cloud-pc-templates-marketplace@1.4.2
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource inspection confirms a serious command-injection vulnerability and startup data deletion, but does not show automatic package-install activation or establish malicious intent. Warn for the concrete runtime risks.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Run the Angular connector, then send a POST request to `/component/create` with a crafted component name; starting the vector database service triggers its file deletion.
Impact
A crafted request can execute shell commands with the connector's privileges; starting the other service can erase the configured persistence file.
Mechanism
The Angular connector interpolates the request name into an `execSync` shell command. The vector database server calls `unlinkSync` on the configured persistence path without a safeguard.
AI rationale
Source inspection confirms a serious command-injection vulnerability and startup data deletion, but does not show automatic package-install activation or establish malicious intent. Warn for the concrete runtime risks.
Evidence
JS-AGENTS/angularConnector.jsmisc/vectorDb/vectorDbServer.js
Network endpoints1
localhost:3034
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The Angular connector accepts POST requests at `/component/create` and passes the trimmed request name into a shell command.
- The Angular connector starts an HTTP server on port 3034 and allows cross-origin requests.
- The vector database server deletes its configured persistence file during startup.
- The package manifest declares only a test script; it does not define an install lifecycle hook.
Evidence against
- The inspected services start when run; the manifest does not configure them to run during package installation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedmisc/vectorDb/vectorDbServer.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = cloud-pc-templates-marketplace@1.3.0
matchedIdentity = npm:[redacted]:1.3.0
similarity = 0.917
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
misc/vectorDb/vectorDbServer.jsView on unpkg6const https = require('https');
L7: const { execFile, execSync } = require('child_process');
L8: const { URL } = require('url');
High
Child Process
Package source references child process execution.
misc/vectorDb/vectorDbServer.jsView on unpkg · L6JS-AGENTS/angularConnector.jsView file
173
Findings
1 Critical5 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltamisc/vectorDb/vectorDbServer.js
HighChild Processmisc/vectorDb/vectorDbServer.js
HighShellJS-AGENTS/angularConnector.js
HighRuntime Package InstallJS-AGENTS/angularConnector.js
HighShips High Entropy BlobJS-AGENTS/sqlConnector.zip
HighSemantic Analysis LimitedJS-AGENTS/sqlConnector/sqlConnector.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpermisc/whisper-server.py
MediumShips Compressed BlobJS-AGENTS/sqlConnector.zip
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to cloud-pc-templates-marketplace@1.4.2.
See all versions of cloud-pc-templates-marketplace for other recorded verdicts.
- Review the evidence and your use of cloud-pc-templates-marketplace@1.4.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.