Loading npm security reports…

@nxuss/lemma@1.24.0: AI-agent control-surface risk | LPM Firewall

registry / @nxuss/lemma / 1.24.0

@nxuss/lemma@1.24.0

Intelligent AI Gateway for IDEs & Agents — Semantic cache, Privacy Firewall, Infrastructure Command Center, and Autonomous Cost-Optimization.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package runs a postinstall hook that registers Lemma's skill in the user's global Muse catalog with --force and suppressed output. That catalog auto-loads in every Muse session and the skill directs the agent to invoke lemma through bash.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm install lifecycle postinstall, without a separate user command.

Impact

A Muse user gains a persistent global skill that auto-loads and can drive bash lemma tool calls in later sessions.

Mechanism

bin/postinstall.js checks for the muse binary, then execFileSync installs .agents/skills/lemma into muse with --scope user and --force, stdio ignored.

Policy narrative

On npm install, package.json runs bin/postinstall.js and discards failure. If muse is installed, the script force-installs the bundled Lemma skill into the user-wide Muse catalog and hides all output. Muse then auto-loads that skill in every session. The skill allows bash and instructs the agent to call lemma tools, so a dependency install changes a foreign agent control surface without a separate consent step.

AI rationale

The postinstall hook mutates Muse's global user skill catalog with --force and no prompt, so the bundled skill auto-loads in later Muse sessions. That is an unconsented install-time write to a broad foreign agent control surface.

Evidence

package.jsonbin/postinstall.js.agents/skills/lemma/SKILL.md

Decision evidence

Source & flagged code

26 flagged

package.jsonView file

Lines 93-133json

93 "bin/brain-ingest.js",

94 ".agents/skills/lemma/SKILL.md",

95 "dashboard/dist/**/*",

96 "sdks/crewai/dist/**/*",

97 "!dist/examples/**",

98 "README.md",

99 "LICENSE"

100 ],

101 "scripts": {

102 "proxy:start": "node lemma-proxy.cjs start",

103 "proxy:stop": "node lemma-proxy.cjs stop",

104 "proxy:stats": "node lemma-proxy.cjs stats",

105 "proxy:status": "node lemma-proxy.cjs status",

106 "build": "npm run build:esm && npm run build:cjs && npm run build:sdks",

107 "build:full": "npm run build",

108 "build:esm": "tsc --outDir ./dist/esm",

109 "build:cjs": "tsc --project tsconfig.cjs.json",

110 "build:sdks": "npm run sdk:build",

111 "postbuild": "node scripts/post-build.js && node scripts/fix-esm-extensions.js",

112 "prepare": "npm run build:cjs 2>&1 | tail -n 5 || true",

113 "postinstall": "node bin/postinstall.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L113

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L113

114 "dev": "npx tsx start-dev.ts",

115 "start": "node dist/cjs/index.js",

116 "test": "jest",

117 "test:eval": "npm run build:cjs && jest --config jest.eval.config.js",

118 "test:eval:only": "jest --config jest.eval.config.js",

119 "type-check": "tsc --noEmit",

120 "format": "prettier --check 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

121 "format:fix": "prettier --write 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

122 "lint": "eslint src/**/*.ts",

123 "clean": "rm -rf dist sdks/langchain/dist sdks/crewai/dist",

124 "prepublishOnly": "npm run clean && npm run build && npm test && npm run test:eval:only",

125 "cloud:start": "node dist/cjs/cloud/server.js",

126 "cloud:dev": "npx tsx src/cloud/server.ts",

127 "demo": "npx tsx examples/demo-visual.ts",

128 "demo:comparison": "npx tsx examples/demo-comparison.ts",

129 "example:simple": "npx tsx examples/simple-agent.ts",

130 "example:swarm": "npx tsx examples/agent-swarm.ts",

131 "example:secure": "npx tsx examples/secure-agent.ts",

132 "example:langchain": "npx tsx examples/langchain-example.ts",

133 "example:crewai": "npx tsx examples/crewai-example.ts",

bin/postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Lemma postinstall — registers the Lemma skill in the user's GLOBAL muse

6 * catalog so it auto-loads in every `muse` session, with zero extra steps

7 * after `npm i [-g] @nxuss/lemma`.

