registry / @xylex-group/athena / 5.6.3

@xylex-group/athena@5.6.3

Athena JS SDK

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package has no consumer install lifecycle hook, and the flagged dynamic evaluation sites are fixed Node compatibility loaders. Inspection found no decoded remote payload execution or unconsented data collection.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

A user explicitly imports SDK features or runs the athena-js CLI.

Impact

Configured application services or local diagnostic files may be used as requested by the caller.

Mechanism

User-invoked SDK requests and local CLI diagnostics.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest has no preinstall, install, or postinstall hook; its listed lifecycle hook is prepublishOnly.
The development launcher starts the package-local TypeScript CLI with inherited standard input and environment.
The ESM and CommonJS entries use Function only to obtain Node crypto compatibility, not to evaluate downloaded content.
The Next server build contains the same fixed crypto fallback.
The CLI bundle exposes a runCLI function, while bootstrap logging writes local mode-0600 diagnostic files.
No remote payload decoding or execution, credential harvesting, or unconsented persistence was confirmed.

Evidence against

The package has broad SDK, database, storage, and OAuth networking capabilities when its APIs or CLI are invoked.
The CLI can write local diagnostic logs after an explicit command invocation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Source & flagged code

12 flagged

bin/athena-js-dev.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2/**

3 * Workspace-dev CLI: runs TypeScript `src/cli/bin.ts` via tsx.

4 * Production `bin/athena-js.js` continues to load packed `dist/cli/index.js`.

5 */

6import { spawn } from "node:child_process";

7import path from "node:path";

High

Child Process

Package source references child process execution.

bin/athena-js-dev.mjsView on unpkg · L5

8import { fileURLToPath } from "node:url";

10const binPath = fileURLToPath(import.meta.url);

11const packageRoot = path.resolve(path.dirname(binPath), "..");

12const entry = path.join(packageRoot, "src", "cli", "bin.ts");

13const projectCwd = process.cwd();

15const child = spawn(

16 process.execPath,

17 ["--import", "tsx", entry, "--cwd", projectCwd, ...process.argv.slice(2)],

18 {

19 cwd: packageRoot,

20 env: process.env,

21 stdio: "inherit",

22 }

23);

25child.on("exit", (code, signal) => {

•matchType = normalized_sha256 matchedPackage = @xylex-group/athena@5.5.4 matchedPath = bin/athena-js-dev.mjs matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/athena-js-dev.mjsView on unpkg

dist/index.jsView file

1import { createHash, createDecipheriv, randomBytes, createCipheriv, createHmac, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto'; L2: import { AsyncLocalStorage } from 'async_hooks'; ... L188: super({ L189: body: { missing: input.missing, operation: input.operation }, L190: code: ATHENA_BILLING_AUTHORIZATION_DENIED, ... L386: L387: // package.json L388: var package_default; ... L1053: const social = normalizeSocialFromRaw(raw); L1054: const envForIdentity = options.env ?? process.env; L1055: const appIdentity = options.identity === void 0 ? resolveAthenaAppIdentity({ ... L1806: init_inspect();

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L1

22796function createRuntimeImport() { L22797: return new Function("moduleSpecifier", "return import(moduleSpecifier)"); L22798: }

High

Eval

Package source references dynamic code evaluation.

dist/index.jsView on unpkg · L22796

bin/athena-js.jsView file

Lines 212-252javascript

212 if (isVersionArgv(argv)) {

213 const short = argv.includes("--short") || argv.includes("-q");

214 const version

dist/index.cjsView file

213Trigger-reachable chain: manifest.main -> dist/index.cjs L213: super({ L214: body: { missing: input.missing, operation: input.operation }, L215: code: ATHENA_BILLING_AUTHORIZATION_DENIED, ... L411: L412: // package.json L413: var package_default; ... L562: // src/auth/bridge/code.ts L563: function toBase64Url(bytes) { L564: let binary = ""; ... L1078: const social = normalizeSocialFromRaw(raw); L1079: const envForIdentity = options.env ?? process.env; L1080: const appIdentity = options.identity === void 0 ? resolveAthenaAppIdentity({

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L213

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.cjs: return "authorization"; return "authorization"; var ATHENA_BILLING_HTTP_ERROR; exports.AthenaBillingError = void 0; var ATHENA_BILLING_OPERATION_UNAVAILABLE, ATHENA_BILLING_AUTHORIZATION_DENIED, ATHENA_BILLING_LOCAL_RUNTIME_SERV... ATHENA_BILLING_AUTHORIZATION_DENIED = "ATHENA_BILLING_AUTHORIZATION_DENIED"; AthenaBillingAuthorizationError = class extends exports.AthenaBillingError { code: ATHENA_BILLING_AUTHORIZATION_DENIED, this.name = "AthenaBillingAuthorizationError"; authorizationAuditLog: "athena.authorization_audit_log",

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.cjsView on unpkg

dist/next/server.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xylex-group/athena@5.6.0 matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.6.0 similarity = 0.725 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/next/server.jsView on unpkg

1import { createHmac, createHash, createDecipheriv, randomBytes, createCipheriv, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto'; L2: import { AsyncLocalStorage } from 'async_hooks'; ... L14: import { fileURLToPath } from 'url'; L15: import { execSync } from 'child_process'; L16: ... L698: const social = normalizeSocialFromRaw(raw); L699: const envForIdentity = options.env ?? process.env; L700: const appIdentity = options.identity === void 0 ? resolveAthenaAppIdentity({ ... L804: L805: // package.json L806: var package_default; ... L976: super({

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/next/server.jsView on unpkg · L1

dist/cli/index.cjsView file

11Cross-file remote execution chain: dist/cli/index.cjs spawns dist/index.cjs; helper contains network access plus dynamic code execution. L11: var pgsqlParser = require('pgsql-parser'); L12: var child_process = require('child_process'); L13: var os = require('os'); ... L31: L32: // package.json L33: var package_default; ... L1184: const isTty = options.isTty ?? Boolean( L1185: globalThis.process?.stdout?.isTTY L1186: ); ... L2415: function isAsciiAlphanumeric(ch) { L2416: const code = ch.charCodeAt(0); L2417: return code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.cjsView on unpkg · L11

bin/bootstrap-logging.jsView file

•matchType = normalized_sha256 matchedPackage = @xylex-group/athena@5.5.4 matchedPath = bin/bootstrap-logging.js matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/bootstrap-logging.jsView on unpkg

Source & flagged code

12 flagged · loading source

bin/athena-js-dev.mjsView file

5*/ L6: import { spawn } from "node:child_process"; L7: import path from "node:path";

High

Child Process

Package source references child process execution.

bin/athena-js-dev.mjsView on unpkg · L5

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/athena-js-dev.mjsView on unpkg

dist/index.jsView file

Findings

3 Critical9 High4 Medium5 Low

CriticalRemote Asset Decode Executedist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

CriticalPrevious Version Dangerous Deltadist/next/server.js

HighChild Processbin/athena-js-dev.mjs

HighShell

HighEvaldist/index.js

HighCredential Redirect Persistencedist/index.cjs

HighCommand Output Exfiltrationdist/next/server.js

HighCloud Metadata Accessdist/next/server.js

HighCross File Remote Execution Contextdist/cli/index.cjs

HighKnown Malware Source Similaritybin/bootstrap-logging.js

HighKnown Malware Source Similaritybin/athena-js-dev.mjs

Affected versions and remediation

This report applies to @xylex-group/athena@5.6.3.

See all versions of @xylex-group/athena for other recorded verdicts.

Review the evidence and your use of @xylex-group/athena@5.6.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-13 07:16:45.207Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.