Loading npm security reports…

@nxuss/lemma@1.23.0: AI-agent control-surface risk | LPM Firewall

registry / @nxuss/lemma / 1.23.0

@nxuss/lemma@1.23.0

Intelligent AI Gateway for IDEs & Agents — Semantic cache, Privacy Firewall, Infrastructure Command Center, and Autonomous Cost-Optimization.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package runs an automatic postinstall hook. When Muse is present, it force-installs a bundled AI-agent skill into the user's global catalog, where it affects future sessions across projects.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation on a system with the Muse command available.

Impact

The package changes a foreign, broad AI-agent control surface without an explicit setup command or consent.

Mechanism

Silent forced global AI-agent skill installation.

Policy narrative

The package declares a postinstall hook that runs automatically during npm installation. Its script detects Muse and silently executes a forced user-scope skill installation for the bundled skill. That skill imposes mandatory calls to the package before an agent reasons and after it completes work. This establishes persistent, cross-project influence over a separate AI-agent environment without requiring the user to run an explicit configuration command.

AI rationale

This is unconsented postinstall mutation of a foreign, broad AI-agent control surface. The conditional Muse check does not remove the automatic forced global installation behavior when the target is present.

Evidence

package.jsonbin/postinstall.js.agents/skills/lemma/SKILL.md

Decision evidence

public snapshot

Source & flagged code

25 flagged

package.jsonView file

Lines 93-133json

93 "bin/brain-ingest.js",

94 ".agents/skills/lemma/SKILL.md",

95 "dashboard/dist/**/*",

96 "sdks/crewai/dist/**/*",

97 "!dist/examples/**",

98 "README.md",

99 "LICENSE"

100 ],

101 "scripts": {

102 "proxy:start": "node lemma-proxy.cjs start",

103 "proxy:stop": "node lemma-proxy.cjs stop",

104 "proxy:stats": "node lemma-proxy.cjs stats",

105 "proxy:status": "node lemma-proxy.cjs status",

106 "build": "npm run build:esm && npm run build:cjs && npm run build:sdks",

107 "build:full": "npm run build",

108 "build:esm": "tsc --outDir ./dist/esm",

109 "build:cjs": "tsc --project tsconfig.cjs.json",

110 "build:sdks": "npm run sdk:build",

111 "postbuild": "node scripts/post-build.js && node scripts/fix-esm-extensions.js",

112 "prepare": "npm run build:cjs 2>&1 | tail -n 5 || true",

113 "postinstall": "node bin/postinstall.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L113

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L113

114 "dev": "npx tsx start-dev.ts",

115 "start": "node dist/cjs/index.js",

116 "test": "jest",

117 "test:eval": "npm run build:cjs && jest --config jest.eval.config.js",

118 "test:eval:only": "jest --config jest.eval.config.js",

119 "type-check": "tsc --noEmit",

120 "format": "prettier --check 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

121 "format:fix": "prettier --write 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

122 "lint": "eslint src/**/*.ts",

123 "clean": "rm -rf dist sdks/langchain/dist sdks/crewai/dist",

124 "prepublishOnly": "npm run clean && npm run build && npm test && npm run test:eval:only",

125 "cloud:start": "node dist/cjs/cloud/server.js",

126 "cloud:dev": "npx tsx src/cloud/server.ts",

127 "demo": "npx tsx examples/demo-visual.ts",

128 "demo:comparison": "npx tsx examples/demo-comparison.ts",

129 "example:simple": "npx tsx examples/simple-agent.ts",

130 "example:swarm": "npx tsx examples/agent-swarm.ts",

131 "example:secure": "npx tsx examples/secure-agent.ts",

132 "example:langchain": "npx tsx examples/langchain-example.ts",

133 "example:crewai": "npx tsx examples/crewai-example.ts",

bin/postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Lemma postinstall — registers the Lemma skill in the user's GLOBAL muse

6 * catalog so it auto-loads in every `muse` session, with zero extra steps

7 * after `npm i [-g] @nxuss/lemma`.

