@nxuss/lemma@1.9.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@nxuss/lemma@1.9.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

16 flagged · loading source

bin/init.jsView file

6const os = require('os'); L7: const { execSync, spawn } = require('child_process'); L8:

High

Child Process

Package source references child process execution.

bin/init.jsView on unpkg · L6

6Cross-file remote execution chain: bin/init.js spawns dist/cjs/embed/index.js; helper contains network access plus dynamic code execution. L6: const os = require('os'); L7: const { execSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L18: L19: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L20: ... L39: try { L40: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L41: if (!config.models) config.models = []; L42: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/init.jsView on unpkg · L6

6const os = require('os'); L7: const { execSync, spawn } = require('child_process'); L8: L9: const LEMMA_CACHE = path.join(os.homedir(), '.lemma-cache'); L10: const BRAIN_FILE = path.join(LEMMA_CACHE, 'lemma_brain.json'); ... L18: L19: function step(msg) { process.stderr.write(` ${CYAN}✦${RESET} ${msg}\n`); } L20: ... L39: try { L40: let config = JSON.parse(fs.readFileSync(configFile, 'utf8')); L41: if (!config.models) config.models = []; L42: const already = config.models.some(m => m.apiBase === `http://localhost:${PORT}`);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/init.jsView on unpkg · L6

dist/esm/core/GhostListener.jsView file

20this.currentProcess = spawn(command, args, { L21: shell: true, L22: stdio: ['inherit', 'pipe', 'pipe'],

High

Shell

Package source references shell execution.

dist/esm/core/GhostListener.jsView on unpkg · L20

dist/esm/pr-review/analyzers/SecurityScanner.jsView file

13{ ruleId: "sec-exec-user-input", pattern: /(?:exec|execSync|spawn|execFile)\s*\(\s*(?:`[^`]*\$\{|["'][^"']*["']\s*\+)/gi, label: "Command injection via exec/spawn", severity: "CRIT... L14: { ruleId: "sec-eval", pattern: /\beval\s*\(\s*(?:req\.|params|body|query|input|userInput)/gi, label: "eval() with user input", severity: "CRITICAL" }, L15: ];

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/esm/pr-review/analyzers/SecurityScanner.jsView on unpkg · L13

sdks/crewai/dist/index.jsView file

6exports.LemmaCrew = exports.LemmaCrewAgent = void 0; L7: const ws_1 = __importDefault(require("ws")); L8: const uuid_1 = require("uuid");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

sdks/crewai/dist/index.jsView on unpkg · L6

dist/esm/proxy/ProjectStore.jsView file

4* Project-aware storage resolver: L5: * - Detects project identity from package.json → cwd basename fallback L6: * - Hashes project name to a 12-char hex prefix for path safety ... L23: // ─── Constants ──────────────────────────────────────────────────────────────── L24: const HOME = process.env.HOME || process.env.USERPROFILE || '~'; L25: export const CACHE_DIR = path.join(HOME, '.lemma-cache'); ... L66: detectProjectName() { L67: const cwd = process.cwd(); L68: const pkgPath = path.join(cwd, 'package.json'); ... L70: try { L71: const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8')); L72: if (pkg.name)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/esm/proxy/ProjectStore.jsView on unpkg · L4

dist/esm/cli/lemma-proxy.jsView file

2059if (BIND_HOST !== '127.0.0.1' && BIND_HOST !== 'localhost') { L2060: const authEnabled = process.env.AUTH_ENABLED === 'true'; L2061: if (!authEnabled) { ... L2071: if (this.dashboardPath && fs.existsSync(this.dashboardPath)) { L2072: console.log(`📊 Dashboard UI : \x1b[36mhttp://localhost:${this.port}/dashboard/\x1b[0m`); L2073: if (this.openBrowser) { L2074: setTimeout(() => { L2075: const { exec } = require('child_process'); L2076: const opener = process.platform === 'darwin' ? 'open' : (process.platform === 'win32' ? 'start' : 'xdg-open');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2059

