registry / ocean-brain / 0.16.1
ocean-brain@0.16.1
⚠ Under review<!-- npm package README for the public ocean-brain CLI.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe declared postinstall runs local Prisma client generation, and the inspected flagged UI excerpt is ordinary byte conversion. Because the server instantiates `@prisma/client` and its selected source remains unresolved, a clean verdict is not supported; the missing source is not itself evidence of an attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package runs its postinstall script; server database code runs when the server is used.
Impact
The unresolved dependency prevents a complete assessment of that runtime path; the inspected excerpts do not establish malicious behavior.
Mechanism
The postinstall invokes Prisma generation with a local schema. The server imports and constructs the Prisma client, whose selected dependency source was not available for review.
AI rationale
The declared postinstall runs local Prisma client generation, and the inspected flagged UI excerpt is ordinary byte conversion. Because the server instantiates `@prisma/client` and its selected source remains unresolved, a clean verdict is not supported; the missing source is not itself evidence of an attack.
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package postinstall invokes a local script that runs Prisma client generation against a resolved schema.
- The server imports and constructs `@prisma/client`, but the selected registry source for that dependency is unresolved in the supplied evidence.
- The flagged UI excerpt converts byte arrays and does not establish dynamic code execution.
Evidence against
- The inspected install script invokes the Prisma CLI with `generate` and a schema path.
- The inspected Prisma excerpt decodes embedded base64 data into a WebAssembly module; it does not show remote payload retrieval or execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
14 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/dist/features/search/sqlite-vector-index.jsView file
76const initializeSearchDatabase = async (database) => {
L77: await exec(
L78: database,
High
Child Process
Package source references child process execution.
server/dist/features/search/sqlite-vector-index.jsView on unpkg · L76server/client/dist/assets/NotePropertiesPanel-CwrOE_XN.jsView file
Findings
2 Critical9 High5 Medium6 Low
CriticalRemote Asset Decode Executenode_modules/prisma/build/index.js
CriticalTrojan Source Unicodenode_modules/confbox/dist/_chunks/libs/json5.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processserver/dist/features/search/sqlite-vector-index.js
HighEvalserver/client/dist/assets/NotePropertiesPanel-CwrOE_XN.js
HighSame File Env Network Executionnode_modules/@prisma/client/runtime/binary.js
HighCommand Output Exfiltrationnode_modules/@prisma/client/runtime/binary.js
HighObfuscated Payload Loadernode_modules/prisma/build/index.js
HighCross File Remote Execution Contextnode_modules/@prisma/client/generator-build/index.js
HighSemantic Analysis Limited
Affected versions and remediation
This report applies to ocean-brain@0.16.1.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.16.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.