registry / dirac-lang / 0.1.95

dirac-lang@0.1.95

LLM-Augmented Declarative Execution

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package is a Dirac language interpreter/CLI with explicit user-invoked shell, eval, LLM, and agent features.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User invokes the dirac/dish CLI or calls exported execution APIs with Dirac source.

Impact

Dangerous primitives are available to Dirac programs, but static inspection did not show unconsented install/import-time abuse or hidden exfiltration.

Mechanism

Interpreter executes user-authored language tags and configured LLM calls.

Rationale

Static source inspection shows powerful interpreter capabilities, but they are exposed as documented/user-triggered runtime features with no lifecycle hook, import-time execution, hidden credential collection, or unsolicited remote execution chain. The scanner signals are explainable by package-aligned shell, eval, LLM, and agent functionality.

Evidence

package.jsondist/index.jsdist/cli.jsdist/chunk-NUNYBLVJ.jsdist/chunk-PPH7KYKH.jsdist/agent-SVKTURXE.jsdist/chunk-IFBJYN2F.jsdist/shell-SUNLGPOM.js

Network endpoints3

localhost:11434/api/generatelocalhost:5001/chatlocalhost:11434/api/embeddings

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

dist/chunk-NUNYBLVJ.js exposes user-invoked <system> shell execution and <eval> AsyncFunction in the Dirac language runtime.
dist/chunk-NUNYBLVJ.js and dist/chunk-PPH7KYKH.js can call LLM/embedding endpoints using env/config-selected providers.
dist/agent-SVKTURXE.js starts a user-commanded background agent and writes under ~/.dirac.

Evidence against

package.json has no preinstall/install/postinstall lifecycle scripts.
dist/index.js import exports APIs without starting processes, network calls, or shell commands.
dist/cli.js only runs when bin is invoked and reads explicit input/config files before executing Dirac code.
Network use is package-aligned LLM/custom-local provider behavior, not hidden exfiltration.
No credential harvesting loop, broad filesystem scan, remote payload download, or AI-agent control-surface mutation found.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 246 KB of source

Source & flagged code

5 flagged

dist/chunk-NUNYBLVJ.jsView file

Lines 279-319javascript

279 name = element.attributes.name || element.attributes.subroutine || "";

280 } else {

281 name = element.tag;

282 }

283 if (!name) {

284 throw new Error("<call> requires name or subroutine attribute");

285 }

286 const subroutine = getSubroutine(session, name);

287 if (!subroutine) {

288 throw new Error(`Subroutine '${name}' not found`);

289 }

290 const extendAttr = subroutine.attributes.extend;

291 const extendsAttr = subroutine.attributes.extends;

292 if (extendAttr !== void 0 || extendsAttr !== void 0) {

293 const baseSubroutine = await registerExtendChain(session, subroutine, name);

294 await executeCallInternal(session, baseSubroutine, element, true);

295 } else {

296 await executeCallInternal(session, subroutine, element, false);

297 }

298}

299async function registerExtendChain(session, subroutine, currentName) {

300 const { executeSubroutine: executeSubroutine2 } = await import("./subroutine-7JJKHTV4.js");

301 const extendsAttr = subroutine.attributes.extends;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-NUNYBLVJ.jsView on unpkg · L299

302 let parentName;

303 if (extendsAttr) {

304 parentName = extendsAttr;

305 } else {

306 parentName = currentName;

307 }

308 const parent = getParentSubroutine(session, parentName, parentName === currentName ? subroutine : void 0);

309 if (!parent) {

310 return subroutine;

311 }

312 const parentExtendAttr = parent.attributes.extend;

313 const parentExtendsAttr = parent.attributes.extends;

314 let baseSubroutine;

315 if (parentExtendAttr !== void 0 || parentExtendsAttr !== void 0) {

316 baseSubroutine = await registerExtendChain(session, parent, parentName);

317 } else {

318 for (const child of parent.children) {

319 if (child.tag === "subroutine") {

Lines 1696-1738javascript

1696 result = args.length > 0 ? args[0] === 0 : true;

1697 break;

1698 case "same":

1699 case "strcmp":

1700 result = stringArgs.

