fraim@2.0.281
FRAIM core CLI and MCP package.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe scanner similarity labels are not proof of malicious behavior. Source inspection found no package lifecycle hook or concrete attack; the flagged settings changes are part of explicit FRAIM setup and route token metrics to a local receiver.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs the project setup or IDE setup command with Claude Code detected.
Impact
Token metrics become available to the local FRAIM proxy; inspected source did not establish unrelated credential transfer or harmful behavior.
Mechanism
The setup adds telemetry variables to Claude Code settings and directs OTLP metrics to localhost:4318; existing environment values are preserved.
AI rationale
The scanner similarity labels are not proof of malicious behavior. Source inspection found no package lifecycle hook or concrete attack; the flagged settings changes are part of explicit FRAIM setup and route token metrics to a local receiver.
Evidence
dist/src/cli/setup/claude-code-telemetry.js~/.claude/settings.json
Network endpoints1
localhost:4318
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI entrypoints and ends after dependencies without a lifecycle script.
- The Claude setup commands enable token metrics through an OTLP endpoint on localhost and merge the settings without replacing existing environment values.
- Agent integration helpers install FRAIM-specific artifacts during setup; inspected project writes are constrained to the project root.
- The flagged runtime paths implement CLI commands, diagnostics, local configuration checks, and scoped repository helpers; inspection found no concrete attack behavior.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
19 flagged · loading sourcedist/src/core/utils/git-utils.jsView file
9exports.sanitizeRepoIdentifier = sanitizeRepoIdentifier;
L10: const child_process_1 = require("child_process");
L11: function extractLocalFolderLabel(rawPath) {
High
Child Process
Package source references child process execution.
dist/src/core/utils/git-utils.jsView on unpkg · L9dist/src/cli/doctor/checks/scripts-checks.jsView file
170// Primary probe: py launcher (not subject to App Execution Alias)
L171: const pyResult = (0, child_process_1.spawnSync)('py --version', { timeout: 1500, encoding: 'utf8', shell: true });
L172: if (pyResult.status === 0) {
High
Shell
Package source references shell execution.
dist/src/cli/doctor/checks/scripts-checks.jsView on unpkg · L17014const os_1 = __importDefault(require("os"));
L15: const child_process_1 = require("child_process");
L16: const SCRIPTS_DIR = path_1.default.join(os_1.default.homedir(), '.fraim', 'scripts');
L17: /**
...
L92: // Skip on Windows
L93: if (process.platform === 'win32') {
L94: return {
...
L172: if (pyResult.status === 0) {
L173: const version = (pyResult.stdout || pyResult.stderr || '').trim();
L174: return {
...
L191: message: 'Python not available on Windows — Microsoft Store alias detected or Python not installed',
L192: suggestion: 'Install Python from https://www.python.org/downloads/windows/ (the official installer registers the py launcher). Python scripts in ~/.fraim/scripts/ will not run unti...
Findings
1 Critical16 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/src/cli/doctor/checks/mcp-connectivity-checks.js
HighChild Processdist/src/core/utils/git-utils.js
HighShelldist/src/cli/doctor/checks/scripts-checks.js
HighSandbox Evasion Gated Capabilitydist/src/cli/doctor/checks/scripts-checks.js
HighTrigger Reachable Persistencedist/src/first-run/session-service.js
HighRuntime Package Installdist/src/cli/setup/user-level-sync.js
HighSemantic Analysis Limiteddist/src/cli/commands/learning-usage.js#virtual:normalized:round1
HighKnown Malware Source Similarityindex.js
HighKnown Malware Source Similaritydist/src/cli/commands/override.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to fraim@2.0.281.
See all versions of fraim for other recorded verdicts.
- Review the evidence and your use of fraim@2.0.281 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.