registry / supermemory / 5.0.2
supermemory@5.0.2
The official TypeScript library for the Supermemory API
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe manifest contains only a prepublish build hook, not an install-time hook. The scanner’s execution and network indicators correspond to CLI functionality, configured API authentication, and configurable usage telemetry; no concrete attack behavior was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes a CLI command, including login or an API-backed operation.
Impact
No malicious effect was identified in the inspected source.
Mechanism
The CLI authenticates to its configured API URL; optional usage telemetry sends command and runtime metadata to PostHog and can be disabled in user configuration.
AI rationale
The manifest contains only a prepublish build hook, not an install-time hook. The scanner’s execution and network indicators correspond to CLI functionality, configured API authentication, and configurable usage telemetry; no concrete attack behavior was established.
Evidence
package.jsonbin/cli.mjs
Network endpoints3
api.supermemory.aiconsole.supermemory.aius.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a prepublishOnly build command and no install lifecycle hook.
- The CLI defaults its API URL to api.supermemory.ai and supports an operator-configured URL.
- CLI API requests send the configured API key to the configured API URL; login validates a key against that URL.
- Usage telemetry can be disabled in user configuration and sends command and runtime metadata to PostHog.
- Telemetry begins after a CLI command is selected for execution.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Oversized source lightweight scan
Source & flagged code
13 flaggedbin/cli.mjsView file
174667// ../mono/apps/cli/src/lib/local-server.ts
L174668: import { spawn } from "node:child_process";
L174669: import { constants as fsConstants } from "node:fs";
L174670: import { access, readFile } from "node:fs/promises";
L174671: import { get as httpsGet } from "node:https";
L174672: import { homedir as homedir2 } from "node:os";
...
L174678: var TAG_URL_RE = /\/releases\/tag\/server-v([0-9]+\.[0-9]+\.[0-9]+(?:-[A-Za-z0-9.]+)?)$/;
L174679: var INSTALL_URL = process.env.SUPERMEMORY_LOCAL_INSTALL_URL ?? "https://supermemory.ai/install";
L174680: var INSTALL_DIR = resolve4(process.env.SUPERMEMORY_INSTALL_DIR ?? join3(homedir2(), ".supermemory"));
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
bin/cli.mjsView on unpkg · L174667174657await runCommand(keysListCommand, { rawArgs });
L174658: process.stderr.write(`
L174659: ${source_default.dim("Available commands: list, create, revoke, toggle. Run supermemory keys --help for details.")}
...
L174667: // ../mono/apps/cli/src/lib/local-server.ts
L174668: import { spawn } from "node:child_process";
L174669: import { constants as fsConstants } from "node:fs";
L174670: import { access, readFile } from "node:fs/promises";
L174671: import { get as httpsGet } from "node:https";
L174672: import { homedir as homedir2 } from "node:os";
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
bin/cli.mjsView on unpkg · L174657Findings
4 Critical7 High5 Medium5 Low
CriticalSame File Env Network Executionbin/cli.mjs
CriticalCommand Output Exfiltrationbin/cli.mjs
CriticalDownload Executebin/cli.mjs
CriticalTrigger Reachable Dangerous Capabilitybin/cli.mjs
HighChild Processbin/cli.mjs
HighShellbin/cli.mjs
HighEntrypoint Build Divergencebin/cli.mjs
HighCredential Redirect Persistencebin/cli.mjs
HighSandbox Evasion Gated Capabilitybin/cli.mjs
HighTrigger Reachable Command Output Exfiltrationbin/cli.mjs
HighSemantic Analysis Limitedbin/cli.mjs
MediumNetwork
Medium
Affected versions and remediation
This report applies to supermemory@5.0.2.
See all versions of supermemory for other recorded verdicts.
- Review the evidence and your use of supermemory@5.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.