registry / @superatomai/sdk-node / 0.0.40-dsp
@superatomai/sdk-node@0.0.40-dsp
Node.js TypeScript SDK for Superatom
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe scanner's remote decode/overwrite claim is not supported by inspected source. The package warrants a warning because its optional first-party dashboard-agent integration exposes command-capable agent behavior when enabled.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Host application calls registerDashboardAgentCollection, then invokes its dashboard-agent collection or receives a relevant runtime request.
Impact
A deployment enabling this optional feature grants its configured agent runtime command-capable behavior and project-runtime file access.
Mechanism
Configured agent-session execution with Bash-capable dependency and WebSocket control channel.
AI rationale
The scanner's remote decode/overwrite claim is not supported by inspected source. The package warrants a warning because its optional first-party dashboard-agent integration exposes command-capable agent behavior when enabled.
Evidence
package.jsondist/index.js.prompts/dashboard-agent.pi-dashboard-agent-runtime.pi-dashboard-agent-runtime/.pi-dashboard-sessions.json.pi-dashboard-agent-runtime/drafts
Network endpoints1
wss://ws.superatom.ai/websocket
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Exports a dashboard-agent registration API that creates project runtime directories.
- That feature dynamically imports and starts the Pi coding-agent package.
- The created session can have a Bash command in flight, indicating agent command capability.
- SDK connects to Superatom's configured WebSocket and processes inbound messages.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Dashboard-agent setup is an exported function, not import-time execution.
- The dynamic import target is a fixed dependency name, not remote-decoded code.
- No source evidence of credential harvesting, foreign-package overwrite, or covert exfiltration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
8 flaggeddist/index.jsView file
54logger: () => logger,
L55: normalizeScriptBody: () => normalizeScriptBody,
L56: openaiLLM: () => openaiLLM,
...
L66:
L67: // src/websocket.ts
L68: var import_ws = __toESM(require("ws"));
...
L949: constructor() {
L950: const envLevel = (process.env.SUPERATOM_LOG_LEVEL || "info").toLowerCase();
L951: if (this.isValidLogLevel(envLevel)) {
...
L1801: const cipher = import_crypto3.default.createCipheriv(this.algorithm, this.encryptionKey, iv);
L1802: let encrypted = cipher.update(payload, "utf8", "base64");
L1803: encrypted += cipher.final("base64");
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L54•Trigger-reachable chain: manifest.main -> dist/index.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = @superatomai/sdk-node@0.0.38-dsp
matchedIdentity = npm:QHN1cGVyYXRvbWFpL3Nkay1ub2Rl:0.0.38-dsp
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical4 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShell
HighEvaldist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
Affected versions and remediation
This report applies to @superatomai/sdk-node@0.0.40-dsp.
See all versions of @superatomai/sdk-node for other recorded verdicts.
- Review the evidence and your use of @superatomai/sdk-node@0.0.40-dsp before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.