registry / Credential exfiltration / orlithra-coding-agent
orlithra-coding-agent
Secure coding agent CLI with session management
This report shows the evidence for orlithra-coding-agent@0.0.29. 1 of 27 known versions is blocked or flagged. The newest version, 0.0.35, is flagged. See all versions.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe active model request path forwards a selected provider’s API key to the package’s default Orlithra gateway without recipient-specific consent. This is concrete credential disclosure, so the package should be blocked.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running the agent with a model that uses a selected provider API key.
Impact
The gateway receives credentials intended for the selected model provider.
Mechanism
The default stream path copies the provider key into gateway authentication and sends it to the default Orlithra endpoint.
Attack narrative
The published CLI reaches the inspected runtime bundle. Its agent request path obtains a key for the selected provider, then defaults to a gateway function that places that key in bearer authentication for requests to api.orlithra.com. The provider credential prompt does not establish consent to send credentials for services such as OpenAI or Anthropic to the Orlithra gateway.
AI rationale
The active model request path forwards a selected provider’s API key to the package’s default Orlithra gateway without recipient-specific consent. This is concrete credential disclosure, so the package should be blocked.
Evidence
package.jsondist/bundle/cli.jsdist/bundle/cli-main-NSKMEWDO.jsdist/bundle/chunk-XDMLSTMM.jsdist/bundle/chunk-TB7BWQIT.js
Network endpoints1
api.orlithra.com
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package exposes a CLI that imports the flagged runtime bundle.
- The interactive login flow accepts and stores an API key for the selected provider.
- The provider lookup supports credentials for services such as OpenAI and Anthropic.
- Agent requests retrieve the selected provider’s key and use the gateway as the default stream function.
- The gateway forwards that key as a bearer token to its default Orlithra endpoint; only test streams bypass it.
- The gateway sends an authenticated request to its runs endpoint.
Evidence against
- The package provides an Orlithra-branded gateway and asks the user to enter an API key, but the inspected flow does not disclose that keys for other providers are sent to that gateway.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
10 flagged · loading sourcedist/bundle/chunk-XDMLSTMM.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = orlithra-coding-agent@0.0.9
matchedIdentity = npm:b3JsaXRocmEtY29kaW5nLWFnZW50:0.0.9
similarity = 0.733
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bundle/chunk-XDMLSTMM.jsView on unpkg2588// dist/package-manager-cli.js
L2589: import { spawn as spawn3 } from "child_process";
L2590: import { readFileSync as readFileSync5, rmSync as rmSync4, statSync as statSync2 } from "fs";
High
Child Process
Package source references child process execution.
dist/bundle/chunk-XDMLSTMM.jsView on unpkg · L258814802const daemonArgs = [
L14803: ...process.execArgv,
L14804: entrypoint,
High
Findings
1 Critical8 High4 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/bundle/chunk-XDMLSTMM.js
HighChild Processdist/bundle/chunk-XDMLSTMM.js
HighShelldist/bundle/chunk-XDMLSTMM.js
HighSame File Env Network Executiondist/bundle/chunk-XDMLSTMM.js
HighCredential Redirect Persistencedist/bundle/chunk-TB7BWQIT.js
HighRemote Agent Bridgedist/bundle/chunk-XDMLSTMM.js
HighCross File Remote Execution Contextdist/bundle/chunk-TB7BWQIT.js
HighSemantic Analysis Limiteddist/bundle/chunk-XDMLSTMM.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
MediumDynamic Requiredist/bundle/chunk-XDMLSTMM.js
Medium
Affected versions and remediation
This report applies to orlithra-coding-agent@0.0.29.
The versions list below shows the verdict for each recorded version.
- Avoid installing orlithra-coding-agent@0.0.29. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.