registry / ryugi-artifacts / 1.18.2
ryugi-artifacts@1.18.2
Server and viewer for the Ryugi artifacts app
AI Security Review
scanned 19h ago · by lpm-firewall-aiThe manifest has no consumer install hook; its prepublishOnly hook builds the package. The flagged bundles resolve to viewer and diagram functionality, and the inspected CLI and server code showed no concrete attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user invokes the CLI to start the server or perform a selected cloud action.
Impact
No malicious effect was identified.
Mechanism
The CLI reads project-local server state and sends requests through that server; the server defaults to loopback. Viewer bundles provide rendering and diagram functionality.
AI rationale
The manifest has no consumer install hook; its prepublishOnly hook builds the package. The flagged bundles resolve to viewer and diagram functionality, and the inspected CLI and server code showed no concrete attack behavior.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- package.json defines prepublishOnly as a build step. The CLI reads its server URL from project state, and publish actions follow explicit CLI options; the server defaults to loopback.
- The inspected viewer bundles contain rendering, parsing, and diagram code, including KaTeX parsing and Wardley-map coordinate validation. No malicious collection or execution behavior was identified in these flagged assets.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
11 flagged · loading sourcedist/cli.cjsView file
26// src/cli/main.ts
L27: var import_node_child_process3 = require("node:child_process");
L28: var import_node_util = require("node:util");
High
26Cross-file remote execution chain: dist/cli.cjs spawns dist/server.cjs; helper contains network access plus dynamic code execution.
L26: // src/cli/main.ts
L27: var import_node_child_process3 = require("node:child_process");
L28: var import_node_util = require("node:util");
...
L145: }
L146: var invocation = () => process.env.RYUGI_ARTIFACTS_COMMAND || "ryugi-artifacts";
L147: var ARTIFACT_PATTERN = /^(artboard|document|html)\/[a-z0-9][a-z0-9-]*$/;
...
L167: const direct = (0, import_node_child_process.spawnSync)("ps", ["-ww", "-p", String(pid), "-o", "command="], { encoding: "utf8" });
L168: if (direct.status === 0 && direct.stdout.trim()) return direct.stdout.trim().split(/\s+/);
L169: const full = (0, import_node_child_process.spawnSync)("ps", ["-f", "-p", String(pid)], { encoding: "utf
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/cli.cjsView on unpkg · L26dist/viewer/ku-TR-6OUDTVRD-CctJtizJ.jsView file
Findings
2 Critical8 High4 Medium6 Low
CriticalTrojan Source Unicodedist/viewer/ku-TR-6OUDTVRD-CctJtizJ.js
CriticalPrevious Version Dangerous Deltadist/viewer/wardleyDiagram-VM6X3IG4-B4FxaO_K.js
HighChild Processdist/cli.cjs
HighCross File Remote Execution Contextdist/cli.cjs
HighSemantic Analysis Limiteddist/cli.cjs#virtual:string-array:round1
HighKnown Malware Source Similaritydist/server.cjs
HighKnown Malware Source Similaritydist/viewer/chunk-GMAD6QVW-COZQExf-.js
HighKnown Malware Source Similaritydist/viewer/chunk-IMKFNOWR-DoSmXTi7.js
HighKnown Malware Source Similaritydist/viewer/chunk-SHT3W25Y-Bo8j1N02.js
HighKnown Malware Source Similaritydist/viewer/diagram-VX7I27RA-VRK1Xx-r.js
Affected versions and remediation
This report applies to ryugi-artifacts@1.18.2.
See all versions of ryugi-artifacts for other recorded verdicts.
- Review the evidence and your use of ryugi-artifacts@1.18.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.