7import { ChromaClient } from 'chromadb'; L8: import https from 'https'; L9: import http from 'http'; ... L14: const paths = [ L15: path.join(__dirname, '../../package.json'), L16: path.join(__dirname, '../../../package.json'), ... L21: try { L22: const pkg = JSON.parse(fs.readFileSync(p, 'utf8')); L23: if (pkg.version) ... L32: function ask(query) { L33: const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); L34: return new Promise(resolve => rl.question(query, ans => { rl.close(); resolve(ans); }));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/esm/cli/lemma-proxy.jsView on unpkg · L7

dist/esm/mcp/tools.jsView file

2249fs.writeFileSync(sandboxTsconfigPath, JSON.stringify(sandboxTsconfig, null, 2)); L2250: const tscOut = execSync(`npx tsc --noEmit --project "${sandboxTsconfigPath}" 2>&1 | head -40 || true`, { timeout: 20000, encoding: "utf8", cwd: sandboxDir }); L2251: const relevantErrors = tscOut

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/esm/mcp/tools.jsView on unpkg · L2249

dist/esm/observability/IdeContextSync.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/esm/observability/IdeContextSync.jsView on unpkg

dist/cjs/proxy/ContextInjector.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/ContextInjector.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/ContextInjector.jsView on unpkg

dist/cjs/cloud/KeyManager.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/cloud/KeyManager.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/cloud/KeyManager.jsView on unpkg

dist/cjs/core/GhostListener.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/core/GhostListener.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/core/GhostListener.jsView on unpkg

dist/cjs/proxy/AgentMultiplexer.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/AgentMultiplexer.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/AgentMultiplexer.jsView on unpkg

dist/cjs/proxy/KeyManager.jsView file

•matchType = normalized_sha256 matchedPackage = @nxuss/lemma@1.0.0 matchedPath = dist/cjs/proxy/KeyManager.js matchedIdentity = npm:QG54dXNzL2xlbW1h:1.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cjs/proxy/KeyManager.jsView on unpkg

Lines 2039-2079javascript

2039 for (const [k, e] of CACHE.entries()) {

2040 if (e.ttl > 0 && now - e.createdAt > e.ttl) {

2041 CACHE.delete(k);

2042 }

2043 }

2044 }, 3600000).unref();

2045 const server = http.createServer(this.app);

2046 server.on('error', (e) => {

2047 if (e.code === 'EADDRINUSE') {

2048 console.error(`\n❌ Error: Port ${this.port} is already in use.`);

2049 console.error(`💡 Try stopping the existing process with 'lemma stop' or use a different port with '--port <number>'.\n`);

2050 process.exit(1);

2051 }

2052 throw e;

2053 });

2054 const BIND_HOST = process.env.LEMMA_BIND_HOST || '127.0.0.1';

2055 server.listen(this.port, BIND_HOST, async () => {

2056 fs.writeFileSync(PID_FILE, String(process.pid));

2057 fs.writeFileSync(PORT_FILE, String(this.port));

2058 // Security warning if binding to all interfaces without auth

2059 if (BIND_HOST !== '127.0.0.1' && BIND_HOST !== 'localhost') {

2060 const authEnabled = process.env.AUTH_ENABLED === 'true';

2061 if (!authEnabled) {

2062 console.warn(`\n\x1b[33m⚠️ [SECURITY] Lemma proxy is bound to ${BIND_HOST} (all interfaces) with AUTH_ENABLED=false.`);

2063 console.warn(` Set AUTH_ENABLED=true and AUTH_REQUIRE_API_KEY=true before exposing to any network.\x1b[0m\n`);

2064 }

2065 }

2066 const pro = isPro();

2067 console.log(`\x1b[1m\x1b[35m┌──────────────────────────────────────────────────────────┐\x1b[0m`);

2068 console.log(`\x1b[1m\x1b[35m│ 🚀 LEMMA PROXY v${VERSION} — THE UNIVERSAL AI GATEWAY │\x1b[0m`);

2069 console.log(`\x1b[1m\x1b[35m└──────────────────────────────────────────────────────────┘\x1b[0m`);

2070 console.log(`\n📁 Project : ${this.projectName}\n🔌 Port : ${this.port} (bound to ${BIND_HOST})`);

2071 if (this.dashboardPath && fs.existsSync(this.dashboardPath)) {

2072 console.log(`📊 Dashboard UI : \x1b[36mhttp://localhost:${this.port}/dashboard/\x1b[0m`);

2073 if (this.openBrowser) {

2074 setTimeout(() => {

2075 const { exec } = require('child_process');

2076 const opener = process.platform === 'darwin' ? 'open' : (process.platform === 'win32' ? 'start' : 'xdg-open');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/esm/cli/lemma-proxy.jsView on unpkg · L2059

2077 exec(`${opener} http://localhost:${this.port}/dashboard/`);

2078 }, 1000);

2079 }