ryugi-artifacts@1.16.3

Server and viewer for the Ryugi artifacts app

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The manifest shows a build-only publish hook and no runtime self-dependency. The inspected CLI entrypoint and highlighted bundles did not establish malicious behavior; scanner similarity and coverage labels are not source proof.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Running the ryugi-artifacts CLI or loading its viewer.

Impact

No confirmed attack impact.

Mechanism

The package starts its application CLI and loads bundled viewer modules; no malicious execution or credential-transfer behavior was established in the reviewed paths.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 87.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes a CLI and has only a prepublishOnly build hook; it declares no install-time hook or runtime self-dependency.
The highlighted viewer files contain application, rendering, localization, and module-loading code. Searches found no matches for the checked execution, credential, or network primitives in those files; the similarity labels alone do not establish malicious behavior.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 603 file(s), 21.1 MB of source, external domains: 127.0.0.1, app.excalidraw.com, artifacts.local, avatars.githubusercontent.com, base-ui.com, chevrotain.io, discord.gg, docs.excalidraw.com, embed.reddit.com, en.wikipedia.org, esm.sh, excalidraw-room-persistence.firebaseio.com, giphy.com, gist.github.com, github.com, gravatar.com, json.excalidraw.com, langium.org, libraries.excalidraw.com, mermaid.js.org, oss-ai.excalidraw.com, oss-collab.excalidraw.com, platform.twitter.com, player.vimeo.com, plus.excalidraw.com, react.dev, reddit.com, registry.npmmirror.com, rolldown.rs, ryugi.innei.dev, twitter.com, unpkg.com, us-central1-excalidraw-room-persistence.cloudfunctions.net, www.figma.com, www.w3.org, www.youtube.com, x.com, youtube.com

Source & flagged code

13 flagged

dist/viewer/prod-BwoDeCVV.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/viewer/prod-BwoDeCVV.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/viewer/prod-BwoDeCVV.js

dist/viewer/prod-BwoDeCVV.jsView on unpkg · L2

dist/cli.cjsView file

Lines 6-46javascript

6var __getOwnPropNames = Object.getOwnPropertyNames;

7var __getProtoOf = Object.getPrototypeOf;

8var __hasOwnProp = Object.prototype.hasOwnProperty;

9var __copyProps = (to, from, except, desc) => {

10 if (from && typeof from === "object" || typeof from === "function") {

11 for (let key of __getOwnPropNames(from))

12 if (!__hasOwnProp.call(to, key) && key !== except)

13 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

14 }

15 return to;

16};

17var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

18 // If the importer is in node compatibility mode or this is not an ESM

19 // file that has been converted to a CommonJS file using a Babel-

20 // compatible transform (i.e. "__esModule" has not been set), then set

21 // "default" to the CommonJS "module.exports" for node compatibility.

22 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

23 mod

24));

26// src/cli/main.ts

27var import_node_child_process3 = require("node:child_process");

28var import_node_util = require("node:util");

High

Child Process

Package source references child process execution.

dist/cli.cjsView on unpkg · L26

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.cjsView on unpkg · L26

30// src/cli/comment.ts

31var import_node_fs3 = __toESM(require("node:fs"), 1);

33// src/server/agent.ts

34var NAMES = {

35 claude: "Claude Code",

36 "claude-code": "Claude Code",

37 cowork: "Claude Cowork",

38 codex: "Codex",

39 cursor: "Cursor",

40 "cursor-cli": "Cursor",

41 gemini: "Gemini CLI",

42 "gemini-cli": "Gemini CLI",

43 "github-copilot": "GitHub Copilot",

44 "github-copilot-cli": "GitHub Copilot",

45 kilo: "Kilo Code",

46 opencode: "OpenCode",

•matchType = previous_version_dangerous_delta matchedPackage = ryugi-artifacts@1.16.1 matchedIdentity = npm:cnl1Z2ktYXJ0aWZhY3Rz:1.16.1 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

dist/viewer/ku-TR-6OUDTVRD-Da2ny9hc.jsView file

Lines 1-9javascript

1import"./prod-BwoDeCVV.js";var e={paste:`دانانەوە`,pasteAsPlaintext:`دایبنێ وەک دەقی سادە`,pasteCharts:`دانانەوەی خشتەکان`,selectAll:`دیاریکردنی هەموو`,multiSelect:`زیادکردنی بۆ دیاریکراوەکان`,moveCanvas:`تابلۆ بجوڵێنە`,cut:`بڕین`,copy:`لەبەرگرتنەوە`,copyAsPng:`PNGلەبەرگرتنەوە بۆ تەختەنووس وەک`,copyAsSvg:`SVGلەبەرگرتنەوە بۆ تەختەنووس وەک`

dist/viewer/DocumentLayout-DcJ5nr3S.jsView file

•path = dist/viewer/DocumentLayout-DcJ5nr3S.js kind = oversized_source_file sizeBytes = 7439915 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/viewer/DocumentLayout-DcJ5nr3S.jsView on unpkg

dist/cli.cjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli.cjs#virtual:string-array:round1View on unpkg

dist/server.cjsView file

•matchType = normalized_sha256 matchedPackage = ryugi-artifacts@1.13.0 matchedPath = dist/server.cjs matchedIdentity = npm:cnl1Z2ktYXJ0aWZhY3Rz:1.13.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High