registry / fraim / 2.0.283

fraim@2.0.283

FRAIM core CLI and MCP package.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Source inspection found no lifecycle hooks, stealthy execution, credential harvesting, or remote payload chain. The package nevertheless performs user-level multi-agent integration and telemetry configuration during setup, so it warrants a warning for extension lifecycle risk.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Running FRAIM setup or completing its first-run configuration.

Impact

Changes may influence configured AI-agent behavior and enable local token telemetry.

Mechanism

Writes FRAIM integration artifacts and optional local telemetry settings.

AI rationale

Evidence

package.jsonindex.jsbin/fraim.jsdist/src/first-run/session-service.jsdist/src/cli/setup/ide-global-integration.jsdist/src/cli/setup/claude-code-telemetry.js~/.claude/skills/fraim/SKILL.md~/.claude/commands/fraim.md~/.codex/skills/fraim/SKILL.md~/.cursor/rules/fraim.mdc~/.claude/settings.json

Network endpoints1

localhost:4318

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The user-driven first-run flow installs FRAIM artifacts into detected AI-agent configuration directories.
The global installer updates FRAIM-owned files in Claude, Codex, Cursor, Grok, Gemini, Windsurf, and Kiro configuration areas.
A telemetry helper can add OpenTelemetry environment settings to Claude Code's user settings.

Evidence against

package.json declares no preinstall, install, or postinstall lifecycle hook.
The inspected entrypoints only load the CLI when invoked directly.
The telemetry endpoint is local, and no source evidence showed credential theft, remote payload execution, or covert exfiltration.
The agent-config writes are named FRAIM artifacts and occur in explicit setup or first-run flows.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

11 flagged

dist/src/core/utils/git-utils.jsView file

Lines 1-29javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.isExplicitLocalRepoPath = isExplicitLocalRepoPath;

4exports.getPort = getPort;

5exports.determineDatabaseName = determineDatabaseName;

6exports.getCurrentGitBranch = getCurrentGitBranch;

7exports.determineSchema = determineSchema;

8exports.getDefaultBranch = getDefaultBranch;

9exports.sanitizeRepoIdentifier = sanitizeRepoIdentifier;

10const child_process_1 = require("child_process");

11function extractLocalFolderLabel(rawPath) {

High

Child Process

Package source references child process execution.

dist/src/core/utils/git-utils.jsView on unpkg · L9

12 const normalized = rawPath

13 .trim()

14 .replace(/^file:\/\//i, '')

15 .replace(/\\/g, '/')

16 .replace(/\/+$/, '');

17 if (!normalized)

18 return undefined;

19 const parts = normalized.split('/').filter(Boolean);

20 const candidate = parts[parts.length - 1];

21 return candidate || undefined;

22}

23function isExplicitLocalRepoPath(repoUrl) {

24 if (!repoUrl || typeof repoUrl !== 'string') {

25 return false;

26 }

27 const trimmed = repoUrl.trim();

28 return (trimmed.startsWith('/') ||

29 trimmed.startsWith('\\') ||

bin/fraim.jsView file

Lines 1-14javascript

1#!/usr/bin/env node

3try {

4 require('../dist/src/cli/fraim.js');

5} catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/fraim.jsView on unpkg · L3

6 if (error && error.code

dist/src/first-run/session-service.jsView file

Lines 25-65javascript

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var

dist/src/cli/doctor/checks/scripts-checks.jsView file

Lines 1-34javascript

1"use strict";

2/**

3 * Scripts checks for FRAIM doctor command

4 * Validates user scripts directory and sync status

5 * Issue #144: Enhanced doctor command

6 */

7var __importDefault = (this && this.__importDefault) ||

dist/src/cli/setup/user-level-sync.jsView file

Lines 108-148javascript

108 delete childEnv.NODE_UNIQUE_ID;

109 let pkg = {};

110 if (fs_1.default.existsSync(pkgPath)) {

111 try {

112 pkg = JSON

index.jsView file

•matchType = normalized_sha256 matchedPackage = fraim@2.0.183 matchedPath = index.js matchedIdentity = npm:ZnJhaW0:2.0.183 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High