registry / AI-agent control-surface risk / relia-sdk
relia-sdk
Zero-config observability SDK for [RELIA](https://github.com/relia-platform). Instruments Node.js services, browser sessions, and AI agents with a single CLI command.
This report shows the evidence for relia-sdk@0.3.1. 17 of 23 known versions are blocked or flagged. The newest version, 0.5.0, is allowed. See all versions.
AI Security Review
scanned 8d ago · by lpm-firewall-aiSource inspection confirms an automatic postinstall configuration change that enables prompt and answer reporting from consumer AI calls without affirmative consent. This meets the policy for an unconsented lifecycle change to an AI control surface.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Installing the package in a consumer project detected as using both Next.js and the AI SDK.
Impact
Prompts and model answers from the consumer application are disclosed to the configured Relia endpoint without affirmative setup consent.
Mechanism
The hook inserts a Turbopack alias for the AI SDK; wrapped text-generation calls build and send run reports.
Policy narrative
During installation, the postinstall hook detects a Next.js project that uses the AI SDK and modifies its configuration to redirect AI SDK imports through the package bridge. The bridge wraps text-generation calls, captures prompts and answers, and posts run reports to the default Relia endpoint. The inspected activation path contains no affirmative-consent check.
AI rationale
Source inspection confirms an automatic postinstall configuration change that enables prompt and answer reporting from consumer AI calls without affirmative consent. This meets the policy for an unconsented lifecycle change to an AI control surface.
Evidence
package.jsondist/postinstall.cjsdist/cli/detect.cjsdist/next-setup.cjsdist/agent/ai-bridge.cjsdist/agent/core.cjsnext.config.tsnext.config.mjsnext.config.jsnext.config.cjs
Network endpoints1
devreliaapi.tryrelia.com/api/v1/agents/runs
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 96.0% confidence with low false-positive risk.
Evidence for policy risk
- package.json runs the bundled postinstall script during installation.
- The hook detects consumer projects with Next.js and the AI SDK, then edits the Next.js configuration without a consent check.
- The hook writes a Turbopack alias that redirects AI SDK imports to the package bridge.
- The bridge wraps AI text generation calls to report each run automatically.
- The report includes prompts and answers and is sent to the package’s default Relia endpoint.
Evidence against
- The configuration change is limited to detected Next.js projects that also use the AI SDK.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
13 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/native.jsView file
4try {
L5: return new Function("m", "try { return require(m) } catch (e) { return null }")("react-native");
L6: } catch {
High
Findings
4 Critical8 High4 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalCredential Exfiltrationdist/cli.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/cli.cjs
CriticalPrevious Version Dangerous Deltadist/agent/core.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighEvaldist/native.js
HighBrowser Session Account Hijackdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/cli.cjs
HighSemantic Analysis Limiteddist/auto.cjs#virtual:normalized:round1
HighKnown Malware Source Similaritydist/cli.cjs
HighKnown Malware Source Similaritydist/node/middleware.cjs
Affected versions and remediation
This report applies to relia-sdk@0.3.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing relia-sdk@0.3.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
23 known versions0.5.0latestClean—AllowPublishedOct 16, 2026, 6:39 AM0.3.1shownMaliciousSoft block: AI-agent control surfaceBlockPublishedOct 14, 2026, 10:24 AM0.2.47SuspiciousCredential ExfiltrationWarnPublishedOct 2, 2026, 8:10 AM0.2.44MaliciousSoft block: AI-agent control surfaceBlockPublishedSep 28, 2026, 5:34 AM