Loading npm security reports…

micro-models-agent@0.2.26: Suspicious npm security report (Warn) | LPM Firewall

registry / micro-models-agent / 0.2.26

micro-models-agent@0.2.26

Micro Models Agent (MMA) — LLM agent harness for small models (Qwen3.5-9B, 32K-64K context)

AI Security Review

scanned 1h ago · by lpm-firewall-ai

The interactive agent executes LLM-generated shell commands and configured MCP commands after the user runs the CLI. This is a real high-risk agent capability, but source inspection found no covert payload, install-time trigger, or fixed exfiltration destination.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `mma` and the configured model emits a shell or MCP tool call.

Impact

A malicious or prompt-injected model response can run arbitrary commands within the user's agent process and environment.

Mechanism

Unattended LLM-driven subprocess and MCP command execution.

Rationale

No concrete malicious behavior or install-time mutation was found, so a publish block is not justified. The package nevertheless exposes unattended command execution and runtime `npx` installation risk that merits a warning.

Evidence

package.jsondist/index.jsdist/agent/loop.jsdist/tools/bash.jsdist/tools/mcp.jsdist/tools/syntax-check.js

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Source & flagged code

4 flagged

dist/ui/opentui-renderer.jsView file

Lines 1-21javascript

1import { execSync } from 'node:child_process';

2import { formatStatusLine } from './components/status-bar.js';

High

Child Process

Package source references child process execution.

dist/ui/opentui-renderer.jsView on unpkg · L1

3import { DoublePressDetector } from './double-press.js';

4let _Text;

5let _Box;

6let _TextareaRenderable;

7let _ScrollBox;

8let _MarkdownRenderable;

9let _SyntaxStyle;

10async function loadOpentui() {

11 const mod = await import('@opentui/core');

12 _Text = mod.Text;

13 _Box = mod.Box;

14 _TextareaRenderable = mod.TextareaRenderable;

15 _ScrollBox = mod.ScrollBox;

16 _MarkdownRenderable = mod.MarkdownRenderable;

17 _SyntaxStyle = mod.SyntaxStyle;

18 return mod;

19}

20const theme = {

21 bg: '#1a1b26',

dist/tools/bash.jsView file

Lines 1-21javascript

1import { execa, ExecaError } from 'execa';

2import { writeFileSync, existsSync, mkdirSync } from 'node:fs';

High

Shell

Package source references shell execution.

dist/tools/bash.jsView on unpkg · L1

3import { join } from 'node:path';

4import

dist/tools/syntax-check.jsView file

Lines 1-32javascript

1import { execSync } from 'node:child_process';

2import { readFileSync, existsSync } from 'node:fs';

3import { join } from 'node:path';

4import { createRequire } from 'node:module';

dist/tools/web-search.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = micro-models-agent@0.2.25 matchedIdentity = npm:bWljcm8tbW9kZWxzLWFnZW50:0.2.25 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tools/web-search.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/ui/opentui-renderer.jsView file

1import { execSync } from 'node:child_process'; L2: import { formatStatusLine } from './components/status-bar.js';

High

Child Process

Package source references child process execution.

dist/ui/opentui-renderer.jsView on unpkg · L1

dist/tools/bash.jsView file

1import { execa, ExecaError } from 'execa'; L2: import { writeFileSync, existsSync, mkdirSync } from 'node:fs';

High

Shell

Package source references shell execution.

dist/tools/bash.jsView on unpkg · L1

dist/tools/syntax-check.jsView file

12try { L13: execSync(`npx tsc --noEmit --pretty false "${fullPath}"`, { L14: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/tools/syntax-check.jsView on unpkg · L12

dist/tools/web-search.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tools/web-search.jsView on unpkg

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code