registry / md-redline / 0.10.1
md-redline@0.10.1
Inline review comments for markdown specs. Built-in MCP server hands feedback directly to your AI agent.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe source documents a deliberate gap in static inspection, but the reviewed code does not prove an active attack. Classify as suspicious and warn while treating the threat type as unresolved.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running either published command invokes the launcher and imports bin/cli.js.
Impact
This arrangement can leave executable behavior outside those checks; no concrete harmful effect was confirmed in the inspected paths.
Mechanism
The launcher delegates execution to a file its own comment describes as invisible to repository static checks.
AI rationale
The source documents a deliberate gap in static inspection, but the reviewed code does not prove an active attack. Classify as suspicious and warn while treating the threat type as unresolved.
Evidence
bin/md-redlinebin/cli.js
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The launcher says its main CLI was invisible to repository static checks.
- The published launcher imports that CLI directly.
- The manifest has a prepublishOnly build script, not an install hook.
- Claude configuration changes are dispatched only by the explicit mcp install command.
Evidence against
- Inspected CLI network requests use loopback addresses; no credential transfer or remote payload behavior was found in the reviewed paths.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggedbin/server-control.jsView file
1import { execSync } from 'child_process';
L2:
High
Child Process
Package source references child process execution.
bin/server-control.jsView on unpkg · L1bin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = md-redline@0.9.0
matchedIdentity = npm:bWQtcmVkbGluZQ:0.9.0
similarity = 0.933
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg310stdio: 'ignore',
L311: shell: true,
L312: windowsHide: true,
High
Findings
2 Critical10 High4 Medium6 Low
CriticalTrojan Source Unicodedist/assets/chunk-K5T4RW27-DVJNmONu.js
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/server-control.js
HighShellbin/cli.js
HighSame File Env Network Executionbin/cli.js#virtual:normalized:round1
HighCommand Output Exfiltrationbin/cli.js#virtual:normalized:round1
HighCross File Remote Execution Contextbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js#virtual:normalized:round1
HighSemantic Analysis Limitedbin/cli.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/assets/chunk-OYMX7WX6-BrseQM4h.js
High
Affected versions and remediation
This report applies to md-redline@0.10.1.
See all versions of md-redline for other recorded verdicts.
- Review the evidence and your use of md-redline@0.10.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.