registry / orlithra-coding-agent / 0.0.34
orlithra-coding-agent@0.0.34
⚠ Under reviewSecure coding agent CLI with session management
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected credential flow is consistent with sending an Orlithra gateway credential to the Orlithra API, and the manifest has no install hook. The declared playwright-core dependency remains unresolved in the prepared source snapshot, so the package cannot be cleared.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Use of the package may load its declared runtime dependencies.
Impact
The dependency's behavior, including any install-time activity, remains unknown in this review.
Mechanism
The available snapshot does not include resolved source for playwright-core, so its behavior could not be assessed.
AI rationale
The inspected credential flow is consistent with sending an Orlithra gateway credential to the Orlithra API, and the manifest has no install hook. The declared playwright-core dependency remains unresolved in the prepared source snapshot, so the package cannot be cleared.
Evidence
package.json
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares playwright-core as a runtime dependency.
- The inspected gateway flow sends the Orlithra gateway credential to the Orlithra API endpoint for a model selected from that gateway.
- The prepared source snapshot could not resolve playwright-core, so its behavior remains unreviewed.
Evidence against
- The manifest shows a prepublishOnly build command, not an install hook.
- The inspected gateway code ties credential use to the Orlithra gateway provider and its branded API endpoint.
- Telemetry checks settings and environment controls before recording events.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
10 flagged · loading sourcedist/bundle/chunk-BXYD77HI.jsView file
11838// dist/config.js
L11839: import { spawnSync } from "child_process";
L11840: import { createHash } from "crypto";
High
Child Process
Package source references child process execution.
dist/bundle/chunk-BXYD77HI.jsView on unpkg · L1183812414try {
L12415: return query("powershell.exe", [
L12416: "-NoLogo",
High
35274import { createRequire as createRequire2 } from "node:module";
L35275: import { execFile } from "node:child_process";
L35276: import { chmodSync as chmodSync4, closeSync as closeSync4, existsSync as existsSync9, mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync10, renameSync as ...
...
L35279: import { randomUUID as randomUUID7 } from "node:crypto";
L35280: var DEFAULT_API_URL = "https://api.orlithra.com";
L35281: var ACCESS_REFRESH_SKEW_MS = 6e4;
...
L35285: function optionalKeyring() {
L35286: if (process.env.ORLITHRA_DISABLE_KEYRING === "1")
L35287: return void 0;
High
Same File Env Network Execution
Findings
1 Critical8 High4 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/bundle/chunk-OO3BH6GC.js
HighChild Processdist/bundle/chunk-BXYD77HI.js
HighShelldist/bundle/chunk-BXYD77HI.js
HighSame File Env Network Executiondist/bundle/chunk-BXYD77HI.js
HighCredential Redirect Persistencedist/bundle/chunk-BXYD77HI.js
HighRemote Agent Bridgedist/bundle/chunk-BXYD77HI.js
HighCross File Remote Execution Contextdist/bundle/chunk-BXYD77HI.js
HighSemantic Analysis Limiteddist/bundle/chunk-OO3BH6GC.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
MediumDynamic Requiredist/bundle/jiti-static-CY6V476M.js
Medium
Affected versions and remediation
This report applies to orlithra-coding-agent@0.0.34.
See all versions of orlithra-coding-agent for other recorded verdicts.
- Review the evidence and your use of orlithra-coding-agent@0.0.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.