registry / superlocalmemory / 4.1.9
superlocalmemory@4.1.9
Local-first agent memory with MCP and an agent-native CLI. Documented clients include Claude Code, Cursor, and Windsurf.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe automatic lifecycle behavior is limited in the inspected source to installing this package into a private runtime inside its own package directory. The flagged hooks dispatch user-facing memory commands, and the inspected destructive reset path requires confirmation; no concrete malicious behavior was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm postinstall runs the runtime installer; individual memory actions run when their corresponding hook or command is invoked.
Impact
The inspected behavior supports package setup and user-requested memory operations; no confirmed attack effect was established.
Mechanism
The installer creates a virtual environment under the package directory and installs from that directory. The hooks pass arguments to the local memory CLI; reset prompts before destructive actions.
AI rationale
The automatic lifecycle behavior is limited in the inspected source to installing this package into a private runtime inside its own package directory. The flagged hooks dispatch user-facing memory commands, and the inspected destructive reset path requires confirmation; no concrete malicious behavior was found.
Evidence
package.jsonscripts/postinstall.jsscripts/postinstall-interactive.jside/hooks/memory-list-skill.jside/hooks/memory-profile-skill.jside/hooks/memory-recall-skill.jside/hooks/memory-remember-skill.jside/hooks/memory-reset-skill.jssrc/superlocalmemory/ui/vendor/graphology-library.min.js
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The npm postinstall runs the package installer; it creates a Python environment inside the package and pip-installs from that package directory.
- The interactive configurator runs only when invoked directly.
- The flagged memory hooks pass their requested list, profile, recall, or remember action to the package CLI; reset requires explicit confirmation for full deletion.
- The vendor JavaScript begins with a standard UMD module wrapper.
Evidence against
- No inspected source showed credential collection, exfiltration, remote code loading, or writes to a foreign agent configuration surface.
- The installer targets a package-owned runtime, while destructive reset actions require user confirmation.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
13 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/superlocalmemory/ui/vendor/d3.v7.min.jsView file
1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock
L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...
Low
Eval
Package source references a known benign dynamic code generation pattern.
src/superlocalmemory/ui/vendor/d3.v7.min.jsFindings
9 High6 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedscripts/postinstall-interactive.js#virtual:normalized:round1
HighKnown Malware Source Similarityide/hooks/memory-list-skill.js
HighKnown Malware Source Similarityide/hooks/memory-profile-skill.js
HighKnown Malware Source Similarityide/hooks/memory-recall-skill.js
HighKnown Malware Source Similarityide/hooks/memory-remember-skill.js
HighKnown Malware Source Similarityide/hooks/memory-reset-skill.js
HighKnown Malware Source Similaritysrc/superlocalmemory/ui/vendor/graphology-library.min.js
HighPrevious Version Dangerous Deltascripts/postinstall.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Affected versions and remediation
This report applies to superlocalmemory@4.1.9.
See all versions of superlocalmemory for other recorded verdicts.
- Review the evidence and your use of superlocalmemory@4.1.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.