orlithra-coding-agent@0.0.35
Secure coding agent CLI with session management
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe default upload is package-aligned and gated by the trace setting, but the same credential-bearing request can target an unrestricted environment-configured host. This supports a warning for conditional credential exposure, not a block for covert theft.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A session is persisted while trace uploads are enabled and an Orlithra credential is available.
Impact
If that override points to an unrelated host, the host receives the credential and session contents; the default destination is the Orlithra API.
Mechanism
The uploader reads session contents, attaches an Orlithra credential as a bearer token, and sends both to the API URL, which accepts an ORLITHRA_API_URL override.
AI rationale
The default upload is package-aligned and gated by the trace setting, but the same credential-bearing request can target an unrestricted environment-configured host. This supports a warning for conditional credential exposure, not a block for covert theft.
Evidence
package.jsondist/bundle/chunk-3HA453RM.jsdist/bundle/cli.js
Network endpoints1
api.orlithra.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI backed by dist/bundle/cli.js.
- Trace upload can use stored Orlithra trace credentials or the Orlithra authentication token.
- The upload sends the credential as a bearer token with session contents to an API URL that can be overridden by ORLITHRA_API_URL without a host restriction.
- Automatic trace uploads are gated by the trace-enabled setting and scheduled when the session is persisted.
Evidence against
- The default API destination is api.orlithra.com, and the trace upload checks that tracing is enabled before sending.
- The inspected source does not show an install-time upload or a fixed unrelated recipient.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
10 flagged · loading sourcedist/bundle/chunk-BEKGD7OH.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = orlithra-coding-agent@0.0.9
matchedIdentity = npm:b3JsaXRocmEtY29kaW5nLWFnZW50:0.0.9
similarity = 0.733
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bundle/chunk-BEKGD7OH.jsView on unpkg2588// dist/package-manager-cli.js
L2589: import { spawn as spawn3 } from "child_process";
L2590: import { readFileSync as readFileSync5, rmSync as rmSync4, statSync as statSync2 } from "fs";
High
Child Process
Package source references child process execution.
dist/bundle/chunk-BEKGD7OH.jsView on unpkg · L258814802const daemonArgs = [
L14803: ...process.execArgv,
L14804: entrypoint,
High
Findings
1 Critical8 High4 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/bundle/chunk-BEKGD7OH.js
HighChild Processdist/bundle/chunk-BEKGD7OH.js
HighShelldist/bundle/chunk-BEKGD7OH.js
HighSame File Env Network Executiondist/bundle/chunk-BEKGD7OH.js
HighCredential Redirect Persistencedist/bundle/chunk-3HA453RM.js
HighRemote Agent Bridgedist/bundle/chunk-BEKGD7OH.js
HighCross File Remote Execution Contextdist/bundle/chunk-3HA453RM.js
HighSemantic Analysis Limiteddist/bundle/chunk-BEKGD7OH.js
HighKnown Malware Source Similaritydist/core/export-html/vendor/highlight.min.js
MediumDynamic Requiredist/bundle/chunk-BEKGD7OH.js
Medium
Affected versions and remediation
This report applies to orlithra-coding-agent@0.0.35.
See all versions of orlithra-coding-agent for other recorded verdicts.
- Review the evidence and your use of orlithra-coding-agent@0.0.35 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.