registry / @ricsam/r5d-browser / 0.0.195-prod.1793375956620.g2b2c6d1d43c59061aae81be3289510c549e9cde0
@ricsam/r5d-browser@0.0.195-prod.1793375956620.g2b2c6d1d43c59061aae81be3289510c549e9cde0
`r5d-browser start` updates the client automatically. It checks the authenticated environment's selected release once a minute and stages verified packages privately using npm. After the current action finishes, it reconnects a new CLI process to the same
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged process execution launches local Chrome, and the credential-bearing requests go to the selected r5d server as part of the browser connection. Registration includes host metadata, but the inspected code ties it to that user-started service flow and shows no unrelated credential destination or concealed payload execution.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI's browser start command, or its private keeper configuration mode, starts the browser service; authentication commands run separately.
Impact
No malicious impact identified. The server receives browser registration details as part of the requested connection.
Mechanism
The client registers with the selected server using its configured r5d credential and sends browser host metadata. The launcher spawns a locally resolved Chrome executable.
AI rationale
The flagged process execution launches local Chrome, and the credential-bearing requests go to the selected r5d server as part of the browser connection. Registration includes host metadata, but the inspected code ties it to that user-started service flow and shows no unrelated credential destination or concealed payload execution.
Evidence
~/.r5d/personal-browser/ (default browser state)~/.r5d/browser/chrome-profile (default Chrome profile)
Network endpoints1
r5d.dev (documented default; the server origin is configurable)
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package entrypoint is a browser CLI; its start path calls the browser client after parsing command options.
- The CLI documents that the server and credential come from explicit options, configuration, environment variables, or the default r5d config, and says a saved credential is sent only to its issuing server.
- Browser registration sends its bearer credential to the selected server origin, with redirects rejected.
- The registration metadata includes hostname, platform, architecture, version, and browser capabilities for the connected browser service.
- Chrome is launched from the resolved local executable path; the flagged launcher contains no download call.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/mjs/browser-secret-fill.mjsView file
118patternName = generic_password
severity = medium
line = 118
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/mjs/browser-secret-fill.mjsView on unpkg · L118dist/mjs/chrome-launcher.mjsView file
1import { spawn } from "node:child_process";
L2: import fs from "node:fs";
L3: import http from "node:http";
L4: import net from "node:net";
...
L9: import WebSocket from "ws";
L10: import { readChromeSession, writePrivateJson } from "./chrome-session-state.mjs";
L11: import { UnresponsiveTabGate } from "./unresponsive-tab-gate.mjs";
...
L22: }
L23: function defaultChromeProfilePath(homeDirectory = os.homedir()) {
L24: return path.join(homeDirectory, ".r5d", "browser", "chrome-profile");
...
L32: const PLATFORM_NAMES = { linux: "Linux", win32: "Windows", freebsd: "FreeBSD", openbsd: "OpenBSD" };
L33: function assertSupportedPlatform(platform = process.platform) {
Critical
Download Execute
Findings
2 Critical2 High4 Medium4 Low
CriticalDownload Executedist/mjs/chrome-launcher.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/mjs/chrome-launcher.mjs
HighChild Processdist/mjs/chrome-launcher.mjs
HighEvaldist/mjs/browser-runtime.mjs
MediumSecret Patterndist/mjs/browser-secret-fill.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @ricsam/r5d-browser@0.0.195-prod.1793375956620.g2b2c6d1d43c59061aae81be3289510c549e9cde0.
See all versions of @ricsam/r5d-browser for other recorded verdicts.
- Review the evidence and your use of @ricsam/r5d-browser@0.0.195-prod.1793375956620.g2b2c6d1d43c59061aae81be3289510c549e9cde0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.