registry / claude-mem / 13.10.0

claude-mem@13.10.0

⚠ Under review

Memory compression system for Claude Code - persist context across sessions

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 27 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 5.50 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.telegram.org, astral.sh, bun.sh, claude.ai, cmem.ai, docs.claude-mem.ai, generativelanguage.googleapis.com, git.new, github.com, json-schema.org, opencode.ai, openrouter.ai, raw.githubusercontent.com, react.dev, us.i.posthog.com, www.w3.org, yoursite.com

Oversized source lightweight scan

plugin/scripts/worker-service.cjs2.31 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsEvalHighEntropyStringsMinifiedUrlStringsgithub.comopenrouter.airaw.githubusercontent.com

Source & flagged code

16 flagged

dist/index.jsView file

Lines 1682-1722javascript

1682

1683// src/storage/postgres/index.ts

1684function createPostgresStorageRepositories(client) {

1685 return {

1686 teams: new PostgresTeamsRepository(client),

1687 projects: new PostgresProjectsRepository(client),

1688 auth: new PostgresAuthRepository(client),

1689 sessions: new PostgresServerSessionsRepository(client),

1690 agentEvents: new PostgresAgentEventsRepository(client),

1691 observations: new PostgresObservationRepository(client),

1692 observationSources: new PostgresObservationSourcesRepository(client),

1693 observationGenerationJobs: new PostgresObservationGenerationJobRepository(client),

1694 observationGenerationJobEvents: new PostgresObservationGenerationJobEventsRepository(client),

1695 usage: new PostgresUsageRepository(client),

1696 rateLimits: new PostgresRateLimitRepository(client)

1697 };

1698}

1699

1700// src/services/sync/ChromaMcpManager.ts

1701import { Client } from "@modelcontextprotocol/sdk/client/index.js";

1702import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";

1703import { execFile as execFile2, execSync, spawn as spawn2 } from "child_process";

1704import { promisify as promisify2 } from "util";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1702

1705import path2 from "path";

1706import os from "os";

1707import fs from "fs";

1708

1709// src/utils/logger.ts

1710import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2 } from "fs";

1711import { join as join2 } from "path";

1712

1713// src/shared/paths.ts

1714import { join, dirname, basename } from "path";

1715import { homedir } from "os";

1716import { existsSync, mkdirSync, readFileSync } from "fs";

1717import { fileURLToPath } from "url";

1718function getDirname() {

1719 if (typeof __dirname !== "undefined") {

1720 return __dirname;

1721 }

1722 return dirname(fileURLToPath(import.meta.url));

Lines 2045-2085javascript

2045import { homedir as homedir2 } from "os";

2046

2047// src/shared/hook-constants.ts

2048var HOOK_TIMEOUTS = {

2049 DEFAULT: 3e5,

2050 // Standard HTTP timeout (5 min for slow systems)

2051 HEALTH_CHECK: 3e3,

2052 // Worker health check (3s — healthy worker responds in <100ms)

2053 API_REQUEST: 3e4

Lines 2798-2838javascript

2798 if (errno === "ESRCH") {

2799 resolve();

2800 return;

2801 }

2802 reject(error);

2803 });

2804 });

2805 return;

2806 }

2807 const

dist/npx-cli/index.jsView file

87${a} L88: `}}}}).prompt()});import{join as ct,dirname as sW,basename as aW}from"path";import{homedir as BO}from"os";import{existsSync as lW,mkdirSync as Lhe,readFileSync as cW}from"fs";impor... L89: ${e.stack}`:e.message;if(Array.isArray(e))return`[${e.length} items]`;let r=Object.keys(e);return r.length===0?"{}":r.length<=3?JSON.stringify(e):`{${r.length} keys: ${r.slice(0,3)... ... L96: `)}debug(e,r,i,n){this.log(0,e,r,i,n)}info(e,r,i,n){this.log(1,e,r,i,n)}warn(e,r,i,n){this.log(2,e,r,i,n)}setErrorSink(e){hb=e}error(e,r,i,n){this.log(3,e,r,i,n),this.routeErrorToS... L97: `)}function Ed(){let t=xi();if(t?.installId)return t.installId;let e=xW();return Os({installId:e,decidedAt:""}),e}var HO,wd=E(()=>{"use strict";tt();Eo();Le();HO="telemetry.json"})... L98: `);return}let n=rA(),o=new AbortController,s=setTimeout(()=>o.abort(),RW);try{await DW(n,t,i,o.signal)}finally{clearTimeout(s)}}catch{}}async function DW(t,e,r,i){await fetch(`${nA... L99: `)+`

