cloud-pc-templates-marketplace@1.2.0
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo install-time malicious chain is present, but explicitly launched bundled services contain a concrete high-impact remote command-execution vulnerability and destructive capabilities.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs JS-AGENTS/sqlConnector/sqlConnector.js or another bundled connector and exposes its HTTP port.
Impact
Remote command execution, database modification, package installation, or deletion of an Angular project's components.
Mechanism
Unauthenticated HTTP-controlled shell and filesystem operations.
AI rationale
No install-time malicious chain is present, but explicitly launched bundled services contain a concrete high-impact remote command-execution vulnerability and destructive capabilities.
Evidence
package.jsonJS-AGENTS/sqlConnector/sqlConnector.jsJS-AGENTS/angularConnector.jsmisc/vectorDb/vectorDbServer.js
Network endpoints2
github.com/devashish234073/cloud-pc-templates-marketplace.gitraw.githubusercontent.com/devashish234073/cloud-pc-templates-marketplace/refs/heads/main/JS-AGENTS/agent-registry.json
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- SQL connector exposes unauthenticated shell-backed SQL execution.
- A GET endpoint installs and starts MySQL with sudo when unavailable.
- Angular connector recursively deletes and rewrites a selected project.
- Vector server pulls a model and fetches mutable repository content at runtime.
Evidence against
- package.json has no lifecycle hooks.
- Declared main is missing, so install/import does not run these tools.
- No credential exfiltration or remote payload execution was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedmisc/vectorDb/vectorDbServer.jsView file
6const https = require('https');
L7: const { execFile, execSync } = require('child_process');
L8: const { URL } = require('url');
High
Child Process
Package source references child process execution.
misc/vectorDb/vectorDbServer.jsView on unpkg · L6184const OLLAMA_HOST = process.env.OLLAMA_HOST || 'http://localhost:11434';
L185: const EMBED_MODEL = process.env.EMBED_MODEL || 'nomic-embed-text';
L186:
L187: const AGENT_REGISTRY_URL =
L188: 'https://raw.githubusercontent.com/devashish234073/cloud-pc-templates-marketplace/refs/heads/main/JS-AGENTS/agent-registry.json';
L189:
...
L199: if (fs.existsSync(path.join(repoDir, '.git'))) {
L200: try { execSync('git pull', { cwd: repoDir, stdio: 'ignore' }); } catch (_) {}
L201: } else {
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
misc/vectorDb/vectorDbServer.jsView on unpkg · L184JS-AGENTS/angularConnector.jsView file
Findings
1 Critical5 High5 Medium5 Low
CriticalPrevious Version Dangerous DeltaJS-AGENTS/sqlConnector/sqlConnector.js
HighChild Processmisc/vectorDb/vectorDbServer.js
HighShell
HighSame File Env Network Executionmisc/vectorDb/vectorDbServer.js
HighRuntime Package InstallJS-AGENTS/angularConnector.js
HighShips High Entropy BlobJS-AGENTS/sqlConnector.zip
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpermisc/whisper-server.py
MediumShips Compressed BlobJS-AGENTS/sqlConnector.zip
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to cloud-pc-templates-marketplace@1.2.0.
See all versions of cloud-pc-templates-marketplace for other recorded verdicts.
- Review the evidence and your use of cloud-pc-templates-marketplace@1.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.