registry / Credential exfiltration / @ultrst-armada/kloks
@ultrst-armada/kloks
Kloks — Public Backend, State-Graph, Audio/MIDI & Service Package Library built on KrnlTS (@kloks/*)
This report shows the evidence for @ultrst-armada/kloks@1.24.11. 1 of 42 known versions is blocked or flagged. See all versions.
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe backend's Cloudflare error handler forwards the user's token and account ID to the SRKL service, whose default host is controlled by the package publisher. This is credential exfiltration even though it occurs only after the normal Cloudflare request fails.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A caller invokes fetchCloudflareData with a Cloudflare token, and the normal provider lookup throws an error.
Impact
The SRKL service receives the user's Cloudflare credential and could use it to access the associated account.
Mechanism
The catch handler places the token and account ID in the query string of a request to the SRKL resources endpoint; its default host is srkl-engine.vercel.app.
Attack narrative
When Cloudflare data retrieval fails, the exported backend function sends the supplied Cloudflare token and account ID to an SRKL endpoint. If no deployment URL is resolved, the endpoint defaults to srkl-engine.vercel.app. This discloses a third-party service credential to the package vendor during error handling without an explicit consent step.
AI rationale
The backend's Cloudflare error handler forwards the user's token and account ID to the SRKL service, whose default host is controlled by the package publisher. This is credential exfiltration even though it occurs only after the normal Cloudflare request fails.
Evidence
packages/backend/dist/index.jspackages/backend/dist/chunk-HF5SGQ5V.js
Network endpoints2
srkl-engine.vercel.appapi.cloudflare.com
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- On Cloudflare request failure, fetchCloudflareData sends the Cloudflare token and account ID to the SRKL resources endpoint.
- The endpoint falls back to the hard-coded host srkl-engine.vercel.app.
- fetchCloudflareData accepts tokens from its payload or credentials object and is exported by the backend.
Evidence against
- The package implements provider integrations that normally send credentials to their corresponding official APIs.
- The SRKL request is in an error fallback, rather than the normal successful Cloudflare response path.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggedpackages/state-graph/dist/transformers.node-HWHOAE4H.jsView file
33"use strict";
L34: var fs6 = __require("fs");
L35: var LDD_PATH = "/usr/bin/ldd";
Medium
Dynamic Require
Package source references dynamic require/import behavior.
packages/state-graph/dist/transformers.node-HWHOAE4H.jsView on unpkg · L3318054${m}
L18055: }`, n = new Function(Object.keys(h), m)(...Object.values(h)), m = `methodCaller<(${u.map((y) => y.name)}) => ${o.name}>`, Fi(Object.defineProperty(n, "name", { value: m }));
L18056: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
packages/state-graph/dist/transformers.node-HWHOAE4H.jsView on unpkg · L18054packages/services/dist/index.jsView file
4Source sends the broad process environment to a literal external destination.
L4: import { randomUUID } from "crypto";
L5: import http from "http";
L6:
...
L42: defineApi({ id: "gutts.json.isJsonValue", name: "isJsonValue", category: "json", description: "Checks whether an unknown value can be represented as a finite JSON value.", paramete...
L43: defineApi({ id: "gutts.json.parseJson", name: "parseJson", category: "json", description: "Parses a JSON text string into a JSON-compatible value.", parameters: [{ name: "text", de...
L44: defineApi({ id: "gutts.json.tryParseJson", name: "tryParseJson", category: "json", description: "Attempts to parse JSON text and returns undefined instead of throwing when parsing ...
...
L280: outputs: [{ id: "result", name: "result", direction: "output", dat
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
packages/services/dist/index.jsView on unpkg · L4packages/backend/dist/chunk-RCCQ7IRM.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
packages/backend/dist/chunk-RCCQ7IRM.jsView on unpkgpackages/backend/dist/chunk-3VWBZEMG.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @ultrst-armada/kloks@1.24.5
matchedIdentity = npm:QHVsdHJzdC1hcm1hZGEva2xva3M:1.24.5
similarity = 0.683
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
packages/backend/dist/chunk-3VWBZEMG.jsView on unpkgFindings
1 Critical2 High4 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationpackages/services/dist/index.js
HighSemantic Analysis Limitedpackages/backend/dist/chunk-RCCQ7IRM.js
HighPrevious Version Dangerous Deltapackages/backend/dist/chunk-3VWBZEMG.js
MediumDynamic Requirepackages/state-graph/dist/transformers.node-HWHOAE4H.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalpackages/state-graph/dist/transformers.node-HWHOAE4H.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @ultrst-armada/kloks@1.24.11.