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/npx-cli/index.jsView on unpkg · L87

1#!/usr/bin/env node L2: var nB=Object.create;var sd=Object.defineProperty;var iB=Object.getOwnPropertyDescriptor;var oB=Object.getOwnPropertyNames;var sB=Object.getPrototypeOf,aB=Object.prototype.hasOwnPr... L3: `,"utf-8"),a;try{a=hB(r).mode&511}catch{}let l;try{l=a!==void 0?Bg(o,"w",a):Bg(o,"w");let c=0;for(;c<s.length;){let u=gB(l,s,c,s.length-c);if(u===0)throw new Error(`writeSync stall... L4: `)}var cd,AO,KB,Xg,KO,RB,RO,Qg,_O,TO,CO,OO,Yg,DB,jB,PB,eb=E(()=>{Hg();cd="\x1B",AO="\x9B",KB=39,Xg="\x07",KO="[",RB="]",RO="m",Qg=`${RB}8;;`,_O=new RegExp(`(?:\\${KO}(?<code>\\d+)m... ... L6: `){o&&(i+=OO(""));let p=n?TO(n):void 0;n&&p&&(i+=CO(p))}else f===` L7: `&&(n&&TO(n)&&(i+=CO(n)),o&&(i+=OO(o)))}return i},PB=/\r?\n/});var rb=h((lhe,DO)=>{"use strict";var tb={to(t,e){return e?`\x1B[${e+1};${t+1}H`:`\x1B[${t+1}G`},move(t,e){let r="";re... L8: `),i=e.split(` L9: `),n=Math.max(r.length,i.length),o=[];for(let s=0;s<n;s++)r[s]!==i[s]&&o.push(s);return{lines:o,numLinesBefore:r.length,numLinesAfter:i.length,numLines:n}}function qe(t){return t==... L10: `).map((a,l,c)=>{let u=o?o(a,l):a;return l===0?`${i}${u}`:l===c.length-1?`${n}${u}`:`${r}${u}`}).join(` ... L87: ${a} L88: `}}}}).prompt(

openclaw/install.shView file

•path = openclaw/install.sh kind = build_helper sizeBytes = 52177 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

openclaw/install.shView on unpkg

plugin/ui/assets/fonts/monaspace-radon-var.woff2View file

•path = [redacted]-radon-var.woff2 kind = high_entropy_blob sizeBytes = 426972 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

plugin/ui/assets/fonts/monaspace-radon-var.woff2View on unpkg

plugin/scripts/worker-service.cjsView file

•path = plugin/scripts/worker-service.cjs kind = oversized_source_file sizeBytes = 2426021 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

plugin/scripts/worker-service.cjsView on unpkg

•path = plugin/scripts/worker-service.cjs kind = oversized_cli_entrypoint sizeBytes = 2426021 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

plugin/scripts/worker-service.cjsView on unpkg

Source & flagged code

16 flagged · loading source

dist/index.jsView file

1702import { StdioClientTransport } from "@[redacted].js"; L1703: import { execFile as execFile2, execSync, spawn as spawn2 } from "child_process"; L1704: import { promisify as promisify2 } from "util";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1702

2065// Give files time to sync before restart L2066: POWERSHELL_COMMAND: 1e4, L2067: // PowerShell process enumeration (10s - typically completes in <1s)

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L2065

2818try { L2819: const treeKillModule = await import(moduleName); L2820: return treeKillModule.default ?? treeKillModule;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L2818

dist/npx-cli/index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/npx-cli/index.jsView on unpkg · L87

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/npx-cli/index.jsView on unpkg · L1

