registry / semanticdb / 0.3.1

semanticdb@0.3.1

A database which has the common knowledge

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Calling the exported start method can activate hidden, machine-specific behavior. Separately, processing a user-defined function evaluates its function text as code.

Static reason

One or more suspicious static signals were detected.

Trigger

A caller invokes start on the matching machine, or attacker-controlled user-defined function data is processed.

Impact

An attacker able to control the evaluated function field can run arbitrary code in the host process.

Mechanism

Machine-gated initialization and direct evaluation of function strings.

Attack narrative

The package hides its logic through a large encoded string table and gates startup on a specific machine identifier and date. Its data-processing path directly evaluates a function field from a user-defined function object. That turns control of this stored configuration into code execution in the consuming application's process. The hidden targeting and obfuscation make this capability unsafe to publish.

AI rationale

The package contains a concrete runtime code-execution sink plus concealed machine-targeted behavior. Although it has no install hook, the exposed runtime path presents a material host-compromise risk.

Evidence

semanticdb.min.js

Decision evidence

public snapshot

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

semanticdb@0.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code