8 *

9 * Total function: never fails the install, never prints on success, finishes

10 * in well under a second when there is nothing to do. No build output needed —

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/esm/cli/lemma-proxy.jsView file

Lines 2116-2156javascript

2116 for (const [k, e] of CACHE.entries()) {

2117 if (e.ttl > 0 && now - e.createdAt >

bin/doctor.jsView file

10Cross-file remote execution chain: bin/doctor.js spawns dist/cjs/embed/index.js; helper contains network access plus dynamic code execution. L10: L11: const { execFileSync } = require('child_process'); L12: const fs = require('fs'); ... L17: L18: function ok(msg) { process.stdout.write(` ${GREEN}✓${RESET} ${msg}\n`); } L19: function warn(msg) { process.stdout.write(` ${YELLOW}!${RESET} ${msg}\n`); } ... L33: try { L34: if (process.platform === 'win32') return true; L35: require('child_process').execSync('command -v muse', { stdio: 'ignore', timeout: 10000 }); ... L50: async function main() { L51: const pkgRoot = path.join(__dirname, '..'); L52: const cwd = process.cwd();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

10Detached bundled service listener: bin/doctor.js spawns dist/esm/api/server.js; helper exposes a broad-bound HTTP listener. L10: L11: const { execFileSync } = require('child_process'); L12: const fs = require('fs'); ... L17: L18: function ok(msg) { process.stdout.write(` ${GREEN}✓${RESET} ${msg}\n`); } L19: function warn(msg) { process.stdout.write(` ${YELLOW}!${RESET} ${msg}\n`); } ... L33: try { L34: if (process.platform === 'win32') return true; L35: require('child_process').execSync('command -v muse', { stdio: 'ignore', timeout: 10000 }); ... L50: async function main() { L51: const pkgRoot = path.join(__dirname, '..'); L52: const cwd = process.cwd();

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/doctor.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/lemma-call.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/cli/lemma-proxy.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/cli/lemma-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

bin/cli.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/cli.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/autopilot/Notifier.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

lemma-proxy.cjsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = lemma-proxy.cjs matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lemma-proxy.cjsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/utils/LocalPrefilter.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/esm/autopilot/Notifier.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

cache-proxy.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = cache-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

13L14: const { execSync, execFileSync } = require('child_process'); L15: const fs = require('fs');

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/postinstall.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

dist/esm/core/GhostListener.jsView file

20this.currentProcess = spawn(command, args, { L21: shell: true, L22: stdio: ['inherit', 'pipe', 'pipe'],

High

Shell

Package source references shell execution.

dist/esm/core/GhostListener.jsView on unpkg · L20

sdks/crewai/dist/crewai/src/memory.jsView file

15*/ L16: const index_1 = require("../../ts/src/index"); L17: const STATE_SEVERITY = {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

sdks/crewai/dist/crewai/src/memory.jsView on unpkg · L15

dist/esm/proxy/ProjectStore.jsView file

4* Project-aware storage resolver: L5: * - Detects project identity from package.json → cwd basename fallback L6: * - Hashes project name to a 12-char hex prefix for path safety ... L23: // ─── Constants ──────────────────────────────────────────────────────────────── L24: const HOME = process.env.HOME || process.env.USERPROFILE || '~'; L25: export const CACHE_DIR = path.join(HOME, '.lemma-cache'); ... L66: detectProjectName() { L67: const cwd = process.cwd(); L68: const pkgPath = path.join(cwd, 'package.json'); ... L70: try { L71: const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8')); L72: if (pkg.name)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/esm/proxy/ProjectStore.jsView on unpkg · L4

bin/init.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: — auto-configured by \`lemma init\`\n[ -f "${env_file}" ] && . "${env_file}"\n`; let configured = false; for (const rc of rcfiles) { if (fs.existssync(rc.file)) { const content = fs.readfilesync(rc.file, 'utf8'); if (content.includes('lemma-cache/env')) { configured = true; continue; } fs.appendfilesync(rc.file, sourceline, 'utf8'); configured = true; } } const fallback = path.join(os.homedir(), '.zshrc'); if (!fs.existssync(fallback)) { ensuredir(path.dirname(fallback)); fs.writefilesync(fallback, sourceline, 'utf8'); configured = true; } try { if (process.platform === 'darwin') { execsync(`launchctl setenv openai_base_url http:/

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/init.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/init.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/init.jsView on unpkg

