registry / ocean-brain / 0.21.0
ocean-brain@0.21.0
<!-- npm package README for the public ocean-brain CLI.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe postinstall hook invokes Prisma's standard generate command against this package's schema. The scanner's Prisma indicators resolve to bundled CLI telemetry and survey code, while the reviewed package runtime code supports its server and local SQLite search; no attack behavior was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Package installation runs Prisma generate; serving and MCP features run when the user invokes the CLI.
Impact
No unauthorized data access, credential collection, account action, or concealed payload execution was established.
Mechanism
The inspected code runs the local Prisma CLI for client generation and uses local SQLite storage. Prisma's bundled CLI includes telemetry and an NPS survey flow, but the reviewed indicators do not establish malicious collection or execution.
AI rationale
The postinstall hook invokes Prisma's standard generate command against this package's schema. The scanner's Prisma indicators resolve to bundled CLI telemetry and survey code, while the reviewed package runtime code supports its server and local SQLite search; no attack behavior was established.
Evidence
scripts/postinstall-prisma.mjsserver/prisma/schema.prismaserver/dist/features/search/sqlite-vector-index.js
Network endpoints3
checkpoint.prisma.ioproxyhog.prisma-data.netpub-833f4cf4b3dc4d17a6db4981affc9fbb.r2.dev
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall runs Prisma's generate command against the package's schema.
- The CLI starts the note-taking server only when invoked; its entrypoint sets up the app's data and image directories.
- The flagged Prisma R2 endpoint serves a schema-checked NPS survey timeframe; its prompt accepts optional user feedback and skips under CI and npm lifecycle conditions.
- The vector index opens a local SQLite database and loads the sqlite-vec extension, then disables extension loading.
Evidence against
- The package has a postinstall lifecycle script that runs Prisma generation.
- Prisma's bundled CLI contains telemetry and external network requests, including a configurable telemetry endpoint.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
18 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/dist/features/search/sqlite-vector-index.jsView file
76const initializeSearchDatabase = async (database) => {
L77: await exec(
L78: database,
High
Child Process
Package source references child process execution.
server/dist/features/search/sqlite-vector-index.jsView on unpkg · L76server/client/dist/assets/NotePropertiesPanel-DvL-3CSw.jsView file
Findings
2 Critical10 High8 Medium6 Low
CriticalRemote Asset Decode Executenode_modules/prisma/build/index.js
CriticalTrojan Source Unicodenode_modules/confbox/dist/_chunks/libs/json5.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processserver/dist/features/search/sqlite-vector-index.js
HighEvalserver/client/dist/assets/NotePropertiesPanel-DvL-3CSw.js
HighSame File Env Network Executionnode_modules/@prisma/client/runtime/binary.js
HighCommand Output Exfiltrationnode_modules/@prisma/client/runtime/binary.js
HighObfuscated Payload Loadernode_modules/prisma/build/index.js
HighCross File Remote Execution Contextnode_modules/@prisma/client/generator-build/index.js
HighShips High Entropy Blob
Affected versions and remediation
This report applies to ocean-brain@0.21.0.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.21.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.