registry / @superatomai/sdk-node / 0.0.71-dsp
@superatomai/sdk-node@0.0.71-dsp
Node.js TypeScript SDK for Superatom
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe manifest exposes SDK entrypoints without lifecycle hooks. Inspected dynamic loading, analytics, provider routing, and flagged Codex setup do not establish a concrete attack behavior; the scanner indicators are insufficient to support its malicious label.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
No unsolicited install or import trigger was identified; the inspected integrations activate through SDK runtime calls.
Impact
The inspected excerpts do not establish credential theft, unauthorized account actions, or agent-control hijacking.
Mechanism
The reviewed code selects caller or environment configuration for provider clients and analytics, and loads the declared agent dependency through a runtime loader.
AI rationale
The manifest exposes SDK entrypoints without lifecycle hooks. Inspected dynamic loading, analytics, provider routing, and flagged Codex setup do not establish a concrete attack behavior; the scanner indicators are insufficient to support its malicious label.
Evidence
package.jsondist/index.jsdist/index.mjs
Network endpoints1
openrouter.ai/api/v1
Decision evidence
public snapshotAI called this Clean at 80.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json routes consumers to the CommonJS and ESM bundles and declares no lifecycle scripts.
- The flagged Codex configuration code passes caller options into a Codex client; it does not itself establish unconsented agent configuration changes.
- Dynamic import loads the declared pi-coding-agent dependency when the dashboard-agent loader is called.
- Analytics sends events only when SA_API_URL is configured and analytics remains enabled.
- The LLM proxy uses an explicit caller baseURL when provided, otherwise a configured proxy URL or provider endpoint.
Evidence against
- The bundle contains dynamic import and child-process use, but inspected excerpts do not show an unsolicited execution chain.
- The checked runtime paths do not establish credential transfer to an unrelated recipient or automatic agent-control mutation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
7 flaggeddist/index.jsView file
87mintContextToken: () => mintContextToken,
L88: normalizeScriptBody: () => normalizeScriptBody,
L89: onAgentRun: () => onAgentRun,
...
L120:
L121: // src/websocket.ts
L122: var import_ws = __toESM(require("ws"));
...
L1157: constructor() {
L1158: const envLevel = (process.env.SUPERATOM_LOG_LEVEL || "info").toLowerCase();
L1159: if (this.isValidLogLevel(envLevel)) {
...
L2157: const cipher = import_crypto3.default.createCipheriv(this.algorithm, this.encryptionKey, iv);
L2158: let encrypted = cipher.update(payload, "utf8", "base64");
L2159: encrypted += cipher.final("base64");
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L87•Trigger-reachable chain: manifest.main -> dist/index.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg11047// src/userResponse/scripts/script-runner.ts
L11048: var import_child_process = require("child_process");
L11049: var path6 = __toESM(require("path"));
Findings
2 Critical3 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @superatomai/sdk-node@0.0.71-dsp.
See all versions of @superatomai/sdk-node for other recorded verdicts.
- Review the evidence and your use of @superatomai/sdk-node@0.0.71-dsp before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.