6const os = require('os'); L7: const { execSync, execFileSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L23: L24: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L25: ... L44: try { L45: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L46: if (!config.models) config.models = []; L47: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

dist/esm/cli/lemma-proxy.jsView file

2136if (BIND_HOST !== '127.0.0.1' && BIND_HOST !== 'localhost') { L2137: const authEnabled = process.env.AUTH_ENABLED === 'true'; L2138: if (!authEnabled) { ... L2148: if (this.dashboardPath && fs.existsSync(this.dashboardPath)) { L2149: console.log(`📊 Dashboard UI : \x1b[36mhttp://localhost:${this.port}/dashboard/\x1b[0m`); L2150: if (this.openBrowser) { L2151: setTimeout(() => { L2152: const { exec } = require('child_process'); L2153: const opener = process.platform === 'darwin' ? 'open' : (process.platform === 'win32' ? 'start' : 'xdg-open');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2136

7import { ChromaClient } from 'chromadb'; L8: import https from 'https'; L9: import http from 'http'; ... L14: const paths = [ L15: path.join(__dirname, '../../package.json'), L16: path.join(__dirname, '../../../package.json'), ... L21: try { L22: const pkg = JSON.parse(fs.readFileSync(p, 'utf8')); L23: if (pkg.version) ... L32: function ask(query) { L33: const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); L34: return new Promise(resolve => rl.question(query, ans => { rl.close(); resolve(ans); }));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/esm/cli/lemma-proxy.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/esm/cli/lemma-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

bin/doctor.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/cli/lemma-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

bin/cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

lemma-proxy.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lemma-proxy.cjsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

cache-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

Source & flagged code

26 flagged

package.jsonView file

Lines 93-133json

93 "bin/brain-ingest.js",

94 ".agents/skills/lemma/SKILL.md",

95 "dashboard/dist/**/*",

96 "sdks/crewai/dist/**/*",

97 "!dist/examples/**",

98 "README.md",

99 "LICENSE"

100 ],

101 "scripts": {

102 "proxy:start": "node lemma-proxy.cjs start",

103 "proxy:stop": "node lemma-proxy.cjs stop",

104 "proxy:stats": "node lemma-proxy.cjs stats",

105 "proxy:status": "node lemma-proxy.cjs status",

106 "build": "npm run build:esm && npm run build:cjs && npm run build:sdks",

107 "build:full": "npm run build",

108 "build:esm": "tsc --outDir ./dist/esm",

109 "build:cjs": "tsc --project tsconfig.cjs.json",

110 "build:sdks": "npm run sdk:build",

111 "postbuild": "node scripts/post-build.js && node scripts/fix-esm-extensions.js",

112 "prepare": "npm run build:cjs 2>&1 | tail -n 5 || true",

113 "postinstall": "node bin/postinstall.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L113

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L113

114 "dev": "npx tsx start-dev.ts",

115 "start": "node dist/cjs/index.js",

116 "test": "jest",

117 "test:eval": "npm run build:cjs && jest --config jest.eval.config.js",

118 "test:eval:only": "jest --config jest.eval.config.js",

119 "type-check": "tsc --noEmit",

120 "format": "prettier --check 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

121 "format:fix": "prettier --write 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

122 "lint": "eslint src/**/*.ts",

123 "clean": "rm -rf dist sdks/langchain/dist sdks/crewai/dist",

124 "prepublishOnly": "npm run clean && npm run build && npm test && npm run test:eval:only",

125 "cloud:start": "node dist/cjs/cloud/server.js",

126 "cloud:dev": "npx tsx src/cloud/server.ts",

127 "demo": "npx tsx examples/demo-visual.ts",

128 "demo:comparison": "npx tsx examples/demo-comparison.ts",

129 "example:simple": "npx tsx examples/simple-agent.ts",

130 "example:swarm": "npx tsx examples/agent-swarm.ts",

131 "example:secure": "npx tsx examples/secure-agent.ts",

132 "example:langchain": "npx tsx examples/langchain-example.ts",

133 "example:crewai": "npx tsx examples/crewai-example.ts",

bin/postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Lemma postinstall — registers the Lemma skill in the user's GLOBAL muse

6 * catalog so it auto-loads in every `muse` session, with zero extra steps

7 * after `npm i [-g] @nxuss/lemma`.

8 *

9 * Total function: never fails the install, never prints on success, finishes

10 * in well under a second when there is nothing to do. No build output needed —

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/esm/cli/lemma-proxy.jsView file

Lines 2116-2156javascript

2116 for (const [k, e] of CACHE.entries()) {

2117 if (e.ttl > 0 && now - e.createdAt >

bin/doctor.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/cli/lemma-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

bin/cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

lemma-proxy.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lemma-proxy.cjsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

cache-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

@nxuss/lemma@1.24.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code