registry / @nxuss/lemma / 1.18.0

@nxuss/lemma@1.18.0

⚠ Under review

Intelligent AI Gateway for IDEs & Agents — Semantic cache, Privacy Firewall, Infrastructure Command Center, and Autonomous Cost-Optimization.

Static Scan Results

scanned 28d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 31 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 377 file(s), 3.76 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.lemma.dev, api.openai.com, bit.ly, dev.azure.com, docs.subconscious-router.dev, fb.me, generativelanguage.googleapis.com, github.com, gitlab.com, lemma.dev, lemma.nxus.studio, reactjs.org, www.apple.com, www.w3.org

Source & flagged code

21 flagged

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

6const os = require('os');

7const { execSync, spawn } = require('child_process');

High

Child Process

Package source references child process execution.

bin/init.jsView on unpkg · L6

9const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache');

10const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json');

11const ENV_FILE = path.join(LEMMA_CACHE, 'env');

12const MCP_SERVER_PATH = path.join(__dirname, '..', 'dist', 'cjs', 'mcp', 'index.js');

13const PROXY_PATH = path.join(__dirname, '..', 'dist', 'cjs', 'cli', 'lemma-proxy.js');

14const PORT = '8081';

15// Static local placeholder — the proxy never validates the client's bearer token (it

16// always signs upstream requests with its OWN server-side ANTHROPIC_API_KEY / OPENAI_API_KEY),

17// and only binds to 127.0.0.1 by default. This just satisfies Claude Code's "auth token

18// must be present" check; it is not a real credential.

19const LEMMA_GATEWAY_TOKEN = 'sk-lemma-local-gateway';

20const CYAN = '\x1b[36m', GREEN = '\x1b[32m', YELLOW = '\x1b[33m', DIM = '\x1b[2m', RESET

22function ensureDir(p) { try { fs.mkdirSync(p, { recursive: true }); } catch {} }

24function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/init.jsView on unpkg · L6

26function ok(msg) { process.stderr.write(` ${GREEN}✓${RESET} ${msg}\n`); }

6Cross-file remote execution chain: bin/init.js spawns dist/cjs/embed/index.js; helper contains network access plus dynamic code execution. L6: const os = require('os'); L7: const { execSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L23: L24: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L25: ... L44: try { L45: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L46: if (!config.models) config.models = []; L47: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/init.jsView on unpkg · L6

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist';

3import { logger } from '../utils/logger';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

dist/esm/pr-review/analyzers/SecurityScanner.jsView file

Lines 1-33javascript

1const SECRET_PATTERNS = [

2 { ruleId: "sec-api-key", pattern: /(?:sk-|pk-|api[_-]?key|apikey)[\s"':=]+([A-Za-z0-9_\-]{20,})/gi, label: "API key", severity: "CRITICAL" },

bin/brain-ingest.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Feeds The Brain from sources the model never has to remember to store manually.

6 *

7 * Meant to be wired to a git post-commit hook so every commit becomes a searchable memory

8 * without depending on the assistant calling `store_memory`:

9 *

10 * echo 'lemma-brain-ingest "$(git rev-parse --show-toplevel)" &' >> .git/hooks/post-commit

11 *

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

dist/esm/cli/lemma-proxy.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2import { program } from 'commander';

3import express from 'express';

4import fs from 'fs';

5import path from

dist/esm/mcp/tools.jsView file

3248fs.writeFileSync(sandboxTsconfigPath, JSON.stringify(sandboxTsconfig, null, 2)); L3249: const tscOut = execSync(`npx tsc --noEmit --project "${sandboxTsconfigPath}" 2>&1 | head -40 || true`, { timeout: 20000, encoding: "utf8", cwd: sandboxDir }); L3250: const relevantErrors = tscOut

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/esm/mcp/tools.jsView on unpkg · L3248

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/proxy/ContextInjector.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/ContextInjector.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High