registry / @nxuss/lemma / 1.20.0

@nxuss/lemma@1.20.0

Intelligent AI Gateway for IDEs & Agents — Semantic cache, Privacy Firewall, Infrastructure Command Center, and Autonomous Cost-Optimization.

Static Scan Results

scanned 24d ago · by rust-scanner

Static analysis flagged 32 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 419 file(s), 3.86 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.lemma.dev, api.openai.com, bit.ly, dev.azure.com, docs.subconscious-router.dev, fb.me, generativelanguage.googleapis.com, github.com, gitlab.com, lemma.dev, lemma.nxus.studio, reactjs.org, socket.io, www.apple.com, www.w3.org

Source & flagged code

23 flagged

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

6const os = require('os');

7const { execSync, spawn } = require('child_process');

High

Child Process

Package source references child process execution.

bin/init.jsView on unpkg · L6

9const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache');

10const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json');

11const ENV_FILE = path.join(LEMMA_CACHE, 'env');

12const MCP_SERVER_PATH = path.join(__dirname, '..', 'dist', 'cjs', 'mcp', 'index.js');

13const PROXY_PATH = path.join(__dirname, '..', 'dist', 'cjs', 'cli', 'lemma-proxy.js');

14const PORT = '8081';

15// Static local placeholder — the proxy never validates the client's bearer token (it

16// always signs upstream requests with its OWN server-side ANTHROPIC_API_KEY / OPENAI_API_KEY),

17// and only binds to 127.0.0.1 by default. This just satisfies Claude Code's "auth token

18// must be present" check; it is not a real credential.

19const LEMMA_GATEWAY_TOKEN = 'sk-lemma-local-gateway';

20const CYAN = '\x1b[36m', GREEN = '\x1b[32m', YELLOW = '\x1b[33m', DIM = '\x1b[2m', RESET

22function ensureDir(p) { try { fs.mkdirSync(p, { recursive: true }); } catch {} }

24function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/init.jsView on unpkg · L6

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/init.jsView on unpkg · L6

26function ok(msg) { process.stderr.write(` ${GREEN}✓${RESET} ${msg}\n`); }

6Detached bundled service listener: bin/init.js spawns dist/esm/api/server.js; helper exposes a broad-bound HTTP listener. L6: const os = require('os'); L7: const { execSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L23: L24: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L25: ... L44: try { L45: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L46: if (!config.models) config.models = []; L47: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/init.jsView on unpkg · L6

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

dist/esm/cli/lemma-proxy.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2import { program } from 'commander';

3import express from 'express';

4import fs from 'fs';

5import path from

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/lemma-call.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

bin/cli.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/cli.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/autopilot/Notifier.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

dist/cjs/mcp/index.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/mcp/index.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/mcp/index.jsView on unpkg

dist/cjs/mcp/tools/context-tools.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/mcp/tools/context-tools.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/mcp/tools/context-tools.jsView on unpkg

dist/cjs/mcp/tools/workspace.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/mcp/tools/workspace.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/mcp/tools/workspace.jsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/utils/LocalPrefilter.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/esm/autopilot/Notifier.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

dist/esm/mcp/index.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/esm/mcp/index.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/mcp/index.jsView on unpkg

cache-proxy.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = cache-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

dist/cjs/cloud/KeyManager.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/cloud/KeyManager.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cloud/KeyManager.jsView on unpkg

@nxuss/lemma@1.20.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code