Loading npm security reports…

@nxuss/lemma@1.25.0: AI-agent control-surface risk | LPM Firewall

registry / @nxuss/lemma / 1.25.0

@nxuss/lemma@1.25.0

Intelligent AI Gateway for IDEs & Agents — Semantic cache, Privacy Firewall, Infrastructure Command Center, and Autonomous Cost-Optimization.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An npm postinstall hook silently changes the user's global Muse agent configuration. It force-installs a package-provided skill that is loaded in future Muse sessions.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package while Muse is available on the system.

Impact

Future agent sessions receive package-authored instructions and tool access without an explicit setup action.

Mechanism

The lifecycle hook invokes the Muse skill installer with user scope and force enabled.

Policy narrative

On npm installation, the package automatically runs its postinstall script. When Muse is installed, that script force-installs the package's skill into the user's global Muse scope. The delivered skill instructs Muse to load it at session start and use package tools before reasoning, creating an unconsented persistent agent-control change.

AI rationale

This is a concrete unconsented postinstall mutation of a foreign, user-wide AI-agent control surface. The conditional Muse check does not provide user consent.

Evidence

package.jsonbin/postinstall.js.agents/skills/lemma/SKILL.md

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 96.0% confidence with false-positive risk.

Source & flagged code

26 flagged

package.jsonView file

Lines 93-133json

93 "bin/brain-ingest.js",

94 ".agents/skills/lemma/SKILL.md",

95 "dashboard/dist/**/*",

96 "sdks/crewai/dist/**/*",

97 "!dist/examples/**",

98 "README.md",

99 "LICENSE"

100 ],

101 "scripts": {

102 "proxy:start": "node lemma-proxy.cjs start",

103 "proxy:stop": "node lemma-proxy.cjs stop",

104 "proxy:stats": "node lemma-proxy.cjs stats",

105 "proxy:status": "node lemma-proxy.cjs status",

106 "build": "npm run build:esm && npm run build:cjs && npm run build:sdks",

107 "build:full": "npm run build",

108 "build:esm": "tsc --outDir ./dist/esm",

109 "build:cjs": "tsc --project tsconfig.cjs.json",

110 "build:sdks": "npm run sdk:build",

111 "postbuild": "node scripts/post-build.js && node scripts/fix-esm-extensions.js",

112 "prepare": "npm run build:cjs 2>&1 | tail -n 5 || true",

113 "postinstall": "node bin/postinstall.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L113

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L113

114 "dev": "npx tsx start-dev.ts",

115 "start": "node dist/cjs/index.js",

116 "test": "jest",

117 "test:eval": "npm run build:cjs && jest --config jest.eval.config.js",

118 "test:eval:only": "jest --config jest.eval.config.js",

119 "type-check": "tsc --noEmit",

120 "format": "prettier --check 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

121 "format:fix": "prettier --write 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

122 "lint": "eslint src/**/*.ts",

123 "clean": "rm -rf dist sdks/langchain/dist sdks/crewai/dist",

124 "prepublishOnly": "npm run clean && npm run build && npm test && npm run test:eval:only",

125 "cloud:start": "node dist/cjs/cloud/server.js",

126 "cloud:dev": "npx tsx src/cloud/server.ts",

127 "demo": "npx tsx examples/demo-visual.ts",

128 "demo:comparison": "npx tsx examples/demo-comparison.ts",

129 "example:simple": "npx tsx examples/simple-agent.ts",

130 "example:swarm": "npx tsx examples/agent-swarm.ts",

131 "example:secure": "npx tsx examples/secure-agent.ts",

132 "example:langchain": "npx tsx examples/langchain-example.ts",

133 "example:crewai": "npx tsx examples/crewai-example.ts",

bin/postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Lemma postinstall — registers the Lemma skill in the user's GLOBAL muse

6 * catalog so it auto-loads in every `muse` session, with zero extra steps

7 * after `npm i [-g] @nxuss/lemma`.

8 *

9 * Total function: never fails the install, never prints on success, finishes

10 * in well under a second when there is nothing to do. No build output needed —

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/esm/cli/lemma-proxy.jsView file

Lines 2116-2156javascript

2116 for (const [k, e] of CACHE.entries()) {

2117 if (e.ttl > 0 && now - e.createdAt >

bin/doctor.jsView file

10Cross-file remote execution chain: bin/doctor.js spawns dist/cjs/embed/index.js; helper contains network access plus dynamic code execution. L10: L11: const { execFileSync } = require('child_process'); L12: const fs = require('fs'); ... L17: L18: function ok(msg) { process.stdout.write(` ${GREEN}✓${RESET} ${msg}\n`); } L19: function warn(msg) { process.stdout.write(` ${YELLOW}!${RESET} ${msg}\n`); } ... L33: try { L34: if (process.platform === 'win32') return true; L35: require('child_process').execSync('command -v muse', { stdio: 'ignore', timeout: 10000 }); ... L50: async function main() { L51: const pkgRoot = path.join(__dirname, '..'); L52: const cwd = process.cwd();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

