orlithra-coding-agent@0.0.32
Secure coding agent CLI with session management
AI Security Review
scanned 2d ago · by lpm-firewall-aiSource inspection found no install-time attack, but authenticated requests can follow an unrestricted ORLITHRA_API_URL override. This is conditional credential exposure, so the package warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user configures ORLITHRA_API_URL and logs in or uses an existing Orlithra session.
Impact
A misconfigured or untrusted destination could receive Orlithra credentials and session data; the inspected source does not establish a package-selected unrelated recipient.
Mechanism
The API base URL is selected from ORLITHRA_API_URL without a destination allowlist; login and authenticated API operations use that base URL. Agent trace uploads additionally send an Orlithra token and session data to their configured base URL when enabled.
AI rationale
Source inspection found no install-time attack, but authenticated requests can follow an unrestricted ORLITHRA_API_URL override. This is conditional credential exposure, so the package warrants a warning rather than a block.
Evidence
dist/bundle/chunk-M4BFPS5Z.js
Network endpoints1
api.orlithra.com
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI is installed through dist/bundle/cli.js; the manifest contains no install lifecycle hook.
- The default API endpoint is https://api.orlithra.com, but ORLITHRA_API_URL can replace it without destination validation.
- CLI login uses the selected API base URL, and saved access tokens can be loaded for later requests.
- Agent trace uploads use an Orlithra credential in the Authorization header and send session data to the configured base URL; this path checks the agent-traces setting before upload.
Evidence against
- The default endpoint is the package’s Orlithra service, and the trace upload path is gated by the agent-traces setting.
- The source does not establish a fixed unrelated recipient or a hidden credential transfer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
10 flagged · loading sourcedist/bundle/chunk-M4BFPS5Z.jsView file
11838// dist/config.js
L11839: import { spawnSync } from "child_process";
L11840: import { createHash } from "crypto";
High
Child Process
Package source references child process execution.
dist/bundle/chunk-M4BFPS5Z.jsView on unpkg · L1183812414try {
L12415: return query("powershell.exe", [
L12416: "-NoLogo",
High
35265import { createRequire as createRequire2 } from "node:module";
L35266: import { execFile } from "node:child_process";
L35267: import { chmodSync as chmodSync4, closeSync as closeSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync10, renameSync as ...
...
L35270: import { randomUUID as randomUUID7 } from "node:crypto";
L35271: var DEFAULT_API_URL = "https://api.orlithra.com";
L35272: var ACCESS_REFRESH_SKEW_MS = 6e4;
...
L35276: function optionalKeyring() {
L35277: if (process.env.ORLITHRA_DISABLE_KEYRING === "1")
L35278: return void 0;
High
Same File Env Network Execution
Findings
1 Critical8 High4 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/bundle/chunk-WBBYFWNZ.js
HighChild Processdist/bundle/chunk-M4BFPS5Z.js
HighShelldist/bundle/chunk-M4BFPS5Z.js
HighSame File Env Network Executiondist/bundle/chunk-M4BFPS5Z.js
HighCredential Redirect Persistencedist/bundle/chunk-M4BFPS5Z.js
HighRemote Agent Bridgedist/bundle/chunk-M4BFPS5Z.js
HighCross File Remote Execution Contextdist/bundle/chunk-M4BFPS5Z.js
HighSemantic Analysis Limiteddist/bundle/chunk-WBBYFWNZ.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
MediumDynamic Requiredist/bundle/jiti-static-CY6V476M.js
Medium
Affected versions and remediation
This report applies to orlithra-coding-agent@0.0.32.
See all versions of orlithra-coding-agent for other recorded verdicts.
- Review the evidence and your use of orlithra-coding-agent@0.0.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.