elia-ai@0.1.6: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

elia-ai@0.1.6: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = prisma skills sync || exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = prisma skills sync || exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/tools/presentation.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/tools/presentation.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/tools/presentation.tsView on unpkg

9L10: const require = createRequire(import.meta.url) L11: const pptxgen = require('../vendor/pptxgen.cjs.js') as any

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/tools/presentation.tsView on unpkg · L9

src/mcp/catalog.tsView file

39env: [{ key: 'GITHUB_PERSONAL_ACCESS_TOKEN', description: 'a GitHub PAT with the scopes you need' }], L40: homepage: 'https://github.[redacted]', L41: }, ... L174: noAuth: true, L175: headers: [{ key: 'Authorization', description: 'optional: "Bearer hf_…" for gated/private content', example: 'Bearer hf_xxx' }], L176: homepage: 'https://huggingface.co/settings/mcp', ... L285: export async function searchOfficialRegistry(query: string, limit = 20): Promise<CatalogEntry[]> { L286: if (process.env.ELIA_NO_MCP_REGISTRY === '1') return [] L287: try { ... L290: if (!response.ok) return [] L291: const data = (await response.json()) as { servers?: RegistryServer[] } L292: const out: CatalogEntry[] = []

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/mcp/catalog.tsView on unpkg · L39

39Trigger-reachable chain: manifest.bin -> bin/elia.ts -> src/index.ts -> src/mcp/slash.ts -> src/mcp/catalog.ts L39: env: [{ key: 'GITHUB_PERSONAL_ACCESS_TOKEN', description: 'a GitHub PAT with the scopes you need' }], L40: homepage: 'https://github.[redacted]', L41: }, ... L174: noAuth: true, L175: headers: [{ key: 'Authorization', description: 'optional: "Bearer hf_…" for gated/private content', example: 'Bearer hf_xxx' }], L176: homepage: 'https://huggingface.co/settings/mcp', ... L285: export async function searchOfficialRegistry(query: string, limit = 20): Promise<CatalogEntry[]> { L286: if (process.env.ELIA_NO_MCP_REGISTRY === '1') return [] L287: try { ... L290: if (!response.ok) return [] L291: const data = (await response.json()) as { servers?: RegistryServer[] } L292: const out: C

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

src/mcp/catalog.tsView on unpkg · L39

src/networkPolicy.tsView file

1import { lookup } from 'node:dns/promises' L2: import { isIP } from 'node:net' ... L26: if (!options.allowExplicitLocal && isUnsafeHostname(url.hostname)) { L27: throw new Error(`Refusing private or local network target: ${url.hostname}`) L28: } ... L56: export async function assertProviderEndpoint(raw: string): Promise<URL> { L57: const allowExplicitLocal = process.env.ELIA_ALLOW_INSECURE_LOCAL_ENDPOINT === '1' L58: const url = validateNetworkUrl(raw, { allowExplicitLocal, requireHttps: true })

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/networkPolicy.tsView on unpkg · L1

src/evolve/fitness.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/evolve/fitness.ts#virtual:normalized:round1View on unpkg

src/tools/communication.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/tools/communication.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/tools/communication.tsView on unpkg

src/evolve/fitness.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/evolve/fitness.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/evolve/fitness.tsView on unpkg

src/preview/launchChrome.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/preview/launchChrome.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/preview/launchChrome.tsView on unpkg

src/autonomy/autoInstall.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/autonomy/autoInstall.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/autonomy/autoInstall.tsView on unpkg

src/vscodeBridge.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/vscodeBridge.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/vscodeBridge.tsView on unpkg

src/capabilities.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/capabilities.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/capabilities.tsView on unpkg

src/github/exec.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/github/exec.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/github/exec.tsView on unpkg

src/lsp/client.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/lsp/client.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lsp/client.tsView on unpkg

src/providers/codexAppServer.tsView file

•matchType = normalized_sha256 matchedPackage = elia-ai@0.1.4 matchedPath = src/providers/codexAppServer.ts matchedIdentity = npm:ZWxpYS1haQ:0.1.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/providers/codexAppServer.tsView on unpkg

src/index.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = elia-ai@0.1.5 matchedIdentity = npm:ZWxpYS1haQ:0.1.5 similarity = 0.733 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.tsView on unpkg