10Detached bundled service listener: bin/doctor.js spawns dist/esm/api/server.js; helper exposes a broad-bound HTTP listener. L10: L11: const { execFileSync } = require('child_process'); L12: const fs = require('fs'); ... L17: L18: function ok(msg) { process.stdout.write(` ${GREEN}✓${RESET} ${msg}\n`); } L19: function warn(msg) { process.stdout.write(` ${YELLOW}!${RESET} ${msg}\n`); } ... L33: try { L34: if (process.platform === 'win32') return true; L35: require('child_process').execSync('command -v muse', { stdio: 'ignore', timeout: 10000 }); ... L50: async function main() { L51: const pkgRoot = path.join(__dirname, '..'); L52: const cwd = process.cwd();

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/doctor.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/lemma-call.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/cli/lemma-proxy.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/cli/lemma-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

bin/cli.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/cli.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/autopilot/Notifier.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

lemma-proxy.cjsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = lemma-proxy.cjs matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lemma-proxy.cjsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/cjs/utils/LocalPrefilter.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/esm/autopilot/Notifier.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

cache-proxy.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = cache-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

13L14: const { execSync, execFileSync } = require('child_process'); L15: const fs = require('fs');

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/postinstall.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

dist/esm/core/GhostListener.jsView file

20this.currentProcess = spawn(command, args, { L21: shell: true, L22: stdio: ['inherit', 'pipe', 'pipe'],

High

Shell

Package source references shell execution.

dist/esm/core/GhostListener.jsView on unpkg · L20

sdks/crewai/dist/crewai/src/memory.jsView file

15*/ L16: const index_1 = require("../../ts/src/index"); L17: const STATE_SEVERITY = {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

sdks/crewai/dist/crewai/src/memory.jsView on unpkg · L15

dist/esm/proxy/ProjectStore.jsView file

4* Project-aware storage resolver: L5: * - Detects project identity from package.json → cwd basename fallback L6: * - Hashes project name to a 12-char hex prefix for path safety ... L23: // ─── Constants ──────────────────────────────────────────────────────────────── L24: const HOME = process.env.HOME || process.env.USERPROFILE || '~'; L25: export const CACHE_DIR = path.join(HOME, '.lemma-cache'); ... L66: detectProjectName() { L67: const cwd = process.cwd(); L68: const pkgPath = path.join(cwd, 'package.json'); ... L70: try { L71: const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8')); L72: if (pkg.name)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/esm/proxy/ProjectStore.jsView on unpkg · L4

bin/init.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: — auto-configured by \`lemma init\`\n[ -f "${env_file}" ] && . "${env_file}"\n`; let configured = false; for (const rc of rcfiles) { if (fs.existssync(rc.file)) { const content = fs.readfilesync(rc.file, 'utf8'); if (content.includes('lemma-cache/env')) { configured = true; continue; } fs.appendfilesync(rc.file, sourceline, 'utf8'); configured = true; } } const fallback = path.join(os.homedir(), '.zshrc'); if (!fs.existssync(fallback)) { ensuredir(path.dirname(fallback)); fs.writefilesync(fallback, sourceline, 'utf8'); configured = true; } try { if (process.platform === 'darwin') { execsync(`launchctl setenv openai_base_url http:/

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/init.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = bin/init.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/init.jsView on unpkg

6const os = require('os'); L7: const { execSync, execFileSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L23: L24: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L25: ... L44: try { L45: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L46: if (!config.models) config.models = []; L47: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

dist/esm/cli/lemma-proxy.jsView file

2136if (BIND_HOST !== '127.0.0.1' && BIND_HOST !== 'localhost') { L2137: const authEnabled = process.env.AUTH_ENABLED === 'true'; L2138: if (!authEnabled) { ... L2148: if (this.dashboardPath && fs.existsSync(this.dashboardPath)) { L2149: console.log(`📊 Dashboard UI : \x1b[36mhttp://localhost:${this.port}/dashboard/\x1b[0m`); L2150: if (this.openBrowser) { L2151: setTimeout(() => { L2152: const { exec } = require('child_process'); L2153: const opener = process.platform === 'darwin' ? 'open' : (process.platform === 'win32' ? 'start' : 'xdg-open');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2136

7import { ChromaClient } from 'chromadb'; L8: import https from 'https'; L9: import http from 'http'; ... L14: const paths = [ L15: path.join(__dirname, '../../package.json'), L16: path.join(__dirname, '../../../package.json'), ... L21: try { L22: const pkg = JSON.parse(fs.readFileSync(p, 'utf8')); L23: if (pkg.version) ... L32: function ask(query) { L33: const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); L34: return new Promise(resolve => rl.question(query, ans => { rl.close(); resolve(ans); }));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/esm/cli/lemma-proxy.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.23.0 matchedPath = dist/esm/cli/lemma-proxy.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.23.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

bin/doctor.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/cli/lemma-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

bin/cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

lemma-proxy.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lemma-proxy.cjsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

cache-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

Source & flagged code

26 flagged

package.jsonView file

Lines 93-133json

93 "bin/brain-ingest.js",

94 ".agents/skills/lemma/SKILL.md",

95 "dashboard/dist/**/*",

96 "sdks/crewai/dist/**/*",

97 "!dist/examples/**",

98 "README.md",

99 "LICENSE"

