registry / orlithra-coding-agent / 0.0.26

orlithra-coding-agent@0.0.26

⚠ Under review

Secure coding agent CLI with session management

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The credential redirect allegation is not supported by the inspected source: login defaults to the Orlithra API, and saved credentials are used with their saved API base URL. The CLI loads undici at startup, and its unresolved source prevents a clean verdict.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Starting the CLI loads the unresolved runtime dependency.

Impact

The dependency’s behavior remains unassessed, so the package cannot be cleared based on this inspection.

Mechanism

The available source shows a dynamic import of undici, but its selected package source was not available for inspection.

AI rationale

Evidence

package.jsondist/bundle/cli-main-E4QRIRW6.js

Decision evidence

public snapshot

AI called this Manual Review at 77.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest declares undici as a runtime dependency, and the CLI imports it during normal startup; its source was unresolved in the supplied inspection.
The inspected login code defaults to Orlithra’s API and refreshes credentials against the saved API base URL.
Agent trace uploads are disabled by default and are gated by the trace setting.

Evidence against

The inspected credential flow does not establish a transfer to the scanner’s alleged unofficial gateway.
The flagged process execution matches user-facing clipboard and browser-launch helpers in the inspected excerpts.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Source & flagged code

10 flagged

dist/bundle/chunk-DQAZ22UG.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = orlithra-coding-agent@0.0.9 matchedIdentity = npm:b3JsaXRocmEtY29kaW5nLWFnZW50:0.0.9 similarity = 0.733 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg

2588// dist/package-manager-cli.js L2589: import { spawn as spawn3 } from "child_process"; L2590: import { readFileSync as readFileSync5, rmSync as rmSync4, statSync as statSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L2588

14811const daemonArgs = [ L14812: ...process.execArgv, L14813: entrypoint,

High

Shell

Package source references shell execution.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L14811

43815var import_yauzl = __toESM(require_yauzl(), 1); L43816: import { spawnSync as spawnSync4 } from "child_process"; L43817: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync13, mkdirSync as mkdirSync9, readdirSync as readdirSync6, renameSync as renameSync5, rmSync as rmSync7 ... ... L43827: var MAX_BINARY_BYTES = 128 * 1024 * 1024; L43828: var RIPGREP_INSTALL_URL = "https://github.com/BurntSushi/ripgrep#installation"; L43829: function isOfflineModeEnabled2() { L43830: const value = process.env.ORLITHRA_CODE_OFFLINE; L43831: if (!value)

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L43815

321[redacted], L322: [redacted], L323: resolveReadPath, ... L2311: try { L2312: return originalReadFileSync(...args); L2313: } catch (error51) { ... L2588: // dist/package-manager-cli.js L2589: import { spawn as spawn3 } from "child_process"; L2590: import { readFileSync as readFileSync5, rmSync as rmSync4, statSync as statSync2 } from "fs";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L321

564Cross-file remote execution chain: dist/bundle/chunk-DQAZ22UG.js spawns dist/bundle/chunk-HH6ETTR5.js; helper contains network access plus dynamic code execution. L564: if (offset < entireSlice.length) { L565: readStream.write(entireSlice.slice(offset, entireSlice.length)); L566: } ... L1328: var destroyed = false; L1329: var inflateFilter = zlib.createInflateRaw(); L1330: readStream.on("error", function(err) { ... L1734: provider: "orlithra-gateway", L1735: baseUrl: "https://api.orlithra.com", L1736: reasoning: false, ... L2099: return new Promise((resolve19) => { L2100: const rl = createInterface({ input: process.stdin, output: process.stdout }); L2101: rl.question(`${message} [y/N] `, (answer) => {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L564

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg

1import { createRequire as __piBundleCreateRequire } from 'node:module'; const require = __piBundleCreateRequire(import.meta.url); L2: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L1

dist/bundle/chunk-HH6ETTR5.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/bundle/chunk-HH6ETTR5.js: var fs$writeFile = fs6.writeFile; fs6.writeFile = writeFile2; function writeFile2(path6, data, options2, cb) { return go$writeFile(path6, data, options2, cb); function go$writeFile(path7, data2, options3, cb2, startTime) { return fs$writeFile(path7, data2, options3, function(err) { enqueue([go$writeFile, [path7, data2, options3, cb2], err, startTime || Date.now(), Date.now()]); const baseUrl = process.env.ORLITHRA_CODE_SHARE_VIEWER_URL || DEFAULT_SHARE_VIEWER_URL;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/bundle/chunk-HH6ETTR5.jsView on unpkg

dist/core/export-html/vendor/highlight.min.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/core/export-html/vendor/highlight.min.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/highlight.min.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/bundle/chunk-DQAZ22UG.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg

2588// dist/package-manager-cli.js L2589: import { spawn as spawn3 } from "child_process"; L2590: import { readFileSync as readFileSync5, rmSync as rmSync4, statSync as statSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L2588

14811const daemonArgs = [ L14812: ...process.execArgv, L14813: entrypoint,

High

Shell

Package source references shell execution.

dist/bundle/chunk-DQAZ22UG.jsView on unpkg · L14811

Findings

1 Critical8 High4 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/bundle/chunk-DQAZ22UG.js

HighChild Processdist/bundle/chunk-DQAZ22UG.js

HighShelldist/bundle/chunk-DQAZ22UG.js

HighSame File Env Network Executiondist/bundle/chunk-DQAZ22UG.js

HighCredential Redirect Persistencedist/bundle/chunk-HH6ETTR5.js

HighRemote Agent Bridgedist/bundle/chunk-DQAZ22UG.js

HighCross File Remote Execution Contextdist/bundle/chunk-DQAZ22UG.js

HighSemantic Analysis Limiteddist/bundle/chunk-DQAZ22UG.js

HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js

MediumDynamic Requiredist/bundle/chunk-DQAZ22UG.js

Medium

Affected versions and remediation

This report applies to orlithra-coding-agent@0.0.26.

See all versions of orlithra-coding-agent for other recorded verdicts.

Review the evidence and your use of orlithra-coding-agent@0.0.26 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 08:33:10.711Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.