modelence@0.27.1
The Node.js Framework for Real-Time MongoDB Apps
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe flagged CLI behavior is user-invoked project setup, and its interactive plugin installation has a confirmation prompt. The default-on startup report goes to the package’s own service, contains basic app metadata, and has a source-level opt-out; no concrete attack behavior was established.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the setup command or starts an application using the framework.
Impact
The inspected behavior supports product setup and app-start tracking; no credential disclosure or harmful account action was found.
Mechanism
Setup updates project-scoped Claude Code settings and offers plugin installation; startup tracking sends basic project and host metadata to the package’s service.
AI rationale
The flagged CLI behavior is user-invoked project setup, and its interactive plugin installation has a confirmation prompt. The default-on startup report goes to the package’s own service, contains basic app metadata, and has a source-level opt-out; no concrete attack behavior was established.
Evidence
.claude/settings.json
Network endpoints1
cloud.modelence.com
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI and defines a build-only prepublish hook plus a prepare command that sets the repository hook path.
- During setup, the CLI writes a project-scoped Claude Code plugin declaration for the first-party Modelence plugin; in interactive browser setup, it asks before running the plugin install commands.
- The flagged runtime ranges handle websocket channel joins and query-cache subscriptions, not publisher-selected account changes.
- Server startup sends project name, framework version, local hostname, and environment identifier to Modelence Cloud’s app-start tracking route; the report can be disabled with a setting.
- The inspected prepared dependency manifests show no consumer install hooks, and their entrypoints are adapter, plugin, and archive code.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggeddist/bin/modelence.jsView file
1#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import he,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function xe(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Rt<=Date.now()?null:o.token}async function ke(e...
High
Child Process
Package source references child process execution.
dist/bin/modelence.jsView on unpkg · L11#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import he,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function xe(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Rt<=Date.now()?null:o.token}async function ke(e...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/modelence.jsView on unpkg · L11#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import he,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function xe(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Rt<=Date.now()?null:o.token}async function ke(e...
L4: `);}function B(e){if(!e||typeof e!="object")return {};let{appId:t,deploy:o}=e;return {...typeof t=="string"&&t?{appId:t}:{},...o&&typeof o.environmentId=="string"?{deploy:o}:{}}}fu...
L5: claude plugin marketplace add ${me}
...
L7: Guide: ${Wt}`;async function Yt(){let e=join(process.cwd(),O),t;try{t=await promises.readFile(e,"utf8");}catch(n){if(n.code!=="ENOENT"){console.warn(`Could not read
Findings
7 High4 Medium6 Low
HighChild Processdist/bin/modelence.js
HighShell
HighSame File Env Network Executiondist/bin/modelence.js
HighHost Fingerprint Exfiltrationdist/bin/modelence.js
HighCommand Output Exfiltrationdist/bin/modelence.js
HighSandbox Evasion Gated Capabilitydist/bin/modelence.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/modelence.js
MediumDynamic Requiredist/chunk-AHCWWDG6.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to modelence@0.27.1.
See all versions of modelence for other recorded verdicts.
- Review the evidence and your use of modelence@0.27.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.