@superatomai/sdk-node@0.0.84-dsp
Node.js TypeScript SDK for Superatom
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe runtime analytics path sends user questions and generated responses to the configured API and is enabled by default when that API URL is present. No fixed unrelated collector or automatic credential theft was established, so this is suspicious telemetry rather than malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A runtime chat or report event is tracked while SA_API_URL is configured; analytics is enabled by default unless explicitly disabled.
Impact
Chat content and associated usage and project identifiers may be sent to the configured API without a clear opt-in.
Mechanism
The SDK builds an analytics event containing the question and response, then POSTs it to SA_API_URL/analytics/chat.
AI rationale
The runtime analytics path sends user questions and generated responses to the configured API and is enabled by default when that API URL is present. No fixed unrelated collector or automatic credential theft was established, so this is suspicious telemetry rather than malicious behavior.
Evidence
dist/index.js
Network endpoints1
SA_API_URL/analytics/chat
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes dist/index.js as its CommonJS entrypoint and dist/index.mjs as its ESM entrypoint; it declares no install lifecycle hooks.
- Analytics is enabled unless SA_ANALYTICS_ENABLED is set to "false" and uses SA_API_URL when configured.
- The analytics event includes the user's question and the generated response, along with identifiers and usage details.
- The SDK posts analytics events to SA_API_URL/analytics/chat during runtime.
- Provider API keys use SUPERATOM_LLM_PROXY_URL only when configured; otherwise provider clients use their normal endpoints.
Evidence against
- The analytics URL must be supplied through SA_API_URL; no fixed collector host was found.
- The runtime analytics path is gated by SA_ANALYTICS_ENABLED=false, and is disabled when SA_API_URL is unset.
- The reviewed source did not establish automatic collection or transmission of credentials to an unrelated host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
8 flaggeddist/index.jsView file
88mintContextToken: () => mintContextToken,
L89: normalizeScriptBody: () => normalizeScriptBody,
L90: onAgentRun: () => onAgentRun,
...
L122:
L123: // src/websocket.ts
L124: var import_ws = __toESM(require("ws"));
...
L1183: constructor() {
L1184: const envLevel = (process.env.SUPERATOM_LOG_LEVEL || "info").toLowerCase();
L1185: if (this.isValidLogLevel(envLevel)) {
...
L2194: const cipher = import_crypto3.default.createCipheriv(this.algorithm, this.encryptionKey, iv);
L2195: let encrypted = cipher.update(payload, "utf8", "base64");
L2196: encrypted += cipher.final("base64");
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L88•Trigger-reachable chain: manifest.main -> dist/index.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = @superatomai/sdk-node@0.0.81-dsp
matchedIdentity = npm:QHN1cGVyYXRvbWFpL3Nkay1ub2Rl:0.0.81-dsp
similarity = 0.400
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical3 High4 Medium5 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @superatomai/sdk-node@0.0.84-dsp.
See all versions of @superatomai/sdk-node for other recorded verdicts.
- Review the evidence and your use of @superatomai/sdk-node@0.0.84-dsp before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.