tina4-nodejs@3.13.112
Tina4 for Node.js/TypeScript - native TypeScript conventions and shared Tina4 contracts
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource confirms an explicit-user-command AI-agent mutation capability, not autonomous credential theft or install-time execution. Per policy, this warrants a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs `tina4nodejs ai` and selects Claude, or uses `--all`.
Impact
Remote content can influence Claude/Codex project workflows; the global Claude write extends this beyond the selected project.
Mechanism
Explicit remote AI-skill download and assistant-context mutation.
AI rationale
Source confirms an explicit-user-command AI-agent mutation capability, not autonomous credential theft or install-time execution. Per policy, this warrants a warning rather than a publish block.
Evidence
package.jsonpackages/cli/src/bin.tspackages/core/src/ai.tspackages/core/dist/index.jspackages/cli/dist/bin.jsAGENTS.mdCLAUDE.md.claude/skills~/.claude/skills
Network endpoints1
raw.githubusercontent.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Explicit `tina4nodejs ai` command installs AI context files.
- Claude selection downloads remote skills into project and global `~/.claude/skills`.
- The installer targets Codex `AGENTS.md` among other assistant context files.
Evidence against
- No preinstall/install/postinstall hook; `prepare` only builds workspaces.
- AI mutation requires an explicit CLI command and is not import-time behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
20 flaggedpackages/cli/dist/bin.jsView file
46296patternName = generic_password
severity = medium
line = 46296
matchedText = const re... });
Medium
Secret Pattern
Package contains a possible secret pattern.
packages/cli/dist/bin.jsView on unpkg · L4629646299patternName = generic_password
severity = medium
line = 46299
matchedText = const du... });
Medium
Secret Pattern
Hardcoded password in packages/cli/dist/bin.js
packages/cli/dist/bin.jsView on unpkg · L4629946302patternName = generic_password
severity = medium
line = 46302
matchedText = const lo... });
Medium
Secret Pattern
Hardcoded password in packages/cli/dist/bin.js
packages/cli/dist/bin.jsView on unpkg · L46302packages/core/dist/index.jsView file
Findings
3 Critical10 High10 Medium6 Low
CriticalCredential Exfiltrationpackages/core/dist/index.js
CriticalTrigger Reachable Dangerous Capabilitypackages/core/dist/index.js
CriticalPrevious Version Dangerous Deltapackages/core/src/server.ts
HighChild Processpackages/core/dist/index.js
HighShell
HighSame File Env Network Executionpackages/core/dist/index.js
HighCredential Redirect Persistencepackages/core/dist/index.js
HighEntrypoint Foreign Package Code Overwritepackages/core/dist/index.js
HighCommand Output Exfiltrationpackages/core/dist/index.js
HighSandbox Evasion Gated Capabilitypackages/core/src/metrics.ts
HighCross File Remote Execution Context
Affected versions and remediation
This report applies to tina4-nodejs@3.13.112.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.112 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.