@recallai/desktop-sdk@2.0.31
Recall Desktop SDK
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis package creates a meaningful supply-chain risk by automatically installing and later executing an unverified remote native payload. The source does not show broader project mutation, credential theft, or other concrete malicious behavior, so it should be warned rather than blocked.
Static reason
One or more suspicious static signals were detected.
Trigger
npm installation on macOS or Windows, followed by a consumer calling init.
Impact
A compromised or replaced release-hosted archive could run native code in the installing user's dependency tree.
Mechanism
Remote native payload download, extraction, and execution.
AI rationale
This package creates a meaningful supply-chain risk by automatically installing and later executing an unverified remote native payload. The source does not show broader project mutation, credential theft, or other concrete malicious behavior, so it should be warned rather than blocked.
Evidence
package.jsonsetup.jsindex.jsdesktop_sdk_macos.tardesktop_sdk_win32.tarFrameworksgstreamer-1.0desktop_sdk_macos_exeagent-windows.exe
Network endpoints1
recallai-desktop-sdk-releases.s3.us-east-1.amazonaws.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The install hook automatically downloads a platform archive from a remote S3 host.
- The downloaded archive is extracted into the package without a checksum or signature verification step.
- At runtime the SDK launches a native executable installed from that archive.
Evidence against
- The installer limits its writes and removals to named paths beneath the package directory.
- The JavaScript wrapper uses the launched process for declared desktop SDK commands; no JavaScript credential harvesting or unrelated network exfiltration was found.
- The package has no runtime dependency on another release of itself and no AI-agent control-surface mutation.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.install = node ./setup.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg14"scripts": {
"install": "node ./setup.js",
"validate-types": "tsc --noEmit",
"build": "tsc -p tsconfig.build.json"
}
Medium
Suspicious Lifecycle Evidence
The install hook automatically downloads a platform archive from a remote S3 host.
package.jsonView on unpkg · L14setup.jsView file
26async function setupMacOS(version) {
await downloadFile(`${nativeUrlBase}/${version}/desktop_sdk_macos.tar`, nativeTarPathMacOS);
Medium
Suspicious Lifecycle Evidence
The install hook automatically downloads a platform archive from a remote S3 host.
setup.jsView on unpkg · L26Findings
1 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidencesetup.js
MediumAi Review Evidencesetup.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @recallai/desktop-sdk@2.0.31.
See all versions of @recallai/desktop-sdk for other recorded verdicts.
- Review the evidence and your use of @recallai/desktop-sdk@2.0.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.