registry / ryugi-artifacts / 1.15.0
ryugi-artifacts@1.15.0
Server and viewer for the Ryugi artifacts app
AI Security Review
scanned 21h ago · by lpm-firewall-aiSource inspection found no install-time attack or malicious runtime behavior. The scanner similarity labels and bundled UI code did not establish an attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was identified; the CLI runs when a user invokes it.
Impact
No confirmed malicious impact was established.
Mechanism
Inspected CLI operations are user-invoked, and flagged browser files load application and library modules.
AI rationale
Source inspection found no install-time attack or malicious runtime behavior. The scanner similarity labels and bundled UI code did not establish an attack.
Decision evidence
public snapshotAI called this Clean at 78.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json defines only a prepublishOnly build hook; it contains no install-time lifecycle hook.
- The flagged browser files are bundled application, diagram, localization, and KaTeX modules; no malicious behavior was identified in the inspected source.
Evidence against
- The CLI can start a local server and make cloud requests when users invoke its commands; inspected behavior did not establish an unrequested credential transfer or other attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
12 flagged · loading sourcedist/cli.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = ryugi-artifacts@1.18.2
matchedIdentity = npm:cnl1Z2ktYXJ0aWZhY3Rz:1.18.2
similarity = 0.525
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.cjsView on unpkg26// src/cli/main.ts
L27: var import_node_child_process3 = require("node:child_process");
L28: var import_node_util = require("node:util");
High
26Cross-file remote execution chain: dist/cli.cjs spawns dist/server.cjs; helper contains network access plus dynamic code execution.
L26: // src/cli/main.ts
L27: var import_node_child_process3 = require("node:child_process");
L28: var import_node_util = require("node:util");
...
L145: }
L146: var invocation = () => process.env.RYUGI_ARTIFACTS_COMMAND || "ryugi-artifacts";
L147: var ARTIFACT_PATTERN = /^(artboard|document|html)\/[a-z0-9][a-z0-9-]*$/;
...
L167: const direct = (0, import_node_child_process.spawnSync)("ps", ["-ww", "-p", String(pid), "-o", "command="], { encoding: "utf8" });
L168: if (direct.status === 0 && direct.stdout.trim()) return direct.stdout.trim().split(/\s+/);
L169: const full = (0, import_node_child_process.spawnSync)("ps", ["-f", "-p", String(pid)], { encoding: "utf
Findings
2 Critical9 High4 Medium6 Low
CriticalTrojan Source Unicodedist/viewer/ku-TR-6OUDTVRD-B7qeFzlo.js
CriticalPrevious Version Dangerous Deltadist/cli.cjs
HighChild Processdist/cli.cjs
HighCross File Remote Execution Contextdist/cli.cjs
HighSemantic Analysis Limiteddist/cli.cjs#virtual:string-array:round1
HighKnown Malware Source Similaritydist/server.cjs
HighKnown Malware Source Similaritydist/viewer/chunk-GMAD6QVW-BPxTHMTi.js
HighKnown Malware Source Similaritydist/viewer/chunk-IMKFNOWR-CoST25Zy.js
HighKnown Malware Source Similaritydist/viewer/chunk-SHT3W25Y-D9pKJ6Au.js
HighKnown Malware Source Similaritydist/viewer/diagram-VX7I27RA-DRHmiAWI.js
Affected versions and remediation
This report applies to ryugi-artifacts@1.15.0.
See all versions of ryugi-artifacts for other recorded verdicts.
- Review the evidence and your use of ryugi-artifacts@1.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.