registry / hippo-memory / 2.0.0
hippo-memory@2.0.0
Make your agent's memory work like a brain. Hippo is long-term memory for coding agents.
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe lifecycle hook delegates to a postinstall module that prints guidance and uses guarded repair behavior. Agent configuration changes and scheduling are associated with the explicit init flow, and the flagged child process supports package memory consolidation; no concrete attack behavior was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation runs postinstall; agent integration and scheduling are activated through hippo init.
Impact
The inspected behavior does not establish unauthorized agent control, credential exposure, or other malicious impact.
Mechanism
Postinstall performs guarded wrapper repair and prints opt-in guidance. The init flow installs hooks and schedules routine package work.
AI rationale
The lifecycle hook delegates to a postinstall module that prints guidance and uses guarded repair behavior. Agent configuration changes and scheduling are associated with the explicit init flow, and the flagged child process supports package memory consolidation; no concrete attack behavior was established.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs a postinstall script that delegates to dist/postinstall.js.
- dist/cli/init.js detects existing agent markers, and integration changes are performed through the init flow; its patcher does not create missing instruction files.
- dist/cli/install-steps.js sets up a daily schedule only when invoked and honors the schedule opt-out.
- dist/server/sleep-offload.js spawns a package-owned child process to run memory consolidation with a timeout.
- dist/postinstall.js describes its Claude configuration check as read-only and directs users to run hippo init for setup.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/embeddings/transformers.jsView file
5import { errorCode, errorMessage } from '../util/log.js';
L6: const _require = createRequire(import.meta.url);
L7: // Importing both loads two onnxruntime-node builds whose finalizers can double-free on exit, so one is picked:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/embeddings/transformers.jsView on unpkg · L5Findings
3 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/cli/install-steps.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/server/sleep-offload.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/embeddings/transformers.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli/scheduler.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to hippo-memory@2.0.0.
See all versions of hippo-memory for other recorded verdicts.
- Review the evidence and your use of hippo-memory@2.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.