8 *

9 * Total function: never fails the install, never prints on success, finishes

10 * in well under a second when there is nothing to do. No build output needed —

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

dist/esm/pr-review/analyzers/SecurityScanner.jsView file

Lines 1-33javascript

1const SECRET_PATTERNS = [

2 { ruleId: "sec-api-key", pattern: /(?:sk-|pk-|api[_-]?key|apikey)[\s"':=]+([A-Za-z0-9_\-]{20,})/gi, label: "API key", severity: "CRITICAL" },

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/esm/cli/lemma-proxy.jsView file

2124if (BIND_HOST !== '127.0.0.1' && BIND_HOST !== 'localhost') { L2125: const authEnabled = process.env.AUTH_ENABLED === 'true'; L2126: if (!authEnabled) { ... L2136: if (this.dashboardPath && fs.existsSync(this.dashboardPath)) { L2137: console.log(`📊 Dashboard UI : \x1b[36mhttp://localhost:${this.port}/dashboard/\x1b[0m`); L2138: if (this.openBrowser) { L2139: setTimeout(() => { L2140: const { exec } = require('child_process'); L2141: const opener = process.platform === 'darwin' ? 'open' : (process.platform === 'win32' ? 'start' : 'xdg-open');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2124

7import { ChromaClient } from 'chromadb'; L8: import https from 'https'; L9: import http from 'http'; ... L14: const paths = [ L15: path.join(__dirname, '../../package.json'), L16: path.join(__dirname, '../../../package.json'), ... L21: try { L22: const pkg = JSON.parse(fs.readFileSync(p, 'utf8')); L23: if (pkg.version) ... L32: function ask(query) { L33: const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); L34: return new Promise(resolve => rl.question(query, ans => { rl.close(); resolve(ans); }));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/esm/cli/lemma-proxy.jsView on unpkg · L7

bin/doctor.jsView file

10Cross-file remote execution chain: bin/doctor.js spawns dist/cjs/embed/index.js; helper contains network access plus dynamic code execution. L10: L11: const { execFileSync } = require('child_process'); L12: const fs = require('fs'); ... L17: L18: function ok(msg) { process.stdout.write(` ${GREEN}✓${RESET} ${msg}\n`); } L19: function warn(msg) { process.stdout.write(` ${YELLOW}!${RESET} ${msg}\n`); } ... L33: try { L34: if (process.platform === 'win32') return true; L35: require('child_process').execSync('command -v muse', { stdio: 'ignore', timeout: 10000 }); ... L50: async function main() { L51: const pkgRoot = path.join(__dirname, '..'); L52: const cwd = process.cwd();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

10Detached bundled service listener: bin/doctor.js spawns dist/esm/api/server.js; helper exposes a broad-bound HTTP listener. L10: L11: const { execFileSync } = require('child_process'); L12: const fs = require('fs'); ... L17: L18: function ok(msg) { process.stdout.write(` ${GREEN}✓${RESET} ${msg}\n`); } L19: function warn(msg) { process.stdout.write(` ${YELLOW}!${RESET} ${msg}\n`); } ... L33: try { L34: if (process.platform === 'win32') return true; L35: require('child_process').execSync('command -v muse', { stdio: 'ignore', timeout: 10000 }); ... L50: async function main() { L51: const pkgRoot = path.join(__dirname, '..'); L52: const cwd = process.cwd();

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/proxy/ContextInjector.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/ContextInjector.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ContextInjector.jsView on unpkg

dist/cjs/cloud/KeyManager.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/cloud/KeyManager.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cloud/KeyManager.jsView on unpkg

dist/cjs/core/GhostListener.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/core/GhostListener.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/core/GhostListener.jsView on unpkg

dist/cjs/proxy/AgentMultiplexer.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/AgentMultiplexer.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/AgentMultiplexer.jsView on unpkg

dist/cjs/proxy/KeyManager.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/KeyManager.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/KeyManager.jsView on unpkg

dist/cjs/proxy/ProjectStore.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/ProjectStore.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ProjectStore.jsView on unpkg

dist/esm/proxy/AgentMultiplexer.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/esm/proxy/AgentMultiplexer.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/proxy/AgentMultiplexer.jsView on unpkg

dist/esm/proxy/ContextInjector.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/esm/proxy/ContextInjector.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/proxy/ContextInjector.jsView on unpkg

dist/cjs/cli/lemma-proxy.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @nxuss/lemma@1.16.1 matchedIdentity = npm:QG54dXNzL2xlbW1h:1.16.1 similarity = 0.675 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

