registry / Data exfiltration / @openuidev/lang-core
@openuidev/lang-core
Framework-agnostic core for OpenUI Lang: parser, prompt generation, validation, and type definitions
This report shows the evidence for @openuidev/lang-core@1.0.1. 1 of 12 known versions is blocked or flagged. See all versions.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe source confirms automatic install-time disclosure of project-linked telemetry to a package-selected collector without an affirmative consent gate. The notice and opt-out flags do not prevent the default send, so this meets the installation beacon policy.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the package with its postinstall hook enabled and telemetry not disabled.
Impact
The collector receives project-linked installation telemetry that can correlate installs and disclose project identity information.
Mechanism
The hook derives project identity from Git metadata, an environment value, or the install directory, hashes it, and posts it with installation metadata to the package-default capture host.
Attack narrative
During installation, the postinstall hook automatically sends a random installation ID, a salted hash derived from the repository or install directory, and environment metadata to the package-configured collector. The hook does not wait for affirmative consent; environment flags can disable sending. The printed notice and hashing reduce exposure but do not make the transfer opt-in.
AI rationale
The source confirms automatic install-time disclosure of project-linked telemetry to a package-selected collector without an affirmative consent gate. The notice and opt-out flags do not prevent the default send, so this meets the installation beacon policy.
Evidence
package.jsonpostinstall.cjsdist/postinstall.cjsdist/shared-BuVpfVsg.cjs
Network endpoints1
dgoeivjus9jfp.cloudfront.net
Decision evidence
public snapshotAI called this Malicious at 88.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest runs a postinstall script, which loads the telemetry entrypoint.
- The install entrypoint runs telemetry automatically and checks only opt-out settings.
- The install event includes a persistent random ID and a salted hash derived from repository or install-directory identity.
- The telemetry sender posts the event to a package-configured capture endpoint.
- The package defaults that endpoint to a CloudFront host and permits disabling telemetry through environment flags.
Evidence against
- The installer notice describes the telemetry, and the project identifier is hashed.
- The manifest makes the CI SDK optional; runtime telemetry has a separate explicit opt-in.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.cjsView file
839function readGitOrigin(processLike) {
L840: const execFile = (processLike.getBuiltinModule?.("node:child_process"))?.execFile;
L841: if (!execFile) return Promise.resolve(void 0);
High
Findings
4 High4 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.cjs
HighCopied Package Dependency Bridgedist/index.cjs
HighCross File Remote Execution Contextdist/index.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @openuidev/lang-core@1.0.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing @openuidev/lang-core@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.