modelence@0.24.2
The Node.js Framework for Real-Time MongoDB Apps
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is not proven malware or an install-hook attack, but its explicit setup command changes an AI-agent control surface and its prepare hook mutates Git configuration. This warrants a warning under the stated policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the modelence setup command, or starting an application configured with a Modelence service endpoint.
Impact
A user who runs setup may add a third-party Claude plugin to the project; startup telemetry exposes limited host and project metadata to the service.
Mechanism
Project-scoped agent plugin configuration and startup telemetry.
AI rationale
The package is not proven malware or an install-hook attack, but its explicit setup command changes an AI-agent control surface and its prepare hook mutates Git configuration. This warrants a warning under the stated policy.
Evidence
package.jsondist/bin/modelence.jsdist/chunk-RAWHQTR6.js.claude/settings.json.modelence.env.modelence/project.json
Network endpoints1
cloud.modelence.com
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The prepare lifecycle command changes the enclosing Git repository hook path.
- The explicit setup command adds and enables a Modelence Claude Code plugin in the project settings file.
- The setup command can invoke Claude to add a marketplace and install that plugin.
- Server startup sends the local hostname and project name to the configured Modelence service endpoint unless tracking is disabled.
Evidence against
- There is no preinstall, install, or postinstall hook, and no dependency on another modelence release.
- Claude configuration and plugin installation occur only from the user-invoked setup command, with an interactive installation prompt.
- The observed network calls support named Modelence setup, deployment, and telemetry functions; no secret-file harvesting or opaque payload download was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggeddist/bin/modelence.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = modelence@0.24.1
matchedIdentity = npm:bW9kZWxlbmNl:0.24.1
similarity = 0.917
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bin/modelence.jsView on unpkg1#!/usr/bin/env node
L2: import {Command}from'commander';import {readFileSync,promises,createWriteStream}from'fs';import {fileURLToPath}from'url';import L,{join,dirname}from'path';import {parse}from'dotenv...
L3: `);}var j=".claude",w=join(j,"settings.json"),N="modelence@modelence",I="modelence/modelence",ae={modelence:{source:{source:"github",repo:I}}},ce="https://docs.modelence.com/ai-cod...
High
Child Process
Package source references child process execution.
dist/bin/modelence.jsView on unpkg · L11#!/usr/bin/env node
L2: import {Command}from'commander';import {readFileSync,promises,createWriteStream}from'fs';import {fileURLToPath}from'url';import L,{join,dirname}from'path';import {parse}from'dotenv...
L3: `);}var j=".claude",w=join(j,"settings.json"),N="modelence@modelence",I="modelence/modelence",ae={modelence:{source:{source:"github",repo:I}}},ce="https://docs.modelence.com/ai-cod...
...
L6: Guide: ${ce}`;async function le(){let e=join(process.cwd(),w),t;try{t=await promises.readFile(e,"utf8");}catch(n){if(n.code!=="ENOENT"){console.warn(`Could not read ${w}; leaving i...
L7: `),console.log(`Declared the Modelence Claude Code plugin in ${w}`);}catch(n){console.warn(`Failed to write ${w}:`,n);}}function T(e){return spawnSync("claude",e,{encoding:"utf8",s...
L8: `);if(await prom
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/bin/modelence.js
HighChild Processdist/bin/modelence.js
HighSame File Env Network Executiondist/bin/modelence.js
HighHost Fingerprint Exfiltrationdist/chunk-RAWHQTR6.js
HighSandbox Evasion Gated Capabilitydist/chunk-RAWHQTR6.js
MediumDynamic Requiredist/chunk-RAWHQTR6.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to modelence@0.24.2.
See all versions of modelence for other recorded verdicts.
- Review the evidence and your use of modelence@0.24.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.