jspackages/cli/dist/telemetry/otel-tracer.jspackages/cli/dist/telemetry/otel-sdk.js.vsaf/config.yaml

Source & flagged code

21 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core'),src=r(process.cwd...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "const fs=require('fs'),p=require('path'),r=p.resolve;const d=r(process.cwd(),'node_modules','@vsaf');fs.mkdirSync(d,{recursive:true});const t=r(d,'core'),src=r(process.cwd...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

skills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.pyView file

194patternName = aws_access_key severity = critical line = 194 matchedText = - AKIA12... key

Critical

Critical Secret

Package contains a critical-looking secret pattern.

skills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.pyView on unpkg · L194

194patternName = aws_access_key severity = critical line = 194 matchedText = - AKIA12... key

Critical

Secret Pattern

AWS access key ID in skills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py

skills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.pyView on unpkg · L194

195patternName = github_pat severity = critical line = 195 matchedText = - ghp_12...oken

Critical

Secret Pattern

GitHub personal access token in skills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.py

skills/vds-skill/vds-scripts/pdf_orchestrator/tests/conftest.pyView on unpkg · L195

packages/core/dist/isolation/workspace-manager.jsView file

7const crypto_1 = require("crypto"); L8: const child_process_1 = require("child_process"); L9: const util_1 = require("util");

High

Child Process

Package source references child process execution.

packages/core/dist/isolation/workspace-manager.jsView on unpkg · L7

packages/core/dist/types/index.jsView file

16Object.defineProperty(exports, "__esModule", { value: true }); L17: __exportStar(require("./workflow.js"), exports); L18: __exportStar(require("./dag.js"), exports);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

packages/core/dist/types/index.jsView on unpkg · L16

skills/sdlc/install-deps.mjsView file

14* 2. Checks/installs npm package: gitnexus (includes MCP server built-in) L15: * 3. Provisions .mcp.json with GitNexus MCP server entry (npx gitnexus mcp) L16: */ ... L19: import { join } from 'path'; L20: import { execSync } from 'child_process'; L21:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

skills/sdlc/install-deps.mjsView on unpkg · L14

•matchType = normalized_sha256 matchedPackage = @ngocsangairvds/vsaf@6.7.0 matchedPath = skills/sdlc/install-deps.mjs matchedIdentity = npm:QG5nb2NzYW5nYWlydmRzL3ZzYWY:6.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/sdlc/install-deps.mjsView on unpkg

skills/vds-skill/search-confluence/scripts/search.shView file

•path = skills/vds-skill/search-confluence/scripts/search.sh kind = build_helper sizeBytes = 4624 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/vds-skill/search-confluence/scripts/search.shView on unpkg

skills/vds-skill/vds-scripts/pdf_orchestrator/cli_verification_test/test.pdfView file

•path = skills/vds-skill/vds-scripts/pdf_orchestrator/cli_verification_test/test.pdf kind = high_entropy_blob sizeBytes = 40986 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/vds-skill/vds-scripts/pdf_orchestrator/cli_verification_test/test.pdfView on unpkg

skills/vds-skill/vds-scripts/vds_cli/tests/unit/test_cli_DOC004.pyView file

•path = skills/vds-skill/vds-scripts/vds_cli/tests/unit/test_cli_DOC004.py kind = payload_in_excluded_dir sizeBytes = 3413 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/vds-skill/vds-scripts/vds_cli/tests/unit/test_cli_DOC004.pyView on unpkg

packages/web/dist/web/browser/chunk-O7TQGEFF.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

packages/web/dist/web/browser/chunk-O7TQGEFF.jsView on unpkg

packages/cli/dist/commands/serve.jsView file

•matchType = normalized_sha256 matchedPackage = @ngocsangairvds/vsaf@6.7.0 matchedPath = [redacted].js matchedIdentity = npm:QG5nb2NzYW5nYWlydmRzL3ZzYWY:6.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/cli/dist/commands/serve.jsView on unpkg

packages/cli/dist/server/routes/workflows.jsView file

•matchType = normalized_sha256 matchedPackage = @ngocsangairvds/vsaf@6.7.0 matchedPath = [redacted].js matchedIdentity = npm:QG5nb2NzYW5nYWlydmRzL3ZzYWY:6.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/cli/dist/server/routes/workflows.jsView on unpkg

packages/cli/dist/server/static.jsView file

•matchType = normalized_sha256 matchedPackage = @ngocsangairvds/vsaf@6.7.0 matchedPath = packages/cli/dist/server/static.js matchedIdentity = npm:QG5nb2NzYW5nYWlydmRzL3ZzYWY:6.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/cli/dist/server/static.jsView on unpkg

skills/vds-skill/vds-scripts/scripts/backup.shView file

•matchType = normalized_sha256 matchedPackage = @ngocsangairvds/vsaf@6.7.0 matchedPath = skills/vds-skill/vds-scripts/scripts/backup.sh matchedIdentity = npm:QG5nb2NzYW5nYWlydmRzL3ZzYWY:6.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/vds-skill/vds-scripts/scripts/backup.shView on unpkg

skills/vds-skill/vds-scripts/pdf_orchestrator/config/alertmanager.ymlView file

7patternName = generic_password severity = medium line = 7 matchedText = smtp_aut...ord'

Medium

Secret Pattern

Hardcoded password in skills/vds-skill/vds-scripts/pdf_orchestrator/config/alertmanager.yml

skills/vds-skill/vds-scripts/pdf_orchestrator/config/alertmanager.ymlView on unpkg · L7

skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.shView file

132patternName = github_pat severity = critical line = 132 matchedText = test_sec...2"}'

Critical

Secret Pattern

GitHub personal access token in skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh

skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.shView on unpkg · L132

136patternName = stripe_live_secret severity = critical line = 136 matchedText = test_sec...4"}'

Critical

Secret Pattern

Stripe live secret key in skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh

skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.shView on unpkg · L136

135patternName = google_api_key severity = high line = 135 matchedText = test_sec...0"}'

High

Secret Pattern

Google API key in skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.sh

skills/vds-skill/vds-scripts/scripts/dev/cli_smoke.shView on unpkg · L135