registry / orlithra-coding-agent / 0.0.28

orlithra-coding-agent@0.0.28

⚠ Under review

Secure coding agent CLI with session management

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The inspected credential flow does not support the scanner’s claim of a fixed unrelated gateway. I cannot clear the package while the declared playwright-core dependency remains unresolved.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing or running the package would resolve and use its declared dependencies.

Impact

No malicious effect is confirmed; the unavailable dependency prevents a clean determination.

Mechanism

The package declares playwright-core, but its prepared source was unavailable for review.

AI rationale

The inspected credential flow does not support the scanner’s claim of a fixed unrelated gateway. I cannot clear the package while the declared playwright-core dependency remains unresolved.

Evidence

package.json

Decision evidence

public snapshot

AI called this Manual Review at 87.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json declares playwright-core as a runtime dependency; its source was unavailable in the prepared snapshot, so its behavior remains unverified.
The inspected CLI authentication code uses the Orlithra API base URL for token-authenticated requests; it did not establish a fixed unrelated credential recipient.
Telemetry has offline and do-not-track guards and otherwise follows its settings or explicit environment override.

Evidence against

The manifest has no install lifecycle hook; prepublishOnly runs the package build.
Inspected authentication requests target the stored API base URL, with api.orlithra.com as the default.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetry

Source & flagged code

10 flagged

dist/bundle/chunk-MOKYNEKW.jsView file

11838// dist/config.js L11839: import { spawnSync } from "child_process"; L11840: import { createHash } from "crypto";

High

Child Process

Package source references child process execution.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L11838

12414try { L12415: return query("powershell.exe", [ L12416: "-NoLogo",

High

Shell

Package source references shell execution.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L12414

35130import { createRequire as createRequire2 } from "node:module"; L35131: import { execFile } from "node:child_process"; L35132: import { chmodSync as chmodSync4, closeSync as closeSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync10, renameSync as ... ... L35135: import { randomUUID as randomUUID7 } from "node:crypto"; L35136: var DEFAULT_API_URL = "https://api.orlithra.com"; L35137: var ACCESS_REFRESH_SKEW_MS = 6e4; ... L35141: function optionalKeyring() { L35142: if (process.env.ORLITHRA_DISABLE_KEYRING === "1") L35143: return void 0;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L35130

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/bundle/chunk-MOKYNEKW.js: var fs$writeFile = fs6.writeFile; fs6.writeFile = writeFile2; function writeFile2(path6, data, options2, cb) { return go$writeFile(path6, data, options2, cb); function go$writeFile(path7, data2, options3, cb2, startTime) { return fs$writeFile(path7, data2, options3, function(err) { enqueue([go$writeFile, [path7, data2, options3, cb2], err, startTime || Date.now(), Date.now()]); const baseUrl = process.env.ORLITHRA_CODE_SHARE_VIEWER_URL || DEFAULT_SHARE_VIEWER_URL;

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg

11838// dist/config.js L11839: import { spawnSync } from "child_process"; L11840: import { createHash } from "crypto"; ... L12226: } L12227: var pkg = JSON.parse(readFileSync(getPackageJsonPath(), "utf-8")); L12228: var piConfigName = pkg.piConfig?.name; ... L12246: function getShareViewerUrl(gistId) { L12247: const baseUrl = process.env.ORLITHRA_CODE_SHARE_VIEWER_URL || DEFAULT_SHARE_VIEWER_URL; L12248: return `${baseUrl}#${gistId}`;

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L11838

313Cross-file remote execution chain: dist/bundle/chunk-MOKYNEKW.js spawns dist/bundle/chunk-IRMZ2I7B.js; helper contains network access plus dynamic code execution. L313: var cwd = null; L314: var platform2 = process.env.GRACEFUL_FS_PLATFORM || process.platform; L315: process.cwd = function() { ... L320: try { L321: process.cwd(); L322: } catch (er) { ... L1091: } L1092: this._originalTimeouts = JSON.parse(JSON.stringify(timeouts)); L1093: this._timeouts = timeouts; ... L1466: } L1467: process3.exitCode = code || /* istanbul ignore next */ L1468: 0;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L313

dist/bundle/jiti-static-CY6V476M.jsView file

1import { createRequire as __piBundleCreateRequire } from 'node:module'; const require = __piBundleCreateRequire(import.meta.url); L2: import {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle/jiti-static-CY6V476M.jsView on unpkg · L1

dist/bundle/chunk-ZBIHZNG2.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = orlithra-coding-agent@0.0.9 matchedIdentity = npm:b3JsaXRocmEtY29kaW5nLWFnZW50:0.0.9 similarity = 0.733 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bundle/chunk-ZBIHZNG2.jsView on unpkg

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bundle/chunk-ZBIHZNG2.jsView on unpkg

dist/core/export-html/vendor/highlight.min.jsView file

•matchType = normalized_sha256 matchedPackage = omnirush@1.0.2 matchedPath = core/dist/core/export-html/vendor/highlight.min.js matchedIdentity = npm:b21uaXJ1c2g:1.0.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/export-html/vendor/highlight.min.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/bundle/chunk-MOKYNEKW.jsView file

11838// dist/config.js L11839: import { spawnSync } from "child_process"; L11840: import { createHash } from "crypto";

High

Child Process

Package source references child process execution.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L11838

12414try { L12415: return query("powershell.exe", [ L12416: "-NoLogo",

High

Shell

Package source references shell execution.

dist/bundle/chunk-MOKYNEKW.jsView on unpkg · L12414

High

Same File Env Network Execution

Findings

1 Critical8 High4 Medium8 Low

CriticalPrevious Version Dangerous Deltadist/bundle/chunk-ZBIHZNG2.js

HighChild Processdist/bundle/chunk-MOKYNEKW.js

HighShelldist/bundle/chunk-MOKYNEKW.js

HighSame File Env Network Executiondist/bundle/chunk-MOKYNEKW.js

HighCredential Redirect Persistencedist/bundle/chunk-MOKYNEKW.js

HighRemote Agent Bridgedist/bundle/chunk-MOKYNEKW.js

HighCross File Remote Execution Contextdist/bundle/chunk-MOKYNEKW.js

HighSemantic Analysis Limiteddist/bundle/chunk-ZBIHZNG2.js

HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js

MediumDynamic Requiredist/bundle/jiti-static-CY6V476M.js

Medium

Affected versions and remediation

This report applies to orlithra-coding-agent@0.0.28.

See all versions of orlithra-coding-agent for other recorded verdicts.

Review the evidence and your use of orlithra-coding-agent@0.0.28 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 08:34:11.884Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.