registry / @xylex-group/athena / 5.7.9

@xylex-group/athena@5.7.9

Athena JS SDK

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the inspected flagged code did not establish concrete attack behavior. The scanner indicators are consistent with SDK imports, configuration loading, and CLI setup.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Importing an SDK entry point or invoking the CLI.

Impact

No confirmed unauthorized data transfer, mutation, or code execution was established.

Mechanism

The flagged dynamic import helper loads a configuration module; the development launcher starts the package CLI, and bootstrap logging selects local logging behavior.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 83.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

package.json defines prepublishOnly as release verification; inspected package scripts show no install lifecycle hook.
Inspected package entry bundles load SDK dependencies and exports; the eval hint is a dynamic import helper for configuration modules.
The development launcher starts the package's local CLI entry, while bootstrap logging supports local logging modes.
Inspected required runtime entry paths and found no confirmed malicious behavior; the flagged network default is an Athena gateway endpoint.

Evidence against

Scanner hints about eval, network use, and source similarity do not establish attack behavior; inspected excerpts show package imports, a configuration import helper, and CLI setup.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

13 flagged

bin/athena-js-dev.mjsView file

5*/ L6: import { spawn } from "node:child_process"; L7: import path from "node:path";

High

Child Process

Package source references child process execution.

bin/athena-js-dev.mjsView on unpkg · L5

•matchType = normalized_sha256 matchedPackage = @xylex-group/athena@5.5.4 matchedPath = bin/athena-js-dev.mjs matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/athena-js-dev.mjsView on unpkg

dist/index.jsView file

1import { createHash, createDecipheriv, randomBytes, createCipheriv, createHmac, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto'; L2: import { AsyncLocalStorage } from 'async_hooks'; ... L10: import { z } from 'zod'; L11: import { spawn } from 'child_process'; L12: import { argon2id } from '@noble/hashes/argon2.js'; ... L185: super({ L186: body: { missing: input.missing, operation: input.operation }, L187: code: ATHENA_BILLING_AUTHORIZATION_DENIED, ... L402: L403: // package.json L404: var package_default; ... L830: init_errors2();

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/index.jsView on unpkg · L1

29199function createRuntimeImport() { L29200: return new Function("moduleSpecifier", "return import(moduleSpecifier)"); L29201: }

High

Eval

Package source references dynamic code evaluation.

dist/index.jsView on unpkg · L29199

bin/athena-js.jsView file

232}); L233: const cliModule = await import(cliEntrypointUrl); L234: if (typeof cliModule.runCLI !== "function") {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/athena-js.jsView on unpkg · L232

dist/index.cjsView file

11Trigger-reachable chain: manifest.main -> dist/index.cjs L11: var z3 = require('zod'); L12: var child_process = require('child_process'); L13: var argon2_js = require('@noble/hashes/argon2.js'); ... L210: super({ L211: body: { missing: input.missing, operation: input.operation }, L212: code: ATHENA_BILLING_AUTHORIZATION_DENIED, ... L427: L428: // package.json L429: var package_default; ... L578: // src/auth/bridge/code.ts L579: function toBase64Url(bytes) { L580: let binary = "";

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.cjsView on unpkg · L11

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.cjs: function [redacted](error) { if (error instanceof AthenaBillingAuthorizationError) { return error.code === ATHENA_BILLING_AUTHORIZATION_DENIED && error.errorNumber === 4014 && typeof error.operation === "string" && Array.isArray(error.missing); return "authorization"; return "authorization"; var ATHENA_BILLING_HTTP_ERROR; exports.AthenaBillingError = void 0; var ATHENA_BILLING_OPERATION_UNAVAILABLE, ATHENA_BILLING_AUTHORIZATION_DENIED, ATHENA_BILLING_LOCAL_RUNTIME_SERV... ATHENA_BILLING_AUTHORIZATION_DENIED = "ATHENA_BILLING_AUTHORIZATION_DENIED"; AthenaBillingAuthorizationError = class extends exports.AthenaBillingErro

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.cjsView on unpkg

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 6

dist/next/server.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @xylex-group/athena@5.6.10 matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.6.10 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/next/server.jsView on unpkg

1import { createHmac, createHash, createDecipheriv, randomBytes, createCipheriv, timingSafeEqual as timingSafeEqual$1, randomUUID } from 'crypto'; L2: import { AsyncLocalStorage } from 'async_hooks'; ... L14: import { fileURLToPath } from 'url'; L15: import { execSync } from 'child_process'; L16: ... L464: init_errors(); L465: ATHENA_AUTH_DEV_DEFAULT_ISSUER = "http://localhost:3000"; L466: } ... L767: ); L768: if (process.env.NODE_ENV === "production" && !origin.startsWith("https://")) { L769: throw new AthenaConfigurationError( ... L1161:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/next/server.jsView on unpkg · L1

dist/cli/index.cjsView file

11Cross-file remote execution chain: dist/cli/index.cjs spawns dist/index.cjs; helper contains network access plus dynamic code execution. L11: var promises = require('fs/promises'); L12: var child_process = require('child_process'); L13: var promises$1 = require('timers/promises'); ... L37: L38: // package.json L39: var package_default; ... L1290: const isTty = options.isTty ?? Boolean( L1291: globalThis.process?.stdout?.isTTY L1292: ); ... L2523: function isAsciiAlphanumeric(ch) { L2524: const code = ch.charCodeAt(0); L2525: return code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.cjsView on unpkg · L11

bin/bootstrap-logging.jsView file

•matchType = normalized_sha256 matchedPackage = @xylex-group/athena@5.5.4 matchedPath = bin/bootstrap-logging.js matchedIdentity = npm:QHh5bGV4LWdyb3VwL2F0aGVuYQ:5.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/bootstrap-logging.jsView on unpkg

Source & flagged code

13 flagged · loading source

bin/athena-js-dev.mjsView file

5*/ L6: import { spawn } from "node:child_process"; L7: import path from "node:path";

High

Child Process

Package source references child process execution.

bin/athena-js-dev.mjsView on unpkg · L5

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/athena-js-dev.mjsView on unpkg

dist/index.jsView file

Findings

3 Critical10 High4 Medium5 Low

CriticalRemote Asset Decode Executedist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs

CriticalPrevious Version Dangerous Deltadist/next/server.js

HighChild Processbin/athena-js-dev.mjs

HighShell

HighEvaldist/index.js

HighCredential Redirect Persistencedist/index.cjs

HighCommand Output Exfiltrationdist/next/server.js

HighCloud Metadata Accessdist/next/server.js

HighCross File Remote Execution Contextdist/cli/index.cjs

HighSemantic Analysis Limiteddist/index.cjs

HighKnown Malware Source Similaritybin/bootstrap-logging.js

Affected versions and remediation

This report applies to @xylex-group/athena@5.7.9.

See all versions of @xylex-group/athena for other recorded verdicts.

Review the evidence and your use of @xylex-group/athena@5.7.9 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 00:33:53.952Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.