Loading npm security reports…

@tencentdb-agent-memory/memory-tencentdb@1.0.3: AI-agent | LPM Firewall

registry / @tencentdb-agent-memory/memory-tencentdb / 1.0.3

@tencentdb-agent-memory/memory-tencentdb@1.0.3

Four-layer local memory system plugin for OpenClaw — auto-captures, structures, and profiles conversational knowledge using local LLM + SQLite vector search (L0→L1→L2→L3 pipeline)

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. The automatic postinstall hook modifies an installed OpenClaw distribution to expose session messages in after-tool-call events.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package through npm, which runs its postinstall hook.

Impact

This changes a separate agent installation's runtime behavior and makes session history available to its hooks.

Mechanism

The hook runs a script that finds OpenClaw JavaScript files and inserts session-message access into matching hook-event code.

Policy narrative

On package installation, postinstall invokes a script that searches the OpenClaw distribution and edits matching JavaScript files to add session messages to after-tool-call hook events. This is an automatic mutation of a foreign agent control surface.

AI rationale

The package automatically invokes a script that edits another installed product’s runtime hook code to expose session messages. This meets the blocking criterion for unconsented postinstall mutation of an AI-agent control surface.

Evidence

package.jsonscripts/openclaw-after-tool-call-messages.patch.sh

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 99.0% confidence with false-positive risk.

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = bash scripts/openclaw-after-tool-call-messages.patch.sh 2>/dev/null || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = bash scripts/openclaw-after-tool-call-messages.patch.sh 2>/dev/null || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/export-tencent-vdb.mjsView file

19L20: import(entryScript);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/export-tencent-vdb.mjsView on unpkg · L19

dist/index.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tencentdb-agent-memory/memory-tencentdb@1.0.1 matchedIdentity = npm:[redacted]:1.0.1 similarity = 0.783 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.mjsView on unpkg

13import { fileURLToPath } from "url"; L14: import * as https from "node:https"; L15: import * as http from "node:http"; ... L133: cleaned = cleaned.replace(/^System:\s*\[[\s\S]*?$/gm, ""); L134: cleaned = cleaned.replace(/data:image\/[a-z+]+;base64,[A-Za-z0-9+/=]+/gi, ""); L135: cleaned = cleaned.replace(/\0/g, "").replace(/\n{3,}/g, "\n\n").trim(); ... L2344: /** Default root data directory (parent of all agent subdirectories) */ L2345: const DEFAULT_DATA_ROOT = join(homedir(), ".openclaw", "context-offload"); L2346: /** ... L5581: · 如果输入中该 tool pair 标记了 [NEEDS_COMPRESS]，你必须将工具名+关键参数压缩为一句简洁的描述（≤150字符），保留工具名、操作目标（如文件路径、命令意图），省略内联脚本/大段内容的细节。 L5582: 示例：exec({"command":"python3 -c 'import csv; ...200行脚本...'"}) → "exec: 运行 Python （xx/xx/xx.sh，标明具体路径和文件）脚本分析 sales_channels.csv 数据质量" L5583:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.mjsView on unpkg · L13

hermes-plugin/memory/memory_tencentdb_v2/tests/__init__.pyView file

•path = hermes-plugin/memory/memory_tencentdb_v2/tests/__init__.py kind = build_helper sizeBytes = 0

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hermes-plugin/memory/memory_tencentdb_v2/tests/__init__.pyView on unpkg

hermes-plugin/memory/memory_tencentdb_v2/tests/test_provider.pyView file

•path = hermes-plugin/memory/memory_tencentdb_v2/tests/test_provider.py kind = payload_in_excluded_dir sizeBytes = 5721 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

hermes-plugin/memory/memory_tencentdb_v2/tests/test_provider.pyView on unpkg

index.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.ts#virtual:normalized:round1View on unpkg

scripts/install-openclaw-plugin-v2.shView file

•matchType = normalized_sha256 matchedPackage = @tencentdb-agent-memory/memory-tencentdb@1.0.2 matchedPath = scripts/install-openclaw-plugin-v2.sh matchedIdentity = npm:[redacted]:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install-openclaw-plugin-v2.shView on unpkg

scripts/read-local-memory/dist/read-local-memory.jsView file

•matchType = normalized_sha256 matchedPackage = @tencentdb-agent-memory/memory-tencentdb@1.0.2 matchedPath = scripts/read-local-memory/dist/read-local-memory.js matchedIdentity = npm:[redacted]:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/read-local-memory/dist/read-local-memory.jsView on unpkg

scripts/install_hermes_memory_tencentdb.shView file

•matchType = normalized_sha256 matchedPackage = @tencentdb-agent-memory/memory-tencentdb@1.0.2 matchedPath = scripts/install_hermes_memory_tencentdb.sh matchedIdentity = npm:[redacted]:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install_hermes_memory_tencentdb.shView on unpkg

scripts/memory-tencentdb-ctl.shView file

•matchType = normalized_sha256 matchedPackage = @tencentdb-agent-memory/memory-tencentdb@1.0.2 matchedPath = scripts/memory-tencentdb-ctl.sh matchedIdentity = npm:[redacted]:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/memory-tencentdb-ctl.shView on unpkg

src/config.tsView file

•matchType = normalized_sha256 matchedPackage = @tencentdb-agent-memory/memory-tencentdb@1.0.2 matchedPath = src/config.ts matchedIdentity = npm:[redacted]:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/config.tsView on unpkg