•matchType = previous_version_dangerous_delta matchedPackage = dirac-lang@0.1.94 matchedIdentity = npm:ZGlyYWMtbGFuZw:0.1.94 similarity = 0.957 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-NUNYBLVJ.jsView on unpkg

dist/shell-SUNLGPOM.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

2import {

3 BraKetParser,

4 integrate

5} from "./chunk-NUNYBLVJ.js";

6import "./chunk-ECAW4X46.js";

7import "./chunk-SLGJRZ3P.js";

8import {

9 DiracParser

Source & flagged code

5 flagged · loading source

dist/chunk-NUNYBLVJ.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-NUNYBLVJ.jsView on unpkg

1716// src/tags/system.ts L1717: import { exec, spawn } from "child_process"; L1718: import { promisify } from "util";

High

Child Process

Package source references child process execution.

dist/chunk-NUNYBLVJ.jsView on unpkg · L1716

1718import { promisify } from "util"; L1719: var execAsync = promisify(exec); L1720: async function executeSystem(session, element) {

High

Shell

Package source references shell execution.

dist/chunk-NUNYBLVJ.jsView on unpkg · L1718

299async function registerExtendChain(session, subroutine, currentName) { L300: const { executeSubroutine: executeSubroutine2 } = await import("./subroutine-7JJKHTV4.js"); L301: const extendsAttr = subroutine.attributes.extends;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-NUNYBLVJ.jsView on unpkg · L299

dist/shell-SUNLGPOM.jsView file

20Cross-file remote execution chain: dist/shell-SUNLGPOM.js spawns dist/chunk-NUNYBLVJ.js; helper contains network access plus dynamic code execution. L20: import yaml from "js-yaml"; L21: var HISTORY_FILE = path.join(os.homedir(), ".dirac_history"); L22: var MAX_HISTORY = 1e3; ... L41: input: process.stdin, L42: output: process.stdout, L43: prompt: "> ", ... L86: ]; L87: const envVarNames = Object.keys(process.env).filter( L88: (name) => commonEnvVars.includes(name) || name.startsWith("DIRAC_") || name.startsWith("TELEGRAM_") ... L588: try { L589: formattedValue = JSON.stringify(JSON.parse(v.value), null, 2); L590: } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/shell-SUNLGPOM.jsView on unpkg · L20

Findings

1 Critical3 High3 Medium3 Low

CriticalPrevious Version Dangerous Deltadist/chunk-NUNYBLVJ.js

HighChild Processdist/chunk-NUNYBLVJ.js

HighShelldist/chunk-NUNYBLVJ.js

HighCross File Remote Execution Contextdist/shell-SUNLGPOM.js

MediumDynamic Requiredist/chunk-NUNYBLVJ.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

5 flagged

dist/chunk-NUNYBLVJ.jsView file

Lines 279-319javascript

279 name = element.attributes.name || element.attributes.subroutine || "";

280 } else {

281 name = element.tag;

282 }

283 if (!name) {

284 throw new Error("<call> requires name or subroutine attribute");

285 }

286 const subroutine = getSubroutine(session, name);

287 if (!subroutine) {

288 throw new Error(`Subroutine '${name}' not found`);

289 }

290 const extendAttr = subroutine.attributes.extend;

291 const extendsAttr = subroutine.attributes.extends;

292 if (extendAttr !== void 0 || extendsAttr !== void 0) {

293 const baseSubroutine = await registerExtendChain(session, subroutine, name);

294 await executeCallInternal(session, baseSubroutine, element, true);

295 } else {

296 await executeCallInternal(session, subroutine, element, false);

297 }

298}

299async function registerExtendChain(session, subroutine, currentName) {

300 const { executeSubroutine: executeSubroutine2 } = await import("./subroutine-7JJKHTV4.js");

301 const extendsAttr = subroutine.attributes.extends;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-NUNYBLVJ.jsView on unpkg · L299

302 let parentName;

303 if (extendsAttr) {

304 parentName = extendsAttr;

305 } else {

306 parentName = currentName;

307 }

308 const parent = getParentSubroutine(session, parentName, parentName === currentName ? subroutine : void 0);

309 if (!parent) {

310 return subroutine;

311 }

312 const parentExtendAttr = parent.attributes.extend;

313 const parentExtendsAttr = parent.attributes.extends;

314 let baseSubroutine;

315 if (parentExtendAttr !== void 0 || parentExtendsAttr !== void 0) {

316 baseSubroutine = await registerExtendChain(session, parent, parentName);

317 } else {

318 for (const child of parent.children) {

319 if (child.tag === "subroutine") {

Lines 1696-1738javascript

1696 result = args.length > 0 ? args[0] === 0 : true;

1697 break;

1698 case "same":

1699 case "strcmp":

1700 result = stringArgs.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-NUNYBLVJ.jsView on unpkg

dist/shell-SUNLGPOM.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

2import {

3 BraKetParser,

4 integrate

5} from "./chunk-NUNYBLVJ.js";

6import "./chunk-ECAW4X46.js";

7import "./chunk-SLGJRZ3P.js";

8import {

9 DiracParser