modelence@0.27.0
The Node.js Framework for Real-Time MongoDB Apps
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe package changes project-level Claude settings during its explicit setup command, before the separate plugin-install confirmation. This is a guarded, first-party integration capability rather than verified malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `modelence setup` in an interactive terminal without supplying a setup token.
Impact
The project’s Claude Code configuration is changed and the plugin is enabled there. The inspected code establishes this guarded, package-owned setup behavior, not a confirmed malicious attack.
Mechanism
The CLI writes `.claude/settings.json`, adding the Modelence marketplace and enabling its plugin; it then asks before invoking Claude’s project-scoped plugin install.
AI rationale
The package changes project-level Claude settings during its explicit setup command, before the separate plugin-install confirmation. This is a guarded, first-party integration capability rather than verified malicious behavior.
Evidence
dist/bin/modelence.js.claude/settings.json
Network endpoints1
github.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI configures the project’s Claude settings with the Modelence marketplace and plugin.
- That configuration write enables the plugin and occurs before the separate plugin-install prompt.
- The mutation is reached through the explicit `modelence setup` command; the later CLI plugin installation asks for confirmation and uses project scope.
- The inspected server socket handlers process client join, leave, and subscription events, with channel access checks; they do not show an automatic account action.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/bin/modelence.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = modelence@0.26.3
matchedIdentity = npm:bW9kZWxlbmNl:0.26.3
similarity = 0.875
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bin/modelence.jsView on unpkg1#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import he,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function xe(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Rt<=Date.now()?null:o.token}async function ke(e...
High
Child Process
Package source references child process execution.
dist/bin/modelence.jsView on unpkg · L11#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import he,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function xe(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Rt<=Date.now()?null:o.token}async function ke(e...
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/bin/modelence.js
HighChild Processdist/bin/modelence.js
HighShell
HighSame File Env Network Executiondist/bin/modelence.js
HighHost Fingerprint Exfiltrationdist/bin/modelence.js
HighCommand Output Exfiltrationdist/bin/modelence.js
HighSandbox Evasion Gated Capabilitydist/bin/modelence.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/modelence.js
MediumDynamic Requiredist/chunk-DSDFNH45.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to modelence@0.27.0.
See all versions of modelence for other recorded verdicts.
- Review the evidence and your use of modelence@0.27.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.