registry / @xylex-group/athena / 5.6.10

@xylex-group/athena@5.6.10

Athena JS SDK

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Static inspection found no install lifecycle hook or concrete malicious execution path. The observed process launch and local logging are package-aligned CLI behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Normal library import or explicit CLI invocation.

Impact

No unconsented install-time execution, credential export, remote payload loading, or destructive behavior was confirmed.

Mechanism

The package provides application, authentication, database, and CLI utilities; its bootstrap logger is locally configurable and can be disabled.

AI rationale

Static inspection found no install lifecycle hook or concrete malicious execution path. The observed process launch and local logging are package-aligned CLI behavior.

Evidence

package.jsonbin/athena-js-dev.mjsbin/bootstrap-logging.jsdist/index.jsdist/index.cjsdist/next/server.jsdist/cli/index.cjs

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest defines build and check scripts; inspection found no install lifecycle hook.
The development launcher starts the package TypeScript CLI with the current Node executable and inherited standard I/O.
The ESM runtime bundle exports database, schema, and provider utilities.
The CommonJS runtime bundle exposes matching library utilities.
The Next server bundle exposes authentication and server-session helpers.
The CLI bundle returns command outcomes and exports CLI catalog helpers.
Bootstrap logging can be disabled with --no-log or ATHENA_CLI_LOG=off.

Evidence against

The CLI logging component writes local diagnostic logs when logging is enabled.
The development launcher uses child_process only to invoke the package's TypeScript CLI.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

Source & flagged code

14 flagged

bin/athena-js-dev.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Workspace-dev CLI: runs TypeScript `src/cli/bin.ts` via tsx.

4 * Production `bin/athena-js.js` continues to load packed `dist/cli/index.js`.

5 */

6import { spawn } from "node:child_process";

7import path from "node:path";

High

Child Process

Package source references child process execution.

bin/athena-js-dev.mjsView on unpkg · L5

8import { fileURLToPath } from "node:url";

10const binPath = fileURLToPath(import.meta.url);

11const packageRoot = path.resolve(path.dirname(binPath), "..");

12const entry = path.join(packageRoot, "src", "cli", "bin.ts");

13const projectCwd = process.cwd();

15const child = spawn(

16 process.execPath,

17 ["--import", "tsx", entry, "--cwd", projectCwd, ...process.argv.slice(2)],

18 {

19 cwd: packageRoot,

20 env: process.env,

21 stdio: "inherit",

22 }

23);

25child.on("exit", (code, signal) => {

•matchType = normalized_sha256 matchedPackage = @xylex-group/athena@5.5.4 matchedPath = bin/athena-js-dev.mjs matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/athena-js-dev.mjsView on unpkg

dist/index.jsView file

1import { createHash, createDecipheriv, randomBytes, createCipheriv, createHmac, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto'; L2: import { AsyncLocalStorage } from 'async_hooks'; ... L10: import { z } from 'zod'; L11: import { spawn } from 'child_process'; L12: import { argon2id } from '@noble/hashes/argon2.js'; ... L176: super({ L177: body: { missing: input.missing, operation: input.operation }, L178: code: ATHENA_BILLING_AUTHORIZATION_DENIED, ... L392: L393: // package.json L394: var package_default; ... L817: init_errors2();

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L1

25566function createRuntimeImport() { L25567: return new Function("moduleSpecifier", "return import(moduleSpecifier)"); L25568: }

High

Eval

Package source references dynamic code evaluation.

dist/index.jsView on unpkg · L25566

bin/athena-js.jsView file

232}); L233: const cliModule = await import(cliEntrypointUrl); L234: if (typeof cliModule.runCLI !== "function") {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/athena-js.jsView on unpkg · L232

dist/index.cjsView file

11Trigger-reachable chain: manifest.main -> dist/index.cjs L11: var z3 = require('zod'); L12: var child_process = require('child_process'); L13: var argon2_js = require('@noble/hashes/argon2.js'); ... L201: super({ L202: body: { missing: input.missing, operation: input.operation }, L203: code: ATHENA_BILLING_AUTHORIZATION_DENIED, ... L417: L418: // package.json L419: var package_default; ... L568: // src/auth/bridge/code.ts L569: function toBase64Url(bytes) { L570: let binary = "";

