cloud-pc-templates-marketplace@1.4.0
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe SQL connector has a reachable unauthenticated query route that passes request data into a shell command, creating a serious command-injection vulnerability when the server is running. No install hook or automatic activation was found, so the evidence supports a warning rather than a malicious-package block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A caller sends a request to the SQL connector’s query route while its server is running.
Impact
A reachable caller may execute operating-system commands with the connector’s privileges.
Mechanism
The route forwards request-supplied query text to a shell command, escaping double quotes only.
AI rationale
The SQL connector has a reachable unauthenticated query route that passes request data into a shell command, creating a serious command-injection vulnerability when the server is running. No install hook or automatic activation was found, so the evidence supports a warning rather than a malicious-package block.
Evidence
JS-AGENTS/sqlConnector/sqlConnector.js
Network endpoints1
localhost:3037/mysql/query
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The SQL connector accepts a query from an HTTP request and passes it to a shell command; escaping double quotes does not prevent shell substitution.
- The connector starts an HTTP server without an authentication check on the query route, exposing the command-injection risk to callers that can reach it.
- The package manifest has no install lifecycle hook; the risk is in the SQL connector when that server is started.
Evidence against
- The manifest declares only a test script and points to an entry file that is absent from this snapshot, so the SQL connector is not shown as an automatic package entrypoint.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedmisc/vectorDb/vectorDbServer.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = cloud-pc-templates-marketplace@1.3.0
matchedIdentity = npm:[redacted]:1.3.0
similarity = 0.917
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
misc/vectorDb/vectorDbServer.jsView on unpkg6const https = require('https');
L7: const { execFile, execSync } = require('child_process');
L8: const { URL } = require('url');
High
Child Process
Package source references child process execution.
misc/vectorDb/vectorDbServer.jsView on unpkg · L6JS-AGENTS/angularConnector.jsView file
173
Findings
1 Critical5 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltamisc/vectorDb/vectorDbServer.js
HighChild Processmisc/vectorDb/vectorDbServer.js
HighShellJS-AGENTS/angularConnector.js
HighRuntime Package InstallJS-AGENTS/angularConnector.js
HighShips High Entropy BlobJS-AGENTS/sqlConnector.zip
HighSemantic Analysis LimitedJS-AGENTS/sqlConnector/sqlConnector.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpermisc/whisper-server.py
MediumShips Compressed BlobJS-AGENTS/sqlConnector.zip
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to cloud-pc-templates-marketplace@1.4.0.
See all versions of cloud-pc-templates-marketplace for other recorded verdicts.
- Review the evidence and your use of cloud-pc-templates-marketplace@1.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.