registry / supermemory / 5.0.3
supermemory@5.0.3
⚠ Under reviewThe official TypeScript library for the Supermemory API
AI Security Review
scanned 10d ago · by lpm-firewall-aiInspected source shows a CLI and generated API client, with no install hook beyond a build-only prepublish script; the CLI’s usage telemetry has opt-out controls. Clean requires citations for 358 distinct paths, exceeding the 256-citation limit, and no independent source behavior supports a warning or block, so the result is manual review.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running a CLI command can trigger a telemetry event when telemetry is enabled.
Impact
The inspected event concerns CLI usage. The remaining required source coverage was not fully cited, so a clean verdict cannot be established under this review’s citation limit.
Mechanism
The CLI posts command and runtime properties with an anonymous identifier to its analytics endpoint; source settings provide opt-out controls.
AI rationale
Inspected source shows a CLI and generated API client, with no install hook beyond a build-only prepublish script; the CLI’s usage telemetry has opt-out controls. Clean requires citations for 358 distinct paths, exceeding the 256-citation limit, and no independent source behavior supports a warning or block, so the result is manual review.
Evidence
package.jsonbin/cli.mjsdist/esm/index.js
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a command-line tool and JavaScript library, with no preinstall, install, or postinstall hook.
- The CLI sends command usage events to its configured analytics service only when telemetry is enabled; environment and saved settings can disable it.
- The library entrypoint imports generated API client code and adds a profile request method.
Evidence against
- The manifest’s only publish lifecycle script runs the build.
- The CLI telemetry event contains command and runtime details, and its source provides opt-out controls.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
15 flaggedbin/cli.mjsView file
174791// ../mono/apps/cli/src/lib/local-server.ts
L174792: import { spawn } from "node:child_process";
L174793: import { constants as fsConstants } from "node:fs";
L174794: import { access, readFile } from "node:fs/promises";
L174795: import { get as httpsGet } from "node:https";
L174796: import { homedir as homedir2 } from "node:os";
...
L174802: var TAG_URL_RE = /\/releases\/tag\/server-v([0-9]+\.[0-9]+\.[0-9]+(?:-[A-Za-z0-9.]+)?)$/;
L174803: var INSTALL_URL = process.env.SUPERMEMORY_LOCAL_INSTALL_URL ?? "https://supermemory.ai/install";
L174804: var INSTALL_DIR = resolve4(process.env.SUPERMEMORY_INSTALL_DIR ?? join3(homedir2(), ".supermemory"));
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
bin/cli.mjsView on unpkg · L174791174781await runCommand(keysListCommand, { rawArgs });
L174782: process.stderr.write(`
L174783: ${source_default.dim("Available commands: list, create, revoke, toggle. Run supermemory keys --help for details.")}
...
L174791: // ../mono/apps/cli/src/lib/local-server.ts
L174792: import { spawn } from "node:child_process";
L174793: import { constants as fsConstants } from "node:fs";
L174794: import { access, readFile } from "node:fs/promises";
L174795: import { get as httpsGet } from "node:https";
L174796: import { homedir as homedir2 } from "node:os";
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
bin/cli.mjsView on unpkg · L174781Findings
5 Critical7 High6 Medium5 Low
CriticalSame File Env Network Executionbin/cli.mjs
CriticalCommand Output Exfiltrationbin/cli.mjs
CriticalDownload Executebin/cli.mjs
CriticalTrigger Reachable Dangerous Capabilitybin/cli.mjs
CriticalPrevious Version Dangerous Deltadist/cjs/generated/core/file/file.js
HighChild Processbin/cli.mjs
HighShellbin/cli.mjs
HighEntrypoint Build Divergencebin/cli.mjs
HighCredential Redirect Persistencebin/cli.mjs
HighSandbox Evasion Gated Capabilitybin/cli.mjs
HighTrigger Reachable Command Output Exfiltrationbin/cli.mjs
HighSemantic Analysis Limited
Affected versions and remediation
This report applies to supermemory@5.0.3.
See all versions of supermemory for other recorded verdicts.
- Review the evidence and your use of supermemory@5.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.