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L11

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.cjs: return "authorization"; return "authorization"; var ATHENA_BILLING_HTTP_ERROR; exports.AthenaBillingError = void 0; var ATHENA_BILLING_OPERATION_UNAVAILABLE, ATHENA_BILLING_AUTHORIZATION_DENIED, ATHENA_BILLING_LOCAL_RUNTIME_SERV... ATHENA_BILLING_AUTHORIZATION_DENIED = "ATHENA_BILLING_AUTHORIZATION_DENIED"; AthenaBillingAuthorizationError = class extends exports.AthenaBillingError { code: ATHENA_BILLING_AUTHORIZATION_DENIED, this.name = "AthenaBillingAuthorizationError"; authorizationAuditLog: "athena.authorization_audit_log",

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.cjsView on unpkg

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

dist/next/server.jsView file

1import { createHmac, createHash, createDecipheriv, randomBytes, createCipheriv, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto'; L2: import { AsyncLocalStorage } from 'async_hooks'; ... L14: import { fileURLToPath } from 'url'; L15: import { execSync } from 'child_process'; L16: ... L461: init_errors(); L462: ATHENA_AUTH_DEV_DEFAULT_ISSUER = "http://localhost:3000"; L463: } ... L755: ); L756: if (process.env.NODE_ENV === "production" && !origin.startsWith("https://")) { L757: throw new AthenaConfigurationError( ... L1149:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/next/server.jsView on unpkg · L1

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/next/server.jsView on unpkg · L1

dist/cli/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xylex-group/athena@5.6.3 matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.6.3 similarity = 0.450 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/index.cjsView on unpkg

11Cross-file remote execution chain: dist/cli/index.cjs spawns dist/index.cjs; helper contains network access plus dynamic code execution. L11: var promises = require('fs/promises'); L12: var child_process = require('child_process'); L13: var promises$1 = require('timers/promises'); ... L37: L38: // package.json L39: var package_default; ... L1290: const isTty = options.isTty ?? Boolean( L1291: globalThis.process?.stdout?.isTTY L1292: ); ... L2523: function isAsciiAlphanumeric(ch) { L2524: const code = ch.charCodeAt(0); L2525: return code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.cjsView on unpkg · L11

package.jsonView file

•dependencies registry_only=@xylex-group/athena

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

bin/bootstrap-logging.jsView file

•matchType = normalized_sha256 matchedPackage = @xylex-group/athena@5.5.4 matchedPath = bin/bootstrap-logging.js matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/bootstrap-logging.jsView on unpkg

Source & flagged code

14 flagged · loading source

bin/athena-js-dev.mjsView file

5*/ L6: import { spawn } from "node:child_process"; L7: import path from "node:path";

High

Child Process

Package source references child process execution.

bin/athena-js-dev.mjsView on unpkg · L5

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/athena-js-dev.mjsView on unpkg

dist/index.jsView file

Findings

4 Critical10 High4 Medium5 Low

CriticalRemote Asset Decode Executedist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

CriticalManifest Confusionpackage.json

CriticalPrevious Version Dangerous Deltadist/cli/index.cjs

HighChild Processbin/athena-js-dev.mjs

HighShell

HighEvaldist/index.js

HighCredential Redirect Persistencedist/index.cjs

HighCommand Output Exfiltrationdist/next/server.js

HighCloud Metadata Accessdist/next/server.js

HighCross File Remote Execution Contextdist/cli/index.cjs

HighSemantic Analysis Limiteddist/index.cjs

Affected versions and remediation

This report applies to @xylex-group/athena@5.6.10.

See all versions of @xylex-group/athena for other recorded verdicts.

Review the evidence and your use of @xylex-group/athena@5.6.10 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 16:10:13.291Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.