100 ],

101 "scripts": {

102 "proxy:start": "node lemma-proxy.cjs start",

103 "proxy:stop": "node lemma-proxy.cjs stop",

104 "proxy:stats": "node lemma-proxy.cjs stats",

105 "proxy:status": "node lemma-proxy.cjs status",

106 "build": "npm run build:esm && npm run build:cjs && npm run build:sdks",

107 "build:full": "npm run build",

108 "build:esm": "tsc --outDir ./dist/esm",

109 "build:cjs": "tsc --project tsconfig.cjs.json",

110 "build:sdks": "npm run sdk:build",

111 "postbuild": "node scripts/post-build.js && node scripts/fix-esm-extensions.js",

112 "prepare": "npm run build:cjs 2>&1 | tail -n 5 || true",

113 "postinstall": "node bin/postinstall.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L113

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L113

114 "dev": "npx tsx start-dev.ts",

115 "start": "node dist/cjs/index.js",

116 "test": "jest",

117 "test:eval": "npm run build:cjs && jest --config jest.eval.config.js",

118 "test:eval:only": "jest --config jest.eval.config.js",

119 "type-check": "tsc --noEmit",

120 "format": "prettier --check 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

121 "format:fix": "prettier --write 'src/**/*.ts' 'tests/**/*.ts' 'examples/**/*.ts' 'scripts/**/*.ts'",

122 "lint": "eslint src/**/*.ts",

123 "clean": "rm -rf dist sdks/langchain/dist sdks/crewai/dist",

124 "prepublishOnly": "npm run clean && npm run build && npm test && npm run test:eval:only",

125 "cloud:start": "node dist/cjs/cloud/server.js",

126 "cloud:dev": "npx tsx src/cloud/server.ts",

127 "demo": "npx tsx examples/demo-visual.ts",

128 "demo:comparison": "npx tsx examples/demo-comparison.ts",

129 "example:simple": "npx tsx examples/simple-agent.ts",

130 "example:swarm": "npx tsx examples/agent-swarm.ts",

131 "example:secure": "npx tsx examples/secure-agent.ts",

132 "example:langchain": "npx tsx examples/langchain-example.ts",

133 "example:crewai": "npx tsx examples/crewai-example.ts",

bin/postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * Lemma postinstall — registers the Lemma skill in the user's GLOBAL muse

6 * catalog so it auto-loads in every `muse` session, with zero extra steps

7 * after `npm i [-g] @nxuss/lemma`.

8 *

9 * Total function: never fails the install, never prints on success, finishes

10 * in well under a second when there is nothing to do. No build output needed —

dist/esm/core/GhostListener.jsView file

Lines 1-40javascript

1import { spawn } from 'child_process';

2import { GhostAlchemist } from './GhostAlchemist.js';

3import { logger } from '../utils/logger.js';

4/**

5 * GhostListener

6 * Watches terminal output for errors and provides instant diagnostics.

sdks/crewai/dist/crewai/src/memory.jsView file

Lines 1-35javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.LemmaMemoryTool = void 0;

4/**

5 * Lemma memory tool for CrewAI (Lane H).

dist/esm/proxy/ProjectStore.jsView file

Lines 1-24javascript

1/**

2 * Lemma ProjectStore

3 *

4 * Project-aware storage resolver:

5 * - Detects project identity from package.json → cwd basename fallback

6 * - Hashes project name to a 12-char hex prefix for path safety

7 * - Provides Stats and Usage persistence helpers

8 *

9 * Layout:

10 * ~/.lemma-cache/

11 * proxy.pid

bin/init.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/esm/cli/lemma-proxy.jsView file

Lines 2116-2156javascript

2116 for (const [k, e] of CACHE.entries()) {

2117 if (e.ttl > 0 && now - e.createdAt >

bin/doctor.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/doctor.jsView on unpkg · L10

High

Spawned Bundled Service Listener

Source launches a detached bundled service that exposes a broad-bound HTTP listener.

bin/doctor.jsView on unpkg · L10

bin/lemma-call.jsView file

13* Also via npx: L14: * npx @nxuss/lemma call search_memory '{"query":"hello"}' L15: * ... L22: const path = require('path'); L23: const { spawn } = require('child_process'); L24:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/lemma-call.jsView on unpkg · L13

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lemma-call.jsView on unpkg

bin/init.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/init.js#virtual:normalized:round1View on unpkg

dist/cjs/cli/lemma-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cli/lemma-proxy.jsView on unpkg

bin/cli.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cli.jsView on unpkg

dist/cjs/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/autopilot/Notifier.jsView on unpkg

lemma-proxy.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lemma-proxy.cjsView on unpkg

dist/cjs/utils/LocalPrefilter.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/utils/LocalPrefilter.jsView on unpkg

dist/esm/autopilot/Notifier.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/esm/autopilot/Notifier.jsView on unpkg

cache-proxy.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cache-proxy.jsView on unpkg

@nxuss/lemma@1.25.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code