1Trigger-reachable chain: manifest.bin -> dist/npx-cli/index.js L1: #!/usr/bin/env node L2: var nB=Object.create;var sd=Object.defineProperty;var iB=Object.getOwnPropertyDescriptor;var oB=Object.getOwnPropertyNames;var sB=Object.getPrototypeOf,aB=Object.prototype.hasOwnPr... L3: `,"utf-8"),a;try{a=hB(r).mode&511}catch{}let l;try{l=a!==void 0?Bg(o,"w",a):Bg(o,"w");let c=0;for(;c<s.length;){let u=gB(l,s,c,s.length-c);if(u===0)throw new Error(`writeSync stall... L4: `)}var cd,AO,KB,Xg,KO,RB,RO,Qg,_O,TO,CO,OO,Yg,DB,jB,PB,eb=E(()=>{Hg();cd="\x1B",AO="\x9B",KB=39,Xg="\x07",KO="[",RB="]",RO="m",Qg=`${RB}8;;`,_O=new RegExp(`(?:\\${KO}(?<code>\\d+)m... ... L6: `){o&&(i+=OO(""));let p=n?TO(n):void 0;n&&p&&(i+=CO(p))}else f===` L7: `&&(n&&TO(n)&&(i+=CO(n)),o&&(i+=OO(o)))}return i},PB=/\r?\n/});var rb=h((lhe,DO)=>{"use strict";var tb={to(t,e){return e?`\x1B[${e+1};${t+1}H`:`\x1B[${t+1}G`},move(t,e){let r="";re... L8: `),i=e.split(` L9: `),n=Math.max(r.length,i.length),o=[];for(let s=0;s<n;s++)r[s]!==i[s]&&o.push(s);return{lines:o,numLinesBefore:r.length,numLinesAfter:i.length,numLines:n}}function qe(t){return t==... L10: `).map((a,l,c)=>{let u=o?o(a,l):a;return l===0?`${i}${u}`:l===c.length-1?…

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/npx-cli/index.jsView on unpkg · L1

1122`),c&&(f+="Error resolving package: "+c.message+` L1123: `),new Error(f);function p(y){var w=m0(cn.join(y,"prebuilds")).map(DL),_=w.filter(jL(Cf,Tf)).sort(PL)[0];if(_)return m(cn.join(y,"prebuilds",_.name))}function m(y){var w=m0(y).map(... L1124: $`+Buffer.byteLength(this.name)+`\r

High

Eval

Package source references dynamic code evaluation.

dist/npx-cli/index.jsView on unpkg · L1122

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/npx-cli/index.jsView on unpkg · L87

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/npx-cli/index.jsView on unpkg · L1

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/npx-cli/index.jsView on unpkg · L1

1Cross-file remote execution chain: dist/npx-cli/index.js spawns openclaw/dist/index.js; helper contains network access plus dynamic code execution. L1: #!/usr/bin/env node L2: var nB=Object.create;var sd=Object.defineProperty;var iB=Object.getOwnPropertyDescriptor;var oB=Object.getOwnPropertyNames;var sB=Object.getPrototypeOf,aB=Object.prototype.hasOwnPr... L3: `,"utf-8"),a;try{a=hB(r).mode&511}catch{}let l;try{l=a!==void 0?Bg(o,"w",a):Bg(o,"w");let c=0;for(;c<s.length;){let u=gB(l,s,c,s.length-c);if(u===0)throw new Error(`writeSync stall... L4: `)}var cd,AO,KB,Xg,KO,RB,RO,Qg,_O,TO,CO,OO,Yg,DB,jB,PB,eb=E(()=>{Hg();cd="\x1B",AO="\x9B",KB=39,Xg="\x07",KO="[",RB="]",RO="m",Qg=`${RB}8;;`,_O=new RegExp(`(?:\\${KO}(?<code>\\d+)m... ... L6: `){o&&(i+=OO(""));let p=n?TO(n):void 0;n&&p&&(i+=CO(p))}else f===` L7: `&&(n&&TO(n)&&(i+=CO(n)),o&&(i+=OO(o)))}return i},PB=/\r?\n/});var rb=h((lhe,DO)=>{"use strict";var tb={to(t,e){return e?`\x1B[${e+1};${t+1}H`:`\x1B[${t+1}G`},move(t,e){let r="";re... L8: `),i=e.split(` L9: `),n=Math.max(r.length,i.length),o=[];for(let s=0;s<n;s++)r[s]!==i[s]&&o.push(s);return{lines:o,numLinesBefore:r.length,numLinesAfter:i.length,numLines:n}}function qe(t){return …

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/npx-cli/index.jsView on unpkg · L1

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/npx-cli/index.jsView on unpkg · L1

openclaw/install.shView file

•path = openclaw/install.sh kind = build_helper sizeBytes = 52177 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

openclaw/install.shView on unpkg

plugin/ui/assets/fonts/monaspace-radon-var.woff2View file

•path = [redacted]-radon-var.woff2 kind = high_entropy_blob sizeBytes = 426972 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

plugin/ui/assets/fonts/monaspace-radon-var.woff2View on unpkg

plugin/scripts/worker-service.cjsView file

•path = plugin/scripts/worker-service.cjs kind = oversized_source_file sizeBytes = 2426021 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

plugin/scripts/worker-service.cjsView on unpkg

•path = plugin/scripts/worker-service.cjs kind = oversized_cli_entrypoint sizeBytes = 2426021 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

plugin/scripts/worker-service.cjsView on unpkg

Findings

3 Critical9 High8 Medium7 Low

CriticalSame File Env Network Executiondist/npx-cli/index.js

CriticalCredential Exfiltrationdist/npx-cli/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/npx-cli/index.js