The versions list below shows the verdict for each recorded version.
- Avoid installing @ultrst-armada/kloks@1.24.11. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
42 known versions1.24.11latestshownMaliciousCredential ExfiltrationBlockPublishedNov 4, 2026, 6:52 PM1.24.5Suspicious—WarnPublishedNov 3, 2026, 3:41 AM1.24.4Clean—AllowPublishedNov 2, 2026, 10:36 PM1.24.3Suspicious—WarnPublishedNov 2, 2026, 10:07 PM1.24.2Clean—AllowPublishedNov 2, 2026, 10:00 PM1.24.0Suspicious—WarnPublishedOct 31, 2026, 4:10 PM1.23.0Unknown—AllowUnder ReviewOct 31, 2026, 1:49 PM1.22.1Unknown—AllowUnder ReviewOct 30, 2026, 7:11 PM1.22.0Unknown—AllowUnder ReviewOct 30, 2026, 4:18 PM1.21.1Unknown—AllowUnder ReviewOct 30, 2026, 8:58 AM1.21.0Unknown—AllowUnder ReviewOct 30, 2026, 8:21 AM1.19.0Unknown—AllowUnder ReviewOct 29, 2026, 7:36 PM1.17.0Unknown—AllowUnder ReviewOct 29, 2026, 7:50 AM1.16.0Unknown—AllowUnder ReviewOct 29, 2026, 7:42 AM1.15.0Unknown—AllowUnder ReviewOct 29, 2026, 7:34 AM1.14.0Unknown—AllowUnder ReviewOct 29, 2026, 7:24 AM1.13.0Unknown—AllowUnder ReviewOct 29, 2026, 7:06 AM1.12.0Unknown—AllowUnder ReviewOct 26, 2026, 12:52 PM1.10.4Unknown—AllowUnder ReviewOct 26, 2026, 12:10 PM1.10.2Unknown—AllowUnder ReviewOct 26, 2026, 11:43 AM1.9.0Unknown—AllowUnder ReviewOct 25, 2026, 4:41 PM1.8.0Unknown—AllowUnder ReviewOct 25, 2026, 3:49 PM1.7.1Unknown—AllowUnder ReviewOct 25, 2026, 12:30 PM1.7.0Unknown—AllowUnder ReviewOct 23, 2026, 10:55 PM1.6.0Unknown—AllowUnder ReviewOct 23, 2026, 4:05 PM1.5.2Unknown—AllowUnder ReviewOct 23, 2026, 2:27 PM1.5.1Unknown—AllowUnder ReviewOct 23, 2026, 11:11 AM1.4.7Unknown—AllowUnder ReviewOct 21, 2026, 3:33 AM1.4.6Unknown—AllowUnder ReviewOct 20, 2026, 5:52 PM1.4.5Unknown—AllowUnder ReviewOct 20, 2026, 3:23 PM1.4.3Unknown—AllowUnder ReviewOct 16, 2026, 3:01 PM1.4.2Unknown—AllowUnder ReviewOct 16, 2026, 11:27 AM1.4.1Unknown—AllowUnder ReviewOct 15, 2026, 8:34 PM1.4.0Unknown—AllowUnder ReviewOct 15, 2026, 11:36 AM1.3.0Unknown—AllowUnder ReviewOct 14, 2026, 7:54 PM1.2.1Unknown—AllowUnder ReviewOct 14, 2026, 7:07 PM1.2.0Unknown—AllowUnder ReviewOct 14, 2026, 6:45 PM1.1.1Unknown—AllowUnder ReviewOct 13, 2026, 9:33 PM1.1.0Unknown—AllowUnder ReviewOct 13, 2026, 7:16 PM1.0.2Unknown—AllowUnder ReviewOct 13, 2026, 11:46 AM1.0.1Unknown—AllowUnder ReviewOct 13, 2026, 7:01 AM0.0.0-stageUnknown—AllowUnder ReviewOct 13, 2026, 6:47 AM