13L14: const { execSync, execFileSync } = require('child_process'); L15: const fs = require('fs');

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L13

dist/esm/core/GhostListener.jsView file

20this.currentProcess = spawn(command, args, { L21: shell: true, L22: stdio: ['inherit', 'pipe', 'pipe'],

High

Shell

Package source references shell execution.

dist/esm/core/GhostListener.jsView on unpkg · L20

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/esm/core/GhostListener.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/core/GhostListener.jsView on unpkg

dist/esm/pr-review/analyzers/SecurityScanner.jsView file

13{ ruleId: "sec-exec-user-input", pattern: /(?:exec|execSync|spawn|execFile)\s*\(\s*(?:`[^`]*\$\{|["'][^"']*["']\s*\+)/gi, label: "Command injection via exec/spawn", severity: "CRIT... L14: { ruleId: "sec-eval", pattern: /\beval\s*\(\s*(?:req\.|params|body|query|input|userInput)/gi, label: "eval() with user input", severity: "CRITICAL" }, L15: ];

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/esm/pr-review/analyzers/SecurityScanner.jsView on unpkg · L13

sdks/crewai/dist/crewai/src/memory.jsView file

15*/ L16: const index_1 = require("../../ts/src/index"); L17: const STATE_SEVERITY = {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

sdks/crewai/dist/crewai/src/memory.jsView on unpkg · L15

dist/esm/proxy/ProjectStore.jsView file

4* Project-aware storage resolver: L5: * - Detects project identity from package.json → cwd basename fallback L6: * - Hashes project name to a 12-char hex prefix for path safety ... L23: // ─── Constants ──────────────────────────────────────────────────────────────── L24: const HOME = process.env.HOME || process.env.USERPROFILE || '~'; L25: export const CACHE_DIR = path.join(HOME, '.lemma-cache'); ... L66: detectProjectName() { L67: const cwd = process.cwd(); L68: const pkgPath = path.join(cwd, 'package.json'); ... L70: try { L71: const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8')); L72: if (pkg.name)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/esm/proxy/ProjectStore.jsView on unpkg · L4

bin/init.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: — auto-configured by \`lemma init\`\n[ -f "${env_file}" ] && . "${env_file}"\n`; let configured = false; for (const rc of rcfiles) { if (fs.existssync(rc.file)) { const content = fs.readfilesync(rc.file, 'utf8'); if (content.includes('lemma-cache/env')) { configured = true; continue; } fs.appendfilesync(rc.file, sourceline, 'utf8'); configured = true; } } const fallback = path.join(os.homedir(), '.zshrc'); if (!fs.existssync(fallback)) { ensuredir(path.dirname(fallback)); fs.writefilesync(fallback, sourceline, 'utf8'); configured = true; } try { if (process.platform === 'darwin') { execsync(`launchctl setenv openai_base_url http:/

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/init.jsView on unpkg

6const os = require('os'); L7: const { execSync, execFileSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L23: L24: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L25: ... L44: try { L45: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L46: if (!config.models) config.models = []; L47: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/init.jsView on unpkg · L6

dist/esm/cli/lemma-proxy.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2124

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/esm/cli/lemma-proxy.jsView on unpkg · L7

bin/doctor.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/proxy/ContextInjector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ContextInjector.jsView on unpkg

dist/cjs/cloud/KeyManager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cloud/KeyManager.jsView on unpkg

dist/cjs/core/GhostListener.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/core/GhostListener.jsView on unpkg

dist/cjs/proxy/AgentMultiplexer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/AgentMultiplexer.jsView on unpkg

dist/cjs/proxy/KeyManager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/KeyManager.jsView on unpkg

dist/cjs/proxy/ProjectStore.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ProjectStore.jsView on unpkg

dist/esm/proxy/AgentMultiplexer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/proxy/AgentMultiplexer.jsView on unpkg

dist/esm/proxy/ContextInjector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/proxy/ContextInjector.jsView on unpkg

dist/cjs/cli/lemma-proxy.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

Source & flagged code

25 flagged

package.jsonView file

Lines 93-133json

93 "bin/brain-ingest.js",

94 ".agents/skills/lemma/SKILL.md",

95 "dashboard/dist/**/*",

96 "sdks/crewai/dist/**/*",

97 "!dist/examples/**",

98 "README.md",

99 "LICENSE"

