memgineering@0.27.0

One memory for the AI you connect. Recall, remember, and revise a brain your agents share — stored in your own folder.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Source inspection found that installation only prints setup guidance and does not configure agents or transfer credentials. The bundled client sends tokens to the configured service URL, which defaults to the package's own API.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

The postinstall hook runs during installation; its output is limited to global installs.

Impact

No confirmed credential theft, covert agent configuration change, or other attack effect was established.

Mechanism

It prints guidance to run the separate setup command. The CLI sends service requests to its configured API URL, defaulting to the package's service.

AI rationale

Evidence

package.jsonscripts/postinstall.mjsdist/index.js

Network endpoints1

api.memgineering.com

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs scripts/postinstall.mjs after installation.
The postinstall script only prints setup guidance for global installs; it does not perform setup.
The setup command is a separate CLI command that takes its answers from flags or interactive choices.
The API client uses the configured service URL or defaults to api.memgineering.com, and sends bearer tokens to that selected API URL.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.00 MB of source, external domains: api.kordis.store, api.memgineering.com, mcp.memgineering.com, memgineering.com, registry.npmjs.org, yamllint.com

Source & flagged code

8 flagged

package.jsonView file

Lines 18-58json

18 },

19 "main": "./dist/index.js",

20 "files": [

21 "bin",

22 "dist",

23 "assets",

24 "scripts",

25 "README.md",

26 "CHANGELOG.md",

27 "NOTICE"

28 ],

29 "scripts": {

30 "dev": "tsx src/index.ts",

31 "build": "tsup && rm -rf assets && mkdir -p assets && node scripts/copy-skills.mjs",

32 "typecheck": "tsc --noEmit",

33 "pretest": "pnpm build",

34 "test": "vitest run",

35 "pretest:unit": "pnpm build",

36 "test:unit": "vitest run",

37 "prepublishOnly": "pnpm build",

38 "postinstall": "node scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L38

39 },

40 "dependencies": {

41 "@iarna/toml": "^2.2.5",

42 "commander": "^12.1.0",

43 "kleur": "^4.1.5",

44 "prompts": "^2.4.2",

45 "semver": "^7.8.4",

46 "string-width": "^7.2.0",

47 "yaml": "^2.9.0",

48 "zod": "^3.23.8"

49 },

50 "devDependencies": {

51 "@kordis/api-client": "workspace:*",

52 "@kordis/config": "workspace:*",

53 "@kordis/contracts": "workspace:*",

54 "@kordis/harness-schema": "workspace:*",

55 "@kordis/memory-engine": "workspace:*",

56 "@kordis/storage-adapter": "workspace:*",

57 "@kordis/translators": "workspace:*",

58 "@types/node": "^22.9.0",

dist/index.jsView file

15function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L121: function isInteractive() { L122: return Boolean(process.stdout.isTTY) && !jsonMode; L123: } L124: function printHuman(text) { L125: if (!jsonMode) process.stdout.write(text + "\n"); L126: } ... L137: for (let i = 0; i < input.length; i++) { L138: const code = input.charCodeAt(i); L139: if (code === 27 && input[i + 1] === "]" || code === 157) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L15

15Trigger-reachable chain: manifest.main -> dist/index.js L15: function brandHome() { L16: return process.env[BRAND.homeEnvVar] ?? join(homedir(), BRAND.homeDirName); L17: } ... L121: function isInteractive() { L122: return Boolean(process.stdout.isTTY) && !jsonMode; L123: } L124: function printHuman(text) { L125: if (!jsonMode) process.stdout.write(text + "\n"); L126: } ... L137: for (let i = 0; i < input.length; i++) { L138: const code = input.charCodeAt(i); L139: if (code === 27 && input[i + 1] === "]" || code === 157) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L15

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: * it writes into somebody else's `~/.claude` and `~/.codex`. Conflating them import { mkdir, readFile, rename, rm, writeFile } from "fs/promises"; await writeFile(tmp, body, { encoding: "utf8", mode: 384 }); import { rename as rename2, rm as rm3, writeFile as writeFile2 } from "fs/promises"; await writeFile2(tmp, content, { encoding: "utf8", mode: 384 }); import { readdir as readdir2, readFile as readFile3, stat, unlink, writeFile as writeFile3 } from "fs/promises"; await writeFile3(takeoverPath, "", { flag: "wx", mode: 384 }); await writeFile3(path, token, { flag: "wx", mode: 384 });

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

Critical

Credential Exfiltration

Findings

2 Critical5 High4 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

HighInstall Time Lifecycle Scriptspackage.json

HighCredential Redirect Persistencedist/index.js

HighObfuscated Payload Loaderdist/index.js

HighTrigger Reachable Credential Exfiltrationdist/index.js

HighKnown Malware Source Similaritydist/index.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

Affected versions and remediation

This report applies to memgineering@0.27.0.

See all versions of memgineering for other recorded verdicts.

Review the evidence and your use of memgineering@0.27.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 19:40:21.498Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.