registry / ocean-brain / 0.18.0
ocean-brain@0.18.0
⚠ Under review<!-- npm package README for the public ocean-brain CLI.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe reviewed install hook performs Prisma schema generation, and the reported frontend evaluation is ordinary array concatenation. The selected @prisma/client dependency remains unresolved, so the available source does not support either a clean verdict or a confirmed attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Running the package postinstall hook or starting the server that imports its Prisma client.
Impact
No attack impact is confirmed; unresolved dependency behavior prevents a clean determination.
Mechanism
The hook runs Prisma schema generation; the server creates a PrismaClient. The inspected source does not establish harmful behavior, but the dependency review could not be completed.
AI rationale
The reviewed install hook performs Prisma schema generation, and the reported frontend evaluation is ordinary array concatenation. The selected @prisma/client dependency remains unresolved, so the available source does not support either a clean verdict or a confirmed attack.
Evidence
package.jsonserver/dist/models.jsscripts/postinstall-prisma.mjs
Decision evidence
public snapshotAI called this Manual Review at 66.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares @prisma/client, and server/dist/models.js constructs and exports a PrismaClient; its dependency behavior could not be resolved in this inspection.
- The postinstall hook invokes Prisma generation using the package schema.
- The reported frontend evaluation location performs array concatenation, not dynamic code evaluation.
Evidence against
- The postinstall script resolves the bundled Prisma CLI and runs its generate command against the located schema.
- The flagged frontend operation uses Array.prototype.concat.apply to combine arrays.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
14 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/dist/features/search/sqlite-vector-index.jsView file
76const initializeSearchDatabase = async (database) => {
L77: await exec(
L78: database,
High
Child Process
Package source references child process execution.
server/dist/features/search/sqlite-vector-index.jsView on unpkg · L76server/client/dist/assets/NotePropertiesPanel-lRaxvAOE.jsView file
Findings
2 Critical9 High5 Medium6 Low
CriticalRemote Asset Decode Executenode_modules/prisma/build/index.js
CriticalTrojan Source Unicodenode_modules/confbox/dist/_chunks/libs/json5.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processserver/dist/features/search/sqlite-vector-index.js
HighEvalserver/client/dist/assets/NotePropertiesPanel-lRaxvAOE.js
HighSame File Env Network Executionnode_modules/@prisma/client/runtime/binary.js
HighCommand Output Exfiltrationnode_modules/@prisma/client/runtime/binary.js
HighObfuscated Payload Loadernode_modules/prisma/build/index.js
HighCross File Remote Execution Contextnode_modules/@prisma/client/generator-build/index.js
HighSemantic Analysis Limited
Affected versions and remediation
This report applies to ocean-brain@0.18.0.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.