registry / modelstat / 0.24.4

modelstat@0.24.4

⚠ Under review

modelstat daemon — reads local AI-tool usage and ships tokenised events to modelstat.

Static Scan Results

scanned 22h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.61 MB of source, external domains: 127.0.0.1, api.openai.com, deb.nodesource.com, dotenvx.com, fetch.spec.whatwg.org, github.com, mimesniff.spec.whatwg.org, modelstat.ai, nodejs.org, webidl.spec.whatwg.org, www.apple.com, www.ietf.org

Source & flagged code

10 flagged

package.jsonView file

Lines 52-76json

52 "cursor",

53 "tokens",

54 "analytics",

55 "daemon",

56 "cli"

57 ],

58 "repository": {

59 "type": "git",

60 "url": "git+https://github.com/modelstat/modelstat.git",

61 "directory": "apps/daemon"

62 },

63 "scripts": {

64 "dev:connect": "tsx ./src/cli.ts connect",

65 "dev:scan": "tsx ./src/cli.ts scan",

66 "dev:watch": "tsx ./src/cli.ts watch",

67 "dev:discover": "tsx ./src/cli.ts discover",

68 "build": "tsup",

69 "build:tray": "bash ./scripts/build-tray.sh",

70 "pack:tarball": "pnpm run build && npm pack --pack-destination ../..",

71 "install:local": "bash ./scripts/install-local.sh",

72 "postinstall": "node ./scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L72

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L72

73 "typecheck": "tsc --noEmit",

74 "test": "node --import tsx --test src/**/*.test.ts"

75 }

76}

dist/cli.mjsView file

4if (__msMaj < 20 || (__msMaj === 20 && __msMin < 18)) { L5: process.stderr.write(`modelstat requires Node \u2265 20.18 (you have ${process.version}).\n`); L6: process.stderr.write('Install Node 20+: https://nodejs.org\n'); L7: process.stderr.write('Debian/Ubuntu: curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt-get install -y nodejs\n'); ... L192: * @type {-2|-1|0|1} L193: * @private L194: */ ... L880: if (buffer === void 0) { L881: buffer = Buffer.from(header); L882: } ... L1730: } L1731: var setupConnectTimeout = process.platform === "win32" ? (socketWeakRef, opts) => {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.mjsView on unpkg · L4

4Trigger-reachable chain: manifest.main -> dist/cli.mjs L4: if (__msMaj < 20 || (__msMaj === 20 && __msMin < 18)) { L5: process.stderr.write(`modelstat requires Node \u2265 20.18 (you have ${process.version}).\n`); L6: process.stderr.write('Install Node 20+: https://nodejs.org\n'); L7: process.stderr.write('Debian/Ubuntu: curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt-get install -y nodejs\n'); ... L192: * @type {-2|-1|0|1} L193: * @private L194: */ ... L880: if (buffer === void 0) { L881: buffer = Buffer.from(header); L882: } ... L1730: } L1731: var setupConnectTimeout = process.platform === "win32" ? (socketWeakRef, opts) => {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.mjsView on unpkg · L4

25808// src/machine-key.ts L25809: import { spawnSync } from "child_process"; L25810: import { createHash } from "crypto";

scripts/postinstall.mjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * Post-install hook for the @modelstat/daemon CLI.

4 *

5 * Runs after `npm install -g modelstat` (or `npx modelstat` cache

6 * population) and downloads the bundled summariser GGUF (~2.7 GB)

7 * with visible progress, so the user sees the heavy download

8 * attached to the install they just kicked off — not as a surprise

9 * 7-minute hang the first time they run `modelstat scan`.

10 *

11 * Skipped when:

12 * - Running inside this repo's pnpm workspace (we don't want every

vendor/tray-mac/build-app.shView file

•path = vendor/tray-mac/build-app.sh kind = build_helper sizeBytes = 3148 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/tray-mac/build-app.shView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli.mjsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.mjsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.mjsView on unpkg · L4

25808// src/machine-key.ts L25809: import { spawnSync } from "child_process"; L25810: import { createHash } from "crypto";

High

Child Process

Package source references child process execution.

dist/cli.mjsView on unpkg · L25808

1043"use strict"; L1044: var assert = __require("assert"); L1045: var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.mjsView on unpkg · L1043

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.mjsView on unpkg · L4

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.mjsView on unpkg · L4

scripts/postinstall.mjsView file

18Cross-file remote execution chain: scripts/postinstall.mjs spawns dist/cli.mjs; helper contains network access plus dynamic code execution. L18: * installs on a multi-GB pull). L19: * - stdout isn't a TTY AND CI isn't set (likely a scripted L20: * install that doesn't want long-running side-effects). ... L57: async function main() { L58: if (process.env.MODELSTAT_SKIP_POSTINSTALL === "1") { L59: console.log( ... L85: const sk[redacted] = L86: process.env.CI === "true" || L87: process.env.CI === "1" || ... L143: async function rebootServiceIfInstalled() { L144: const stateDir = join(homedir(), ".modelstat"); L145: const launchdPlist = join(

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/postinstall.mjsView on unpkg · L18

vendor/tray-mac/build-app.shView file

•path = vendor/tray-mac/build-app.sh kind = build_helper sizeBytes = 3148 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/tray-mac/build-app.shView on unpkg

Findings

2 Critical4 High7 Medium5 Low

CriticalCredential Exfiltrationdist/cli.mjs

CriticalTrigger Reachable Dangerous Capabilitydist/cli.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/cli.mjs

HighShell

HighCross File Remote Execution Contextscripts/postinstall.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/cli.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.mjs

MediumShips Build Helpervendor/tray-mac/build-app.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/cli.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

package.jsonView file

Lines 52-76json

52 "cursor",

53 "tokens",

54 "analytics",

55 "daemon",

56 "cli"

57 ],

58 "repository": {

59 "type": "git",

60 "url": "git+https://github.com/modelstat/modelstat.git",

61 "directory": "apps/daemon"

62 },

63 "scripts": {

64 "dev:connect": "tsx ./src/cli.ts connect",

65 "dev:scan": "tsx ./src/cli.ts scan",

66 "dev:watch": "tsx ./src/cli.ts watch",

67 "dev:discover": "tsx ./src/cli.ts discover",

68 "build": "tsup",

69 "build:tray": "bash ./scripts/build-tray.sh",

70 "pack:tarball": "pnpm run build && npm pack --pack-destination ../..",

71 "install:local": "bash ./scripts/install-local.sh",

72 "postinstall": "node ./scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L72

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L72

73 "typecheck": "tsc --noEmit",

74 "test": "node --import tsx --test src/**/*.test.ts"

75 }

76}

dist/cli.mjsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.mjsView on unpkg · L4

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.mjsView on unpkg · L4

25808// src/machine-key.ts L25809: import { spawnSync } from "child_process"; L25810: import { createHash } from "crypto";

scripts/postinstall.mjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * Post-install hook for the @modelstat/daemon CLI.

4 *

5 * Runs after `npm install -g modelstat` (or `npx modelstat` cache

6 * population) and downloads the bundled summariser GGUF (~2.7 GB)

7 * with visible progress, so the user sees the heavy download

8 * attached to the install they just kicked off — not as a surprise

9 * 7-minute hang the first time they run `modelstat scan`.

10 *

11 * Skipped when:

12 * - Running inside this repo's pnpm workspace (we don't want every

vendor/tray-mac/build-app.shView file

•path = vendor/tray-mac/build-app.sh kind = build_helper sizeBytes = 3148 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/tray-mac/build-app.shView on unpkg