registry / @superatomai/sdk-node / 0.0.81-dsp
@superatomai/sdk-node@0.0.81-dsp
Node.js TypeScript SDK for Superatom
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe inspected source supports a conditional credential exposure risk through script execution, but does not establish malicious credential forwarding or an install-time attack. A warning is appropriate because child scripts inherit the full parent environment.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A caller invokes the script runner for a script.
Impact
A script can read environment credentials available to the parent process; the inspected source does not establish that this package sends them to an unrelated recipient.
Mechanism
The runner launches the script in a child process and spreads process.env into the child environment.
AI rationale
The inspected source supports a conditional credential exposure risk through script execution, but does not establish malicious credential forwarding or an install-time attack. A warning is appropriate because child scripts inherit the full parent environment.
Evidence
dist/index.js
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The script runner launches a script through a child process and supplies the parent process environment, which can expose credentials available to that process to script code.
- The package also sends analytics only when enabled and when SA_API_URL is configured.
- The spawnCommand helper passes getEnv() to the spawned subprocess, so that process can receive credentials available in the parent environment.
Evidence against
- The manifest declares no preinstall, install, or postinstall hook.
- The inspected proxy and analytics configuration does not establish an unrelated fixed credential recipient.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/index.jsView file
87mintContextToken: () => mintContextToken,
L88: normalizeScriptBody: () => normalizeScriptBody,
L89: onAgentRun: () => onAgentRun,
...
L121:
L122: // src/websocket.ts
L123: var import_ws = __toESM(require("ws"));
...
L1179: constructor() {
L1180: const envLevel = (process.env.SUPERATOM_LOG_LEVEL || "info").toLowerCase();
L1181: if (this.isValidLogLevel(envLevel)) {
...
L2179: const cipher = import_crypto3.default.createCipheriv(this.algorithm, this.encryptionKey, iv);
L2180: let encrypted = cipher.update(payload, "utf8", "base64");
L2181: encrypted += cipher.final("base64");
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L87•Trigger-reachable chain: manifest.main -> dist/index.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = @superatomai/sdk-node@0.0.71-dsp
matchedIdentity = npm:QHN1cGVyYXRvbWFpL3Nkay1ub2Rl:0.0.71-dsp
similarity = 0.600
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical3 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @superatomai/sdk-node@0.0.81-dsp.
See all versions of @superatomai/sdk-node for other recorded verdicts.
- Review the evidence and your use of @superatomai/sdk-node@0.0.81-dsp before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.