registry / superlocalmemory / 4.1.11
superlocalmemory@4.1.11
Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.
AI Security Review
scanned 14d ago · by lpm-firewall-aiSource inspection shows package-scoped runtime setup, an uninstall notice, and user-invoked CLI wrappers with confirmation for destructive reset. The scanner similarity and API hints did not establish malicious behavior in the inspected source.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm runs the package postinstall lifecycle hook; individual hook wrappers run when explicitly invoked as CLI commands.
Impact
The inspected behavior provisions the package runtime and operates on user-requested memory commands; no confirmed credential theft, exfiltration, or foreign agent configuration mutation was established.
Mechanism
Postinstall creates a virtual environment within the package and installs the package into that runtime. CLI wrappers pass arguments to Python through execFile argument arrays, while destructive reset requires confirmation.
AI rationale
Source inspection shows package-scoped runtime setup, an uninstall notice, and user-invoked CLI wrappers with confirmation for destructive reset. The scanner similarity and API hints did not establish malicious behavior in the inspected source.
Evidence
scripts/postinstall.jsscripts/preuninstall.jsscripts/postinstall-interactive.jside/hooks/memory-list-skill.jside/hooks/memory-profile-skill.jside/hooks/memory-recall-skill.jside/hooks/memory-remember-skill.jside/hooks/memory-reset-skill.jssrc/superlocalmemory/ui/vendor/graphology-library.min.js
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json routes automatic lifecycle hooks to the reviewed scripts/postinstall.js and scripts/preuninstall.js.
- The postinstall script creates a private Python virtual environment inside the package directory and installs the package into it.
- The profile configurator is invoked explicitly by the CLI; it is not an npm lifecycle hook.
- Flagged CLI wrappers invoke Python with argument arrays, and reset prompts for confirmation before destructive work.
- The inspected vendor bundle excerpt contains only its source-map marker; no malicious behavior was established from scanner similarity hints.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
CopyleftLicense
Source & flagged code
13 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/superlocalmemory/ui/vendor/d3.v7.min.jsView file
1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock
L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/superlocalmemory/ui/vendor/d3.v7.min.jsFindings
9 High6 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedscripts/postinstall-interactive.js#virtual:normalized:round1
HighKnown Malware Source Similarityide/hooks/memory-list-skill.js
HighKnown Malware Source Similarityide/hooks/memory-profile-skill.js
HighKnown Malware Source Similarityide/hooks/memory-recall-skill.js
HighKnown Malware Source Similarityide/hooks/memory-remember-skill.js
HighKnown Malware Source Similarityide/hooks/memory-reset-skill.js
HighKnown Malware Source Similaritysrc/superlocalmemory/ui/vendor/graphology-library.min.js
HighPrevious Version Dangerous Deltascripts/postinstall.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Affected versions and remediation
This report applies to superlocalmemory@4.1.11.
See all versions of superlocalmemory for other recorded verdicts.
- Review the evidence and your use of superlocalmemory@4.1.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.