100 ],

101 "scripts": {

102 "proxy:start": "node lemma-proxy.cjs start",

103 "proxy:stop": "node lemma-proxy.cjs stop",

104 "proxy:stats": "node lemma-proxy.cjs stats",

105 "proxy:status": "node lemma-proxy.cjs status",

106 "build": "npm run build:esm && npm run build:cjs && npm run build:sdks",

107 "build:full": "npm run build",

108 "build:esm": "tsc --outDir ./dist/esm",

109 "build:cjs": "tsc --project tsconfig.cjs.json",

110 "build:sdks": "npm run sdk:build",

111 "postbuild": "node scripts/post-build.js && node scripts/fix-esm-extensions.js",

112 "prepare": "npm run build:cjs 2>&1 | tail -n 5 || true",

113 "postinstall": "node bin/postinstall.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L113

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L113

114 "dev": "npx tsx start-dev.ts",

115 "start": "node dist/cjs/index.js",

116 "test": "jest",

117 "test:eval": "npm run build:cjs && jest --config jest.eval.config.js",

118 "test:eval:only": "jest --config jest.eval.config.js",

119 "type-check": "tsc --noEmit",

120 "format": "prettier --check 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

121 "format:fix": "prettier --write 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

122 "lint": "eslint src/**/*.ts",

123 "clean": "rm -rf dist sdks/langchain/dist sdks/crewai/dist",

124 "prepublishOnly": "npm run clean && npm run build && npm test && npm run test:eval:only",

125 "cloud:start": "node dist/cjs/cloud/server.js",

126 "cloud:dev": "npx tsx src/cloud/server.ts",

127 "demo": "npx tsx examples/demo-visual.ts",

128 "demo:comparison": "npx tsx examples/demo-comparison.ts",

129 "example:simple": "npx tsx examples/simple-agent.ts",

130 "example:swarm": "npx tsx examples/agent-swarm.ts",

131 "example:secure": "npx tsx examples/secure-agent.ts",

132 "example:langchain": "npx tsx examples/langchain-example.ts",

133 "example:crewai": "npx tsx examples/crewai-example.ts",

bin/postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Lemma postinstall — registers the Lemma skill in the user's GLOBAL muse

6 * catalog so it auto-loads in every `muse` session, with zero extra steps

7 * after `npm i [-g] @nxuss/lemma`.

8 *

9 * Total function: never fails the install, never prints on success, finishes

10 * in well under a second when there is nothing to do. No build output needed —

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

dist/esm/pr-review/analyzers/SecurityScanner.jsView file

Lines 1-33javascript

1const SECRET_PATTERNS = [

2 { ruleId: "sec-api-key", pattern: /(?:sk-|pk-|api[_-]?key|apikey)[\s"':=]+([A-Za-z0-9_\-]{20,})/gi, label: "API key", severity: "CRITICAL" },

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/esm/cli/lemma-proxy.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2124

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/esm/cli/lemma-proxy.jsView on unpkg · L7

bin/doctor.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/proxy/ContextInjector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ContextInjector.jsView on unpkg

dist/cjs/cloud/KeyManager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cloud/KeyManager.jsView on unpkg

dist/cjs/core/GhostListener.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/core/GhostListener.jsView on unpkg

dist/cjs/proxy/AgentMultiplexer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/AgentMultiplexer.jsView on unpkg

dist/cjs/proxy/KeyManager.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/KeyManager.jsView on unpkg

dist/cjs/proxy/ProjectStore.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ProjectStore.jsView on unpkg

dist/esm/proxy/AgentMultiplexer.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/proxy/AgentMultiplexer.jsView on unpkg

dist/esm/proxy/ContextInjector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/proxy/ContextInjector.jsView on unpkg

dist/cjs/cli/lemma-proxy.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

@nxuss/lemma@1.23.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code