@open-wa/plugin-sdk@5.10.0
SDK for building open-wa plugins — types, helpers, and the createPlugin() factory
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe added runtime dependency runs a postinstall telemetry hook by default and reports pseudonymous installation and project metadata to a PostHog endpoint. The notice and opt-out reduce the concern, but default install-time telemetry is warning-level under the review rules.
Static reason
No blocking static signals were detected.
Trigger
Installing @open-wa/plugin-sdk with lifecycle scripts enabled triggers the dependency’s postinstall hook.
Impact
Project installs are reported to the telemetry service without an affirmative opt-in, creating an undisclosed-by-default install-time telemetry risk.
Mechanism
The hook gathers a random install ID, a salted project identity hash and ordinary environment metadata, then POSTs a PostHog event through a CloudFront endpoint; two environment flags disable it.
AI rationale
The added runtime dependency runs a postinstall telemetry hook by default and reports pseudonymous installation and project metadata to a PostHog endpoint. The notice and opt-out reduce the concern, but default install-time telemetry is warning-level under the review rules.
Evidence
package.json.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/package.json.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/postinstall.cjs.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/dist/postinstall.cjs.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/dist/shared-BuVpfVsg.cjs~/.config/openui/telemetry.json (or $XDG_CONFIG_HOME/openui/telemetry.json)
Network endpoints1
dgoeivjus9jfp.cloudfront.net/capture/
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package adds @openuidev/lang-core@1.0.1 as a runtime dependency; that dependency declares a postinstall script.
- The dependency’s postinstall runs installation telemetry automatically unless OPENUI_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 is set.
- The telemetry sends a random installation ID, a salted hash of project identity, package and runtime versions, platform details, package-manager data, and CI/Docker metadata.
- The default telemetry endpoint is https://dgoeivjus9jfp.cloudfront.net/capture/, used as a PostHog capture endpoint.
Evidence against
- The dependency’s telemetry code displays a notice describing the data collected and how to disable telemetry.
- The inspected SDK entry points describe plugin and UI helpers; no unrelated automatic account action or credential collection was identified.
Behavioral surface
NoLicense
Source & flagged code
7 flaggedpackage.jsonView file
•dependencies.@openuidev/lang-core = 1.0.1
previous = <absent>
independentlyConfirmedMalicious = @openuidev/lang-core@1.0.1 (lpm_ai_confirmed)
Critical
Known Malicious Dependency Insertion
A newly added or changed runtime dependency can resolve to an independently confirmed malicious package version.
package.jsonView on unpkg23"dependencies": {
"@open-wa/schema": "5.10.0",
"@openuidev/lang-core": "1.0.1",
"hono": "^4.13.9",
"zod": "^4.6.5"
},
"devDependencies": {
"typescript": "^7.0.2",
"vitest": "5.0.2"
},
"p
Medium
Suspicious Lifecycle Evidence
The package adds @openuidev/lang-core@1.0.1 as a runtime dependency; that dependency declares a postinstall script.
package.jsonView on unpkg · L23.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/package.jsonView file
Findings
1 Critical6 Medium2 Low
CriticalKnown Malicious Dependency Insertionpackage.json
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/dist/postinstall.cjs
MediumAi Review Evidence.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/dist/postinstall.cjs
MediumAi Review Evidence.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/dist/shared-BuVpfVsg.cjs
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-c602988c-c78d-4dec-b232-0ca53591b2cf/1/npm-linux/dist/postinstall.cjs
LowScripts Present
LowNo License
Affected versions and remediation
This report applies to @open-wa/plugin-sdk@5.10.0.
See all versions of @open-wa/plugin-sdk for other recorded verdicts.
- Review the evidence and your use of @open-wa/plugin-sdk@5.10.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.