cloud-pc-templates-marketplace@1.2.1
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo automatic npm lifecycle attack or covert data theft was found. The package nevertheless ships a deployment path that activates powerful, insufficiently constrained agent services, so it warrants a warning for dangerous capability.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the marketplace end script or manually starting the included agent servers.
Impact
A caller able to reach the local agent services can alter tracked projects, install packages, execute commands, or send requests to chosen endpoints.
Mechanism
Marketplace deployment starts privileged local automation services and nested installers.
AI rationale
No automatic npm lifecycle attack or covert data theft was found. The package nevertheless ships a deployment path that activates powerful, insufficiently constrained agent services, so it warrants a warning for dangerous capability.
Evidence
cloud-pc-templates/marketplace_softwarelist.jsonJS-AGENTS/nodejsConnector.jsJS-AGENTS/angularConnector.jsmisc/vectorDb/vectorDbServer.jsJS-AGENTS/rawPlaywrightConnector/package.jsonpackage.json/home/ubuntu/Desktop/cloud-pc-templates-marketplace
Network endpoints3
github.com/devashish234073/cloud-pc-templates-marketplace.gitraw.githubusercontent.com/devashish234073/cloud-pc-templates-marketplace/refs/heads/main/JS-AGENTS/agent-registry.jsonlocalhost:11434
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The marketplace end script clones the repository, starts every JavaScript agent, and installs and starts nested archive packages.
- The Node connector accepts package names and runs npm install in tracked projects.
- The Angular connector overwrites route files and recursively deletes an existing components directory.
- The vector server pulls a model and clones or updates a mutable repository at runtime.
- A nested Playwright package has a postinstall hook, but it runs only after the marketplace setup extracts and installs it.
Evidence against
- The root manifest has no preinstall, install, or postinstall hook.
- The declared root entry point, index.js, is absent, so ordinary package import cannot start these tools.
- The risky servers and setup scripts require explicit execution or the separate marketplace end script; no secret harvesting or covert exfiltration was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
7 flaggedmisc/vectorDb/vectorDbServer.jsView file
6const https = require('https');
L7: const { execFile, execSync } = require('child_process');
L8: const { URL } = require('url');
High
Child Process
Package source references child process execution.
misc/vectorDb/vectorDbServer.jsView on unpkg · L6184const OLLAMA_HOST = process.env.OLLAMA_HOST || 'http://localhost:11434';
L185: const EMBED_MODEL = process.env.EMBED_MODEL || 'nomic-embed-text';
L186:
L187: const AGENT_REGISTRY_URL =
L188: 'https://raw.githubusercontent.com/devashish234073/cloud-pc-templates-marketplace/refs/heads/main/JS-AGENTS/agent-registry.json';
L189:
...
L199: if (fs.existsSync(path.join(repoDir, '.git'))) {
L200: try { execSync('git pull', { cwd: repoDir, stdio: 'ignore' }); } catch (_) {}
L201: } else {
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
misc/vectorDb/vectorDbServer.jsView on unpkg · L184JS-AGENTS/angularConnector.jsView file
Findings
5 High5 Medium5 Low
HighChild Processmisc/vectorDb/vectorDbServer.js
HighShell
HighSame File Env Network Executionmisc/vectorDb/vectorDbServer.js
HighRuntime Package InstallJS-AGENTS/angularConnector.js
HighShips High Entropy BlobJS-AGENTS/sqlConnector.zip
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpermisc/whisper-server.py
MediumShips Compressed BlobJS-AGENTS/sqlConnector.zip
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspection
Affected versions and remediation
This report applies to cloud-pc-templates-marketplace@1.2.1.
See all versions of cloud-pc-templates-marketplace for other recorded verdicts.
- Review the evidence and your use of cloud-pc-templates-marketplace@1.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.