tina4-nodejs@3.13.135
Tina4 for Node.js/TypeScript - native TypeScript conventions and shared Tina4 contracