memgineering@0.15.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

memgineering@0.15.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

15function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L118: function isInteractive() { L119: return Boolean(process.stdout.isTTY) && !jsonMode; L120: } L121: function printHuman(text) { L122: if (!jsonMode) process.stdout.write(text + "\n"); L123: } ... L134: for (let i = 0; i < input.length; i++) { L135: const code = input.charCodeAt(i); L136: if (code === 27 && input[i + 1] === "]" || code === 157) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L15

15Trigger-reachable chain: manifest.main -> dist/index.js L15: function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L118: function isInteractive() { L119: return Boolean(process.stdout.isTTY) && !jsonMode; L120: } L121: function printHuman(text) { L122: if (!jsonMode) process.stdout.write(text + "\n"); L123: } ... L134: for (let i = 0; i < input.length; i++) { L135: const code = input.charCodeAt(i); L136: if (code === 27 && input[i + 1] === "]" || code === 157) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L15

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: * it writes into somebody else's `~/.claude` and `~/.codex`. Conflating them import { mkdir as mkdir2, readFile as readFile2, unlink, writeFile as writeFile2 } from "fs/promises"; await writeFile2(credentialsPath(), JSON.stringify(credentials, null, 2) + "\n", { import { mkdir as mkdir3, readFile as readFile3, unlink as unlink2, writeFile as writeFile3 } from "fs/promises"; await writeFile3(pendingLoginPath(), JSON.stringify(pending, null, 2) + "\n", { const base = args.baseUrl ?? apiUrl(); ...args.token ? { authorization: `Bearer ${args.token}` } : {} async function claimPendingLogin(baseUrl = apiUrl()) {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

15Trigger-reachable credential exfiltration chain: manifest.main -> dist/index.js L15: function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L118: function isInteractive() { L119: return Boolean(process.stdout.isTTY) && !jsonMode; L120: } L121: function printHuman(text) { L122: if (!jsonMode) process.stdout.write(text + "\n"); L123: } ... L134: for (let i = 0; i < input.length; i++) { L135: const code = input.charCodeAt(i); L136: if (code === 27 && input[i + 1] === "]" || code === 157) {

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L15

Source & flagged code

6 flagged

package.jsonView file

Lines 16-56json

16 "bin": {

17 "memgineering": "bin/memgineering.js"

18 },

19 "main": "./dist/index.js",

20 "files": [

21 "bin",

22 "dist",

23 "assets",

24 "scripts",

25 "README.md",

26 "CHANGELOG.md",

27 "NOTICE"

28 ],

29 "scripts": {

30 "dev": "tsx src/index.ts",

31 "build": "tsup && rm -rf assets && mkdir -p assets && node scripts/copy-skills.mjs",

32 "typecheck": "tsc --noEmit",

33 "test": "vitest run",

34 "test:unit": "vitest run",

35 "prepublishOnly": "pnpm build",

36 "postinstall": "node scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 },

38 "dependencies": {

39 "@iarna/toml": "^2.2.5",

40 "commander": "^12.1.0",

41 "kleur": "^4.1.5",

42 "prompts": "^2.4.2",

43 "semver": "^7.8.4",

44 "string-width": "^7.2.0",

45 "yaml": "^2.9.0",

46 "zod": "^3.23.8"

47 },

48 "devDependencies": {

49 "@kordis/config": "workspace:*",

50 "@kordis/contracts": "workspace:*",

51 "@kordis/harness-schema": "workspace:*",

52 "@kordis/memory-engine": "workspace:*",

53 "@kordis/storage-adapter": "workspace:*",

54 "@types/node": "^22.9.0",

55 "@types/prompts": "^2.4.9",

56 "@types/semver": "^7.5.8",

dist/index.jsView file

15function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L118: function isInteractive() { L119: return Boolean(process.stdout.isTTY) && !jsonMode; L120: } L121: function printHuman(text) { L122: if (!jsonMode) process.stdout.write(text + "\n"); L123: } ... L134: for (let i = 0; i < input.length; i++) { L135: const code = input.charCodeAt(i); L136: if (code === 27 && input[i + 1] === "]" || code === 157) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L15

15Trigger-reachable chain: manifest.main -> dist/index.js L15: function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L118: function isInteractive() { L119: return Boolean(process.stdout.isTTY) && !jsonMode; L120: } L121: function printHuman(text) { L122: if (!jsonMode) process.stdout.write(text + "\n"); L123: } ... L134: for (let i = 0; i < input.length; i++) { L135: const code = input.charCodeAt(i); L136: if (code === 27 && input[i + 1] === "]" || code === 157) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L15

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: * it writes into somebody else's `~/.claude` and `~/.codex`. Conflating them import { mkdir as mkdir2, readFile as readFile2, unlink, writeFile as writeFile2 } from "fs/promises"; await writeFile2(credentialsPath(), JSON.stringify(credentials, null, 2) + "\n", { import { mkdir as mkdir3, readFile as readFile3, unlink as unlink2, writeFile as writeFile3 } from "fs/promises"; await writeFile3(pendingLoginPath(), JSON.stringify(pending, null, 2) + "\n", { const base = args.baseUrl ?? apiUrl(); ...args.token ? { authorization: `Bearer ${args.token}` } : {} async function claimPendingLogin(baseUrl = apiUrl()) {