HighChild Processdist/index.js

HighShelldist/index.js

HighEvaldist/npx-cli/index.js

HighCommand Output Exfiltrationdist/npx-cli/index.js

HighSandbox Evasion Gated Capabilitydist/npx-cli/index.js

HighObfuscated Payload Loaderdist/npx-cli/index.js

HighCross File Remote Execution Contextdist/npx-cli/index.js

HighShips High Entropy Blobplugin/ui/assets/fonts/monaspace-radon-var.woff2

HighOversized Source Fileplugin/scripts/worker-service.cjs

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/npx-cli/index.js

MediumProtestware

MediumShips Build Helperopenclaw/install.sh

MediumOversized Cli Entrypointplugin/scripts/worker-service.cjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

16 flagged

dist/index.jsView file

Lines 1682-1722javascript

1682

1683// src/storage/postgres/index.ts

1684function createPostgresStorageRepositories(client) {

1685 return {

1686 teams: new PostgresTeamsRepository(client),

1687 projects: new PostgresProjectsRepository(client),

1688 auth: new PostgresAuthRepository(client),

1689 sessions: new PostgresServerSessionsRepository(client),

1690 agentEvents: new PostgresAgentEventsRepository(client),

1691 observations: new PostgresObservationRepository(client),

1692 observationSources: new PostgresObservationSourcesRepository(client),

1693 observationGenerationJobs: new PostgresObservationGenerationJobRepository(client),

1694 observationGenerationJobEvents: new PostgresObservationGenerationJobEventsRepository(client),

1695 usage: new PostgresUsageRepository(client),

1696 rateLimits: new PostgresRateLimitRepository(client)

1697 };

1698}

1699

1700// src/services/sync/ChromaMcpManager.ts

1701import { Client } from "@modelcontextprotocol/sdk/client/index.js";

1702import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";

1703import { execFile as execFile2, execSync, spawn as spawn2 } from "child_process";

1704import { promisify as promisify2 } from "util";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1702

1705import path2 from "path";

1706import os from "os";

1707import fs from "fs";

1708

1709// src/utils/logger.ts

1710import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2 } from "fs";

1711import { join as join2 } from "path";

1712

1713// src/shared/paths.ts

1714import { join, dirname, basename } from "path";

1715import { homedir } from "os";

1716import { existsSync, mkdirSync, readFileSync } from "fs";

1717import { fileURLToPath } from "url";

1718function getDirname() {

1719 if (typeof __dirname !== "undefined") {

1720 return __dirname;

1721 }

1722 return dirname(fileURLToPath(import.meta.url));

Lines 2045-2085javascript

2045import { homedir as homedir2 } from "os";

2046

2047// src/shared/hook-constants.ts

2048var HOOK_TIMEOUTS = {

2049 DEFAULT: 3e5,

2050 // Standard HTTP timeout (5 min for slow systems)

2051 HEALTH_CHECK: 3e3,

2052 // Worker health check (3s — healthy worker responds in <100ms)

2053 API_REQUEST: 3e4

Lines 2798-2838javascript

2798 if (errno === "ESRCH") {

2799 resolve();

2800 return;

2801 }

2802 reject(error);

2803 });

2804 });

2805 return;

2806 }

2807 const

dist/npx-cli/index.jsView file

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/npx-cli/index.jsView on unpkg · L87

openclaw/install.shView file

•path = openclaw/install.sh kind = build_helper sizeBytes = 52177 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

openclaw/install.shView on unpkg

plugin/ui/assets/fonts/monaspace-radon-var.woff2View file

•path = [redacted]-radon-var.woff2 kind = high_entropy_blob sizeBytes = 426972 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

plugin/ui/assets/fonts/monaspace-radon-var.woff2View on unpkg

plugin/scripts/worker-service.cjsView file

•path = plugin/scripts/worker-service.cjs kind = oversized_source_file sizeBytes = 2426021 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

plugin/scripts/worker-service.cjsView on unpkg

•path = plugin/scripts/worker-service.cjs kind = oversized_cli_entrypoint sizeBytes = 2426021 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

plugin/scripts/worker-service.cjsView on unpkg