registry / Credential exfiltration / monolith-engine
monolith-engine
Command line deployment tool
This report shows the evidence for monolith-engine@1.0.0. 1 of 4 known versions is blocked or flagged. The newest version, 1.2.0, is allowed. See all versions.
AI Security Review
scanned 14h ago · by lpm-firewall-aiThe github:connect request sends PLATFORM_API_KEY to api.github.com through a global Axios header, without the user’s informed consent. This is a concrete credential disclosure to a host outside the key’s service.
Static reason
No blocking static signals were detected.
Trigger
The user runs monolith github:connect.
Impact
The Monolith API key is disclosed to api.github.com without the user being told it will be sent there.
Mechanism
Axios attaches PLATFORM_API_KEY as x-api-key to every request, including the request to create a GitHub webhook.
Attack narrative
When github:connect runs, it asks for a GitHub PAT and posts to api.github.com to create a webhook. A top-level Axios default also attaches PLATFORM_API_KEY to every request, silently sending the Monolith API key to GitHub.
AI rationale
The github:connect request sends PLATFORM_API_KEY to api.github.com through a global Axios header, without the user’s informed consent. This is a concrete credential disclosure to a host outside the key’s service.
Evidence
index.js
Network endpoints1
api.github.com/repos/${repo.trim()}/hooks
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- index.js sets PLATFORM_API_KEY as Axios’s default x-api-key header for every request.
- The github:connect command sends an Axios request to api.github.com, so the default Monolith API key accompanies the GitHub request.
Evidence against
- The manifest declares no install, preinstall, or postinstall hook.
- The GitHub request is triggered by an explicit github:connect command and prompts the user for a GitHub PAT.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedserver.jsView file
5const util = require('util');
L6: const { exec, spawn} = require('child_process');
L7: const execAsync = util.promisify(exec);
High
6const { exec, spawn} = require('child_process');
L7: const execAsync = util.promisify(exec);
L8: const fs = require('fs');
High
5const util = require('util');
L6: const { exec, spawn} = require('child_process');
L7: const execAsync = util.promisify(exec);
...
L9: const path = require('path');
L10: const net = require('net');
L11:
...
L13:
L14: if (!process.env.PLATFORM_API_KEY || !process.env.GITHUB_WEBHOOK_SECRET) {
L15: console.error("❌ FATAL: Missing PLATFORM_API_KEY or GITHUB_WEBHOOK_SECRET in .env");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
server.jsView on unpkg · L5Findings
1 Critical5 High2 Medium4 Low
CriticalManifest Confusionpackage.json
HighChild Processserver.js
HighShellserver.js
HighSame File Env Network Executionserver.js
HighSemantic Analysis Limitedindex.js#virtual:string-array:round1
HighAi Review Evidenceindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to monolith-engine@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing monolith-engine@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.