registry / ocean-brain / 0.15.0
ocean-brain@0.15.0
⚠ Under review<!-- npm package README for the public ocean-brain CLI.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 95.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/client/dist/assets/NotePropertiesPanel-BFWjxL_w.jsView file
1import{j as J,q as Et,g as Kt,r as lt}from"./floating-ui.react-dom-BWTnA00G.js";import{a as Ht,n as Yt,j as qt}from"./useNoteMutate-BQj6jHhV.js";import{c as Ct,u as Vt,q as Nt,Z as...
L2: \0`,K+=o(A,2),K+=T.magic,K+=o(w,2),K+=o(E,2),K+=o($.crc32,4),K+=o($.compressedSize,4),K+=o($.uncompressedSize,4),K+=o(U.length,2),K+=o(N.length,2),{fileRecord:_.LOCAL_FILE_HEADER+K...
Low
Eval
Package source references a known benign dynamic code generation pattern.
server/client/dist/assets/NotePropertiesPanel-BFWjxL_w.jsView on unpkg · L1dist/index.jsView file
Findings
5 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedserver/client/dist/assets/chunk-GF5L2VYU-BBUD-HJi.js#virtual:normalized:round1
HighKnown Malware Source Similarityserver/client/dist/assets/flowDiagram-UKHOOZJN-68iZdxxw.js
HighPrevious Version Dangerous Deltaserver/client/dist/assets/flowDiagram-UKHOOZJN-68iZdxxw.js
HighKnown Malware Source Similarityserver/client/dist/assets/diagram-Q27KOJAE-Dx7WFDuX.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalserver/client/dist/assets/NotePropertiesPanel-BFWjxL_w.js
Low
Affected versions and remediation
This report applies to ocean-brain@0.15.0.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.