Loading npm security reports…

proto-plugin@0.1.61: Malicious npm security report (Block) | LPM Firewall

registry / proto-plugin / 0.1.61

proto-plugin@0.1.61

Shared framework for building shareable UI prototypes in Next.js — review shell, comment anchoring, variant exploration, and the prototype home gallery.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Default runtime telemetry sends user/workspace activity to a host API that persists it using a package-embedded credential at a package-controlled Upstash endpoint. Installation also mutates the consuming host's route, logo, and package scripts.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Install runs postinstall; rendering the plugin site triggers page and interaction telemetry.

Impact

Unconsented collection of user/company identifiers, routes, prototype metadata, and interaction events; host project mutation at install time.

Mechanism

Embedded external Redis sink receives implicit telemetry through package-provided API routes.

Attack narrative

On host-page rendering, the package wraps its UI in a telemetry provider that records route, interaction properties, persistent browser identifiers, and workspace user/company names. It posts these to a package route, which unconditionally stores valid events in Redis using a credential embedded in the published package, rather than host-provided telemetry configuration. The postinstall hook additionally writes a design-system route, copies a logo, and modifies host package scripts.

Rationale

Concrete default telemetry exfiltration to a package-controlled external store is established by source, and is compounded by unconsented postinstall host mutation. Scanner similarity labels were not relied on.

Evidence

package.jsonscripts/ensure-design-system-page.mjsscripts/ensure-bootstrap-verify-scripts.mjssrc/config/prototype-site-layout-client.tsxsrc/lib/prototypes/telemetry/prototype-telemetry-context.tsx

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/ensure-design-system-page.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/lib/prototypes/telemetry/prototype-telemetry-context.tsxView file

•Automatic page telemetry attaches persistent client, session, user, and company identity before storage in a package-controlled external service with embedded credentials. [redacted]-telemetry-context.tsx: useEffect, getTelemetryClientId, getTelemetrySessionId, clientId: getTelemetryClientId(), sessionId: getTelemetrySessionId(), userName: currentProfile.userName || undefined, companyName: currentProfile.companyName || undefined, useEffect(() => { src/server/redis/prototype-telemetry.ts: import { getDedicatedRedis, getDedicatedRedisStatus } from "./client"; export const PROTOTYPE_TELEMETRY_KEY = "prototype-telemetry:events"; export const PROTOTYPE_TELEMETRY_KNOWN_PROTOTYPES_KEY = "prototype-telemetry:known-prototypes"; export function getTelemetryRedis(): Redis { return getDedicatedRedis()

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/lib/prototypes/telemetry/prototype-telemetry-context.tsxView on unpkg

scripts/publish-package.shView file

•path = scripts/publish-package.sh kind = build_helper sizeBytes = 7275 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/publish-package.shView on unpkg

src/server/pr-vercel-preview-route.tsView file

•matchType = normalized_sha256 matchedPackage = proto-plugin@0.1.41 matchedPath = src/server/pr-vercel-preview-route.ts matchedIdentity = npm:cHJvdG8tcGx1Z2lu:0.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/server/pr-vercel-preview-route.tsView on unpkg

src/lib/prototype-comments/core/source-location.tsView file

•matchType = normalized_sha256 matchedPackage = proto-plugin@0.1.41 matchedPath = src/lib/prototype-comments/core/source-location.ts matchedIdentity = npm:cHJvdG8tcGx1Z2lu:0.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/prototype-comments/core/source-location.tsView on unpkg

scripts/lib/component-library-coverage.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = proto-plugin@0.1.44 matchedIdentity = npm:cHJvdG8tcGx1Z2lu:0.1.44 similarity = 0.608 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/lib/component-library-coverage.mjsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 15-55json

15 "src",

16 "scripts",

17 "README.md",

18 "AGENTS.md",

19 "components.json",

20 "tsconfig.json"

21 ],

22 "main": "./src/index.ts",

23 "types": "./src/index.ts",

24 "exports": {

25 ".": "./src/index.ts",

26 "./config": "./src/config/define-prototype-config.ts",

27 "./config/prototype-icon": "./src/config/prototype-icon.tsx",

28 "./app": "./src/app.ts",

29 "./with-prototype": "./src/config/with-prototype.ts",

30 "./server": "./src/server.ts",

31 "./ui/*": "./src/components/ui/*.tsx",

32 "./styles/globals.css": "./src/styles/globals.css"

33 },

34 "scripts": {

35 "postinstall": "node scripts/ensure-design-system-page.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L35

36 "setup-host": "node scripts/ensure-design-system-page.mjs",

37 "verify:prototype-ids": "node scripts/verify-prototype-component-ids.mjs",

38 "verify:prototype-preview-states": "node scripts/verify-prototype-preview-states.mjs",

39 "verify:tailwind-theme": "node scripts/verify-tailwind-theme-registration.mjs",

40 "extract-tailwind-theme": "node scripts/extract-tailwind-theme.mjs",

41 "link-source": "./scripts/link-source.sh",

42 "sync-from-source": "./scripts/sync-from-source.sh",

43 "link-source-db": "./scripts/link-source-db.sh",

44 "share-prototype": "./scripts/share-prototype.sh",

45 "download-mobbin-references": "node scripts/download-mobbin-reference-images.mjs",

46 "publish-package": "./scripts/publish-package.sh"

47 },

48 "peerDependencies": {

49 "next": ">=15",

50 "next-themes": ">=0.4",

51 "react": ">=19",

52 "react-dom": ">=19"

53 },

54 "dependencies": {

55 "@radix-ui/react-accordion": "^1.2.12",

src/lib/prototypes/telemetry/prototype-telemetry-context.tsxView file

•Automatic page telemetry attaches persistent client, session, user, and company identity before storage in a package-controlled external service with embedded credentials. [redacted]-telemetry-context.tsx: useEffect, getTelemetryClientId, getTelemetrySessionId, clientId: getTelemetryClientId(), sessionId: getTelemetrySessionId(), userName: currentProfile.userName || undefined, companyName: currentProfile.companyName || undefined, useEffect(() => { src/server/redis/prototype-telemetry.ts: import { getDedicatedRedis, getDedicatedRedisStatus } from "./client"; export const PROTOTYPE_TELEMETRY_KEY = "prototype-telemetry:events"; export const PROTOTYPE_TELEMETRY_KNOWN_PROTOTYPES_KEY = "prototype-telemetry:known-prototypes"; export function getTelemetryRedis(): Redis { return getDedicatedRedis()

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

src/lib/prototypes/telemetry/prototype-telemetry-context.tsxView on unpkg

scripts/publish-package.shView file

•path = scripts/publish-package.sh kind = build_helper sizeBytes = 7275 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/publish-package.shView on unpkg

src/server/pr-vercel-preview-route.tsView file

•matchType = normalized_sha256 matchedPackage = proto-plugin@0.1.41 matchedPath = src/server/pr-vercel-preview-route.ts matchedIdentity = npm:cHJvdG8tcGx1Z2lu:0.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/server/pr-vercel-preview-route.tsView on unpkg

src/lib/prototype-comments/core/source-location.tsView file

•matchType = normalized_sha256 matchedPackage = proto-plugin@0.1.41 matchedPath = src/lib/prototype-comments/core/source-location.ts matchedIdentity = npm:cHJvdG8tcGx1Z2lu:0.1.41 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/prototype-comments/core/source-location.tsView on unpkg

scripts/lib/component-library-coverage.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = proto-plugin@0.1.44 matchedIdentity = npm:cHJvdG8tcGx1Z2lu:0.1.44 similarity = 0.608 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/lib/component-library-coverage.mjsView on unpkg