registry / fraim / 2.0.324

fraim@2.0.324

FRAIM core CLI and MCP package.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

Source inspection found no lifecycle hook or confirmed malicious behavior. The flagged telemetry and agent setup are tied to CLI setup flows, use a local metrics receiver, and write FRAIM-specific integration files.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

A user runs FRAIM setup commands that configure a supported IDE or initialize a project.

Impact

The inspected behavior supports local token metrics and FRAIM discovery; no unconsented credential transfer, broad control-surface change, or other attack was established.

Mechanism

Setup adds Claude Code metrics settings targeting a loopback receiver and creates FRAIM-named agent files or managed sections.

AI rationale

Evidence

package.jsondist/src/cli/setup/claude-code-telemetry.jsdist/src/cli/setup/ide-global-integration.jsdist/src/cli/utils/agent-adapters.js

Network endpoints2

localhost:4318127.0.0.1

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares the CLI entrypoints and no lifecycle script; the package starts through its CLI entrypoints.
Claude telemetry settings enable OTLP metrics to a loopback endpoint and preserve existing user values.
Telemetry setup is reached through CLI setup commands, including `add-ide` and `init-project`.
The metrics receiver binds to 127.0.0.1, and snapshot retrieval also uses loopback.
Agent integration writes FRAIM-specific files only in FRAIM-named locations or managed sections.
Reviewed utilities show scoped setup, path checks, and git URL restrictions; no separate attack behavior was established.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

Source & flagged code

18 flagged

dist/src/core/utils/git-utils.jsView file

Lines 1-29javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.isExplicitLocalRepoPath = isExplicitLocalRepoPath;

4exports.getPort = getPort;

5exports.determineDatabaseName = determineDatabaseName;

6exports.getCurrentGitBranch = getCurrentGitBranch;

7exports.determineSchema = determineSchema;

8exports.getDefaultBranch = getDefaultBranch;

9exports.sanitizeRepoIdentifier = sanitizeRepoIdentifier;

10const child_process_1 = require("child_process");

11function extractLocalFolderLabel(rawPath) {

High

Child Process

Package source references child process execution.

dist/src/core/utils/git-utils.jsView on unpkg · L9

12 const normalized = rawPath

13 .trim()

14 .replace(/^file:\/\//i, '')

15 .replace(/\\/g, '/')

16 .replace(/\/+$/, '');

17 if (!normalized)

18 return undefined;

19 const parts = normalized.split('/').filter(Boolean);

20 const candidate = parts[parts.length - 1];

21 return candidate || undefined;

22}

23function isExplicitLocalRepoPath(repoUrl) {

24 if (!repoUrl || typeof repoUrl !== 'string') {

25 return false;

26 }

27 const trimmed = repoUrl.trim();

28 return (trimmed.startsWith('/') ||

29 trimmed.startsWith('\\') ||

dist/src/cli/doctor/checks/scripts-checks.jsView file

Lines 215-255javascript

215 * Check Python availability, guarding against the Windows App Execution Alias.

216 * On Windows, bare `python`/`python3` are aliased to the Microsoft Store installer

217 * when Python is not installed. This check uses the `py` launcher (not aliased)

218 * as

bin/fraim.jsView file

Lines 1-14javascript

1#!/usr/bin/env node

3try {

4 require('../dist/src/cli/fraim.js');

5} catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/fraim.jsView on unpkg · L3

6 if (error && error.code

dist/src/first-run/session-service.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if

dist/src/cli/commands/override.jsView file

Lines 1-30javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod :

dist/src/cli/setup/user-level-sync.jsView file

Lines 113-153javascript

113 pkg = JSON.parse(fs_1.default.readFileSync(pkgPath, 'utf8'));

114 }

115 catch {

116 // Corrupt package.json — overwrite below rather than crash.

117 pkg = {};

dist/src/cli/utils/managed-agent-install.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/cli/utils/managed-agent-install.js#virtual:normalized:round1View on unpkg

index.jsView file

•matchType = normalized_sha256 matchedPackage = fraim@2.0.183 matchedPath = index.js matchedIdentity = npm:ZnJhaW0:2.0.183 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High