registry / akm-opencode / 0.10.261019
akm-opencode@0.10.261019
OpenCode plugin for AKM with discovery tools, feedback, memory, and automatic learning proposals from corrections and recurring workflows.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the reviewed entry point implements session-aware curation and explicit knowledge-management tools. The scanner’s similarity and dynamic-require hints do not establish malicious behavior in the inspected source.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The OpenCode host loads the plugin; session hooks run on session events, while tool actions run when selected by the host or user.
Impact
These actions support the stated plugin purpose; inspected source shows no unrelated credential transfer, install-time contact, or concealed execution.
Mechanism
The plugin records structured session events, gathers curation and hints, and invokes akm-cli for knowledge-management operations.
AI rationale
The manifest has no install lifecycle hook, and the reviewed entry point implements session-aware curation and explicit knowledge-management tools. The scanner’s similarity and dynamic-require hints do not establish malicious behavior in the inspected source.
Evidence
dist/index.js
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall hook; its scripts are build, prepack, and typecheck.
- The entry point defines an OpenCode plugin that receives the host client, worktree, and project directory.
- On session events, the plugin records structured session events and performs project curation and hint gathering for its knowledge-management features.
- The exposed remember tool sends its arguments to the akm-cli dependency when explicitly invoked.
Evidence against
- The plugin automatically performs curation and related knowledge-management work on session creation.
- The plugin launches the akm-cli dependency as a child process for its operations.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
HighEntropyStrings
CopyleftLicense
Source & flagged code
7 flaggeddist/index.jsView file
•matchType = normalized_sha256
matchedPackage = akm-opencode@0.10.261017
matchedPath = dist/index.js
matchedIdentity = npm:YWttLW9wZW5jb2Rl:0.10.261017
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/index.jsView on unpkg•matchType = malicious_source_fingerprint_signature
signature = 905c7a18a7553c98
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = akm-opencode@0.10.261017
matchedPath = dist/index.js
matchedIdentity = npm:YWttLW9wZW5jb2Rl:0.10.261017
similarity = 1.000
shingleOverlap = 1
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/index.jsView on unpkg29try {
L30: const manifestPath = createRequire(moduleUrl).resolve("akm-cli/package.json");
L31: const bin = JSON.parse(readFileSync(manifestPath, "utf8")).bin;
Medium
Findings
2 High2 Medium8 Low
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
MediumDynamic Requiredist/index.js
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowCopyleft License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowSuspicious Dependency Evidencedist/index.js
Affected versions and remediation
This report applies to akm-opencode@0.10.261019.
See all versions of akm-opencode for other recorded verdicts.
- Review the evidence and your use of akm-opencode@0.10.261019 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.