cloud-pc-templates-marketplace@1.3.0
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source proves remotely reachable command injection risks in user-launched connectors, warranting a warning. It does not establish malicious intent or a block-eligible automatic attack chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Launch either connector and submit a crafted request to /mysql/query or /component/create; the SQL route also requires its database reachability check to pass.
Impact
A reachable caller could execute commands with the connector process's privileges.
Mechanism
Request parameters enter shell command strings without adequate shell escaping, and the servers listen without a host restriction.
AI rationale
Inspected source proves remotely reachable command injection risks in user-launched connectors, warranting a warning. It does not establish malicious intent or a block-eligible automatic attack chain.
Evidence
JS-AGENTS/sqlConnector/sqlConnector.jsJS-AGENTS/angularConnector.js
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The SQL HTTP route passes caller-supplied query text into a shell command; escaping double quotes leaves shell substitutions active.
- The Angular component creation route interpolates a caller-supplied component name into execSync after only trimming it.
- Both connector servers listen without a host restriction, and their inspected request handlers have no authentication gate.
- package.json has no automatic install lifecycle hooks or runtime self-dependencies.
Evidence against
- The vulnerable commands implement connector functionality; inspected source does not establish deliberate malicious intent.
- The declared index.js entrypoint is absent, so these connector risks require separately launching their scripts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedmisc/vectorDb/vectorDbServer.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = cloud-pc-templates-marketplace@1.2.1
matchedIdentity = npm:[redacted]:1.2.1
similarity = 0.750
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
misc/vectorDb/vectorDbServer.jsView on unpkg6const https = require('https');
L7: const { execFile, execSync } = require('child_process');
L8: const { URL } = require('url');
High
Child Process
Package source references child process execution.
misc/vectorDb/vectorDbServer.jsView on unpkg · L6184const OLLAMA_HOST = process.env.OLLAMA_HOST || 'http://localhost:11434';
L185: const EMBED_MODEL = process.env.EMBED_MODEL || 'nomic-embed-text';
L186:
L187: const AGENT_REGISTRY_URL =
L188: 'https://raw.githubusercontent.com/devashish234073/cloud-pc-templates-marketplace/refs/heads/main/JS-AGENTS/agent-registry.json';
L189:
...
L199: if (fs.existsSync(path.join(repoDir, '.git'))) {
L200: try { execSync('git pull', { cwd: repoDir, stdio: 'ignore' }); } catch (_) {}
L201: } else {
Findings
1 Critical6 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltamisc/vectorDb/vectorDbServer.js
HighChild Processmisc/vectorDb/vectorDbServer.js
HighShellJS-AGENTS/angularConnector.js
HighSame File Env Network Executionmisc/vectorDb/vectorDbServer.js
HighRuntime Package InstallJS-AGENTS/angularConnector.js
HighShips High Entropy BlobJS-AGENTS/sqlConnector.zip
HighSemantic Analysis LimitedJS-AGENTS/sqlConnector/sqlConnector.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpermisc/whisper-server.py
MediumShips Compressed BlobJS-AGENTS/sqlConnector.zip
Medium
Affected versions and remediation
This report applies to cloud-pc-templates-marketplace@1.3.0.
See all versions of cloud-pc-templates-marketplace for other recorded verdicts.
- Review the evidence and your use of cloud-pc-templates-marketplace@1.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.