registry / relia-sdk / 0.5.0

relia-sdk@0.5.0

Zero-config observability SDK for [RELIA](https://github.com/relia-platform). Instruments Node.js services, browser sessions, and AI agents with a single CLI command.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

The postinstall behavior is limited to detected Next.js setup, and agent interception is gated by an explicit environment setting with a package-aligned default endpoint. The observed telemetry and authentication flows are consistent with the SDK’s stated integration behavior; no concrete malicious activity was established.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Importing the auto entry with RELIA_AGENT_ID set activates request interception.

Impact

Conversation data is disclosed to Relia when the feature is enabled; the inspected source does not establish covert collection or another attack.

Mechanism

The interceptor reports prompts, answers, and tool steps to the configured endpoint, which defaults to Relia’s API.

AI rationale

Evidence

package.jsondist/postinstall.cjsdist/auto-init.cjsdist/auto.cjsdist/cli.cjsdist/index.jsdist/node/middleware.cjs

Network endpoints1

devreliaapi.tryrelia.com/api/v1/agents/runs

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook loads a helper that skips the SDK’s own project and runs framework setup only when it detects a Next.js app.
The CLI prompts for credentials and sends login requests to the Relia API host.
Agent request interception activates through the auto entry only when RELIA_AGENT_ID is set; its default reporting endpoint is Relia’s API.
Enabled agent reporting sends prompts, answers, and tool steps to the configured endpoint.
The Node middleware sanitizes request bodies before adding them to telemetry spans.

Evidence against

When enabled, agent telemetry includes prompt, answer, and tool data, so users should deliberately configure this feature.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

Source & flagged code

12 flagged

package.jsonView file

Lines 50-90json

50 "types": "./dist/auto.d.cts",

51 "require": "./dist/auto.cjs",

52 "import": "./dist/auto.mjs",

53 "default": "./dist/auto.cjs"

54 }

55 },

56 "bin": {

57 "relia": "dist/cli.cjs"

58 },

59 "files": [

60 "dist"

61 ],

62 "engines": {

63 "node": ">=18"

64 },

65 "scripts": {

66 "build": "vite build && tsc --emitDeclarationOnly && tsc -p tsconfig.node.json",

67 "test": "vitest run",

68 "prepublishOnly": "npm run build && npm test",

69 "test:watch": "vitest",

70 "postinstall": "node -e \"if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');\""

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L70

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L70

71 },

72 "dependencies": {

73 "@fastify/otel": "0.21.0",

74 "@opentelemetry/api": "^1.9.1",

75 "@opentelemetry/api-logs": "^0.221.0",

76 "@opentelemetry/auto-instrumentations-node": "^0.79.0",

77 "@opentelemetry/exporter-logs-otlp-http": "^0.221.0",

78 "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",

79 "@opentelemetry/instrumentation-express": "^0.69.0",

80 "@opentelemetry/instrumentation-http": "^0.221.0",

81 "@opentelemetry/resources": "^2.10.0",

82 "@opentelemetry/sdk-logs": "^0.221.0",

83 "@opentelemetry/sdk-node": "^0.221.0",

84 "@opentelemetry/semantic-conventions": "^1.43.0",

85 "rrweb": "^2.0.0-alpha.14"

86 },

87 "devDependencies": {

88 "@types/node": "^22.0.0",

89 "bullmq": "^6.3.10",

90 "fastify": "^5.12.5",

dist/node.cjsView file

Lines 1-28javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.SYSTEM_SPAN_NAME = exports.SystemSampler = exports.collectSystemSnapshot = exports

dist/index.jsView file

Lines 794-834javascript

794function St(e) {

795 const t = e.type;

796 return e.hasAttribute("data-rr-is-password") ? "password" : t

dist/cli.cjs#virtual:normalized:round1View file

23exports.main = main; L24: const node_child_process_1 = require("node:child_process"); L25: const node_fs_1 = __importDefault(require("node:fs")); ... L32: const next_setup_cjs_1 = require("./next-setup.cjs"); L33: exports.DEFAULT_API_BASE = "https://devreliaapi.tryrelia.com"; L34: exports.DEFAULT_OTLP_ENDPOINT = "https://devotel.tryrelia.com/v1/traces"; ... L42: try { L43: return JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.resolve(p), "utf8")); L44: } ... L55: }; L56: const AUTH_FILE_PATH = node_path_1.default.join(node_os_1.default.homedir(), ".relia", "auth.json"); L57: function getStoredCliAuth() {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.cjs#virtual:normalized:round1View on unpkg · L23

23Trigger-reachable chain: manifest.exports -> dist/cli.cjs L23: exports.main = main; L24: const node_child_process_1 = require("node:child_process"); L25: const node_fs_1 = __importDefault(require("node:fs")); ... L32: const next_setup_cjs_1 = require("./next-setup.cjs"); L33: exports.DEFAULT_API_BASE = "https://devreliaapi.tryrelia.com"; L34: exports.DEFAULT_OTLP_ENDPOINT = "https://devotel.tryrelia.com/v1/traces"; ... L42: try { L43: return JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.resolve(p), "utf8")); L44: } ... L55: }; L56: const AUTH_FILE_PATH = node_path_1.default.join(node_os_1.default.homedir(), ".relia", "auth.json"); L57: function getStoredCliAuth() {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.cjs#virtual:normalized:round1View on unpkg · L23

dist/auto.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/auto.cjs#virtual:normalized:round1View on unpkg

dist/node/middleware.cjsView file

•matchType = normalized_sha256 matchedPackage = relia-sdk@0.3.1 matchedPath = dist/node/middleware.cjs matchedIdentity = npm:cmVsaWEtc2Rr:0.3.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/node/middleware.cjsView on unpkg

dist/auto.cjsView file

•matchType = normalized_sha256 matchedPackage = relia-sdk@0.3.1 matchedPath = dist/auto.cjs matchedIdentity = npm:cmVsaWEtc2Rr:0.3.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/auto.cjsView on unpkg

dist/cli.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = relia-sdk@0.2.47 matchedIdentity = npm:cmVsaWEtc2Rr:0.2.47 similarity = 0.432 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if (require('fs').existsSync('./dist/postinstall.cjs')) require('./dist/postinstall.cjs');"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/node.cjsView file

8exports.start = start; L9: const auto_instrumentations_node_1 = require("@opentelemetry/auto-instrumentations-node"); L10: const exporter_trace_otlp_http_1 = require("@opentelemetry/exporter-trace-otlp-http");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/node.cjsView on unpkg · L8

Findings

4 Critical7 High4 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalCredential Exfiltrationdist/cli.cjs#virtual:normalized:round1

CriticalTrigger Reachable Dangerous Capabilitydist/cli.cjs#virtual:normalized:round1

CriticalPrevious Version Dangerous Deltadist/cli.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighBrowser Session Account Hijackdist/index.js

HighSandbox Evasion Gated Capabilitydist/cli.cjs#virtual:normalized:round1

HighTrigger Reachable Credential Exfiltrationdist/cli.cjs#virtual:normalized:round1

HighSemantic Analysis Limiteddist/auto.cjs#virtual:normalized:round1

HighKnown Malware Source Similaritydist/node/middleware.cjs

Affected versions and remediation

This report applies to relia-sdk@0.5.0.

See all versions of relia-sdk for other recorded verdicts.

Review the evidence and your use of relia-sdk@0.5.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-16 06:45:21.569Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.