registry / ocean-brain / 0.19.1
ocean-brain@0.19.1
<!-- npm package README for the public ocean-brain CLI.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe install hook runs Prisma Client generation using the package schema, and server startup runs Prisma migrations. The reviewed indicators fit those application tasks; no concrete attack behavior was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The postinstall script runs during installation; Prisma migration runs when the user starts the server.
Impact
Expected schema generation and migration; no malicious impact identified.
Mechanism
The scripts invoke the local Prisma CLI with the app schema. No unrelated data collection or execution behavior was established.
AI rationale
The install hook runs Prisma Client generation using the package schema, and server startup runs Prisma migrations. The reviewed indicators fit those application tasks; no concrete attack behavior was found.
Evidence
server/prisma/schema.prismaserver/prisma/migrations
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs Prisma Client generation against the package’s Prisma schema.
- The CLI describes Ocean Brain as a self-hosted note-taking app and starts its server only when the serve command runs.
- Server startup runs Prisma migrate deploy against the app schema before importing the server.
Evidence against
- No attack behavior was identified in the reviewed package entry points or lifecycle script.
- The flagged child process use invokes Prisma for schema generation and migration.
- The reviewed dynamic evaluation and network indicators were in bundled Prisma dependency code; no malicious data flow was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
18 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/dist/features/search/sqlite-vector-index.jsView file
76const initializeSearchDatabase = async (database) => {
L77: await exec(
L78: database,
High
Child Process
Package source references child process execution.
server/dist/features/search/sqlite-vector-index.jsView on unpkg · L76server/client/dist/assets/NotePropertiesPanel-D98RNGCd.jsView file
Findings
2 Critical10 High8 Medium6 Low
CriticalRemote Asset Decode Executenode_modules/prisma/build/index.js
CriticalTrojan Source Unicodenode_modules/confbox/dist/_chunks/libs/json5.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processserver/dist/features/search/sqlite-vector-index.js
HighEvalserver/client/dist/assets/NotePropertiesPanel-D98RNGCd.js
HighSame File Env Network Executionnode_modules/@prisma/client/runtime/binary.js
HighCommand Output Exfiltrationnode_modules/@prisma/client/runtime/binary.js
HighObfuscated Payload Loadernode_modules/prisma/build/index.js
HighCross File Remote Execution Contextnode_modules/@prisma/client/generator-build/index.js
HighShips High Entropy Blob
Affected versions and remediation
This report applies to ocean-brain@0.19.1.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.19.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.