registry / relia-sdk / 0.2.32

relia-sdk@0.2.32

Zero-config observability SDK for [RELIA](https://github.com/relia-platform). Instruments Node.js services, browser sessions, and AI agents with a single CLI command.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is an unconsented install-lifecycle modification of a consumer project paired with an AI traffic interception and reporting capability. The immediate process exit makes completion of the alias rewrite uncertain, so the evidence supports a warning rather than a definitive block.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Installing the package in a Next.js project; importing the automatic interceptor or activating the AI bridge at runtime.

Impact

Consumer AI application traffic, including prompts, answers, and tool data, can be sent to the Relia service without an explicit runtime opt-in.

Mechanism

Postinstall project-config mutation and LLM telemetry interception.

AI rationale

Evidence

package.jsondist/postinstall.cjsdist/next-setup.cjsdist/auto.cjsdist/agent/ai-bridge.cjsnext.config.tsnext.config.mjsnext.config.jsnext.config.cjsglobalThis.fetch

Network endpoints1

devreliaapi.tryrelia.com/api/v1/agents/runs

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The package runs a postinstall hook automatically.
The hook detects Next.js projects and contains code to rewrite their configuration to alias the AI SDK.
Its runtime interceptor captures LLM prompts, answers, and tool-call data, then posts them to a Relia endpoint.

Evidence against

The postinstall mutation is limited to detected Next.js projects.
No source evidence shows credential harvesting, destructive commands, or a self-dependency chain.
The alias rewrite is asynchronous immediately before process exit, so this specific path may not complete.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 37 file(s), 478 KB of source, external domains: 127.0.0.1, devotel.tryrelia.com, devreliaapi.tryrelia.com, evilmartians.com, relia-seven.vercel.app, www.w3ctech.com

Source & flagged code

12 flagged

package.jsonView file

•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/node.cjsView file

6exports.start = start; L7: const auto_instrumentations_node_1 = require("@opentelemetry/auto-instrumentations-node"); L8: const exporter_trace_otlp_http_1 = require("@opentelemetry/exporter-trace-otlp-http");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/node.cjsView on unpkg · L6

dist/index.jsView file

725} L726: const Uo = /url$(?:(')([^']*)'|(")(.*?)"|([^)]*))$/gm, zo = /^(?:[a-z+]+:)?\/\//i, Wo = /^www\..*/i, Bo = /^(data:)([^,]*),(.*)/i; L727: function wt(e, t) { ... L2024: function f(i) { L2025: return Buffer ? Buffer.from(i, "base64").toString() : window.atob(i); L2026: } ... L3227: } catch (i) { L3228: throw process.env.NODE_ENV !== "production" && i.name === "CssSyntaxError" && l && l.from && (/\.scss$/i.test(l.from) ? i.message += ` L3229: You tried to parse SCSS with the standard CSS parser; try again with the postcss-scss parser` : /\.sass/i.test(l.from) ? i.message += ` ... L3740: x + `: postcss.plugin was deprecated. Migration guide: L3741: https://evilmartians.com/chronicles/postcss-8-plugin-migration` L3742: ), process.env.LANG && process.env.LANG.startsWith("cn") &&

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/index.jsView on unpkg · L725

dist/cli.cjsView file

23exports.main = main; L24: const node_child_process_1 = require("node:child_process"); L25: const node_fs_1 = __importDefault(require("node:fs")); ... L32: const next_setup_cjs_1 = require("./next-setup.cjs"); L33: exports.DEFAULT_API_BASE = "https://devreliaapi.tryrelia.com"; L34: exports.DEFAULT_OTLP_ENDPOINT = "https://devotel.tryrelia.com/v1/traces"; ... L42: try { L43: return JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.resolve(p), "utf8")); L44: } ... L55: }; L56: const AUTH_FILE_PATH = node_path_1.default.join(node_os_1.default.homedir(), ".relia", "auth.json"); L57: function getStoredCliAuth() {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.cjsView on unpkg · L23

23Trigger-reachable chain: manifest.exports -> dist/cli.cjs L23: exports.main = main; L24: const node_child_process_1 = require("node:child_process"); L25: const node_fs_1 = __importDefault(require("node:fs")); ... L32: const next_setup_cjs_1 = require("./next-setup.cjs"); L33: exports.DEFAULT_API_BASE = "https://devreliaapi.tryrelia.com"; L34: exports.DEFAULT_OTLP_ENDPOINT = "https://devotel.tryrelia.com/v1/traces"; ... L42: try { L43: return JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.resolve(p), "utf8")); L44: } ... L55: }; L56: const AUTH_FILE_PATH = node_path_1.default.join(node_os_1.default.homedir(), ".relia", "auth.json"); L57: function getStoredCliAuth() {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.cjsView on unpkg · L23

23Trigger-reachable credential exfiltration chain: manifest.exports -> dist/cli.cjs L23: exports.main = main; L24: const node_child_process_1 = require("node:child_process"); L25: const node_fs_1 = __importDefault(require("node:fs")); ... L32: const next_setup_cjs_1 = require("./next-setup.cjs"); L33: exports.DEFAULT_API_BASE = "https://devreliaapi.tryrelia.com"; L34: exports.DEFAULT_OTLP_ENDPOINT = "https://devotel.tryrelia.com/v1/traces"; ... L42: try { L43: return JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.resolve(p), "utf8")); L44: } ... L55: }; L56: const AUTH_FILE_PATH = node_path_1.default.join(node_os_1.default.homedir(), ".relia", "auth.json"); L57: function getStoredCliAuth() {

dist/auto.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/auto.cjs#virtual:normalized:round1View on unpkg

dist/agent/core.cjsView file

•matchType = normalized_sha256 matchedPackage = relia-sdk@0.2.31 matchedPath = dist/agent/core.cjs matchedIdentity = npm:cmVsaWEtc2Rr:0.2.31 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/agent/core.cjsView on unpkg

dist/auto.cjsView file

•matchType = normalized_sha256 matchedPackage = relia-sdk@0.2.31 matchedPath = dist/auto.cjs matchedIdentity = npm:cmVsaWEtc2Rr:0.2.31 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/auto.cjsView on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/node.cjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/node.cjsView on unpkg · L6

Findings

3 Critical8 High4 Medium5 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalCredential Exfiltrationdist/cli.cjs

CriticalTrigger Reachable Dangerous Capabilitydist/cli.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighBrowser Session Account Hijackdist/index.js

HighTrigger Reachable Credential Exfiltrationdist/cli.cjs

HighSemantic Analysis Limiteddist/auto.cjs#virtual:normalized:round1

HighKnown Malware Source Similaritydist/cli.cjs

HighKnown Malware Source Similaritydist/agent/core.cjs

HighKnown Malware Source Similaritydist/auto.cjs

HighKnown Malware Source Fingerprint Signaturedist/cli.cjs

Affected versions and remediation

This report applies to relia-sdk@0.2.32.

See all versions of relia-sdk for other recorded verdicts.

Review the evidence and your use of relia-sdk@0.2.32 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 09:01:34.274Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.