registry / orlithra-coding-agent / 0.0.25

orlithra-coding-agent@0.0.25

⚠ Under review

Secure coding agent CLI with session management

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The flagged credential redirect resolves to a configurable Orlithra CLI authentication flow, with refresh requests sent to the saved base URL. The declared playwright-core dependency remains unresolved, preventing a clean verdict.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Dependency installation may activate dependency lifecycle behavior.

Impact

Its possible effects remain unknown; the inspected credential redirect path uses the configured Orlithra API base URL.

Mechanism

The unresolved dependency's behavior could not be determined from the available source.

AI rationale

Evidence

package.jsondist/bundle/chunk-OIO55W7J.js

Decision evidence

public snapshot

AI called this Manual Review at 82.0% confidence as Unknown with medium false-positive risk.

AI review observations

The package exposes a bundled CLI and defines a prepublish build hook.
The manifest declares playwright-core, whose source could not be resolved in the available dependency snapshot.
CLI login uses the configured Orlithra API base URL, stores that URL with the returned tokens, and refreshes against the stored URL.
The inspected credential flow showed no fixed unrelated token recipient.

Evidence against

The declared playwright-core dependency remains an unresolved executable boundary, so its behavior could not be assessed.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

Source & flagged code

10 flagged

dist/bundle/chunk-OIO55W7J.jsView file

11838// dist/config.js L11839: import { spawnSync } from "child_process"; L11840: import { createHash } from "crypto";

High

Child Process

Package source references child process execution.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L11838

12414try { L12415: return query("powershell.exe", [ L12416: "-NoLogo",

High

Shell

Package source references shell execution.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L12414

35072import { createRequire as createRequire2 } from "node:module"; L35073: import { execFile } from "node:child_process"; L35074: import { chmodSync as chmodSync4, closeSync as closeSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync10, renameSync as ... ... L35077: import { randomUUID as randomUUID7 } from "node:crypto"; L35078: var DEFAULT_API_URL = "https://api.orlithra.com"; L35079: var ACCESS_REFRESH_SKEW_MS = 6e4; ... L35083: function optionalKeyring() { L35084: if (process.env.ORLITHRA_DISABLE_KEYRING === "1") L35085: return void 0;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L35072

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/bundle/chunk-OIO55W7J.js: var fs$writeFile = fs6.writeFile; fs6.writeFile = writeFile2; function writeFile2(path6, data, options2, cb) { return go$writeFile(path6, data, options2, cb); function go$writeFile(path7, data2, options3, cb2, startTime) { return fs$writeFile(path7, data2, options3, function(err) { enqueue([go$writeFile, [path7, data2, options3, cb2], err, startTime || Date.now(), Date.now()]); const baseUrl = process.env.ORLITHRA_CODE_SHARE_VIEWER_URL || DEFAULT_SHARE_VIEWER_URL;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/bundle/chunk-OIO55W7J.jsView on unpkg

11838// dist/config.js L11839: import { spawnSync } from "child_process"; L11840: import { createHash } from "crypto"; ... L12226: } L12227: var pkg = JSON.parse(readFileSync(getPackageJsonPath(), "utf-8")); L12228: var piConfigName = pkg.piConfig?.name; ... L12246: function getShareViewerUrl(gistId) { L12247: const baseUrl = process.env.ORLITHRA_CODE_SHARE_VIEWER_URL || DEFAULT_SHARE_VIEWER_URL; L12248: return `${baseUrl}#${gistId}`;

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L11838

313Cross-file remote execution chain: dist/bundle/chunk-OIO55W7J.js spawns dist/bundle/chunk-IRMZ2I7B.js; helper contains network access plus dynamic code execution. L313: var cwd = null; L314: var platform2 = process.env.GRACEFUL_FS_PLATFORM || process.platform; L315: process.cwd = function() { ... L320: try { L321: process.cwd(); L322: } catch (er) { ... L1091: } L1092: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L1093: this._timeouts = timeouts; ... L1466: } L1467: process3.exitCode = code || /* istanbul ignore next */ L1468: 0;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L313

dist/bundle/jiti-static-CY6V476M.jsView file

1import { createRequire as __piBundleCreateRequire } from 'node:module'; const require = __piBundleCreateRequire(import.meta.url); L2: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle/jiti-static-CY6V476M.jsView on unpkg · L1

dist/bundle/chunk-VDQCMEU2.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = orlithra-coding-agent@0.0.9 matchedIdentity = npm:b3JsaXRocmEtY29kaW5nLWFnZW50:0.0.9 similarity = 0.733 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle/chunk-VDQCMEU2.jsView on unpkg

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bundle/chunk-VDQCMEU2.jsView on unpkg

dist/core/export-html/vendor/highlight.min.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/core/export-html/vendor/highlight.min.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/highlight.min.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/bundle/chunk-OIO55W7J.jsView file

11838// dist/config.js L11839: import { spawnSync } from "child_process"; L11840: import { createHash } from "crypto";

High

Child Process

Package source references child process execution.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L11838

12414try { L12415: return query("powershell.exe", [ L12416: "-NoLogo",

High

Shell

Package source references shell execution.

dist/bundle/chunk-OIO55W7J.jsView on unpkg · L12414

High

Same File Env Network Execution

Findings

1 Critical8 High4 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/bundle/chunk-VDQCMEU2.js

HighChild Processdist/bundle/chunk-OIO55W7J.js

HighShelldist/bundle/chunk-OIO55W7J.js

HighSame File Env Network Executiondist/bundle/chunk-OIO55W7J.js

HighCredential Redirect Persistencedist/bundle/chunk-OIO55W7J.js

HighRemote Agent Bridgedist/bundle/chunk-OIO55W7J.js

HighCross File Remote Execution Contextdist/bundle/chunk-OIO55W7J.js

HighSemantic Analysis Limiteddist/bundle/chunk-VDQCMEU2.js

HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js

MediumDynamic Requiredist/bundle/jiti-static-CY6V476M.js

Medium

Affected versions and remediation

This report applies to orlithra-coding-agent@0.0.25.

See all versions of orlithra-coding-agent for other recorded verdicts.

Review the evidence and your use of orlithra-coding-agent@0.0.25 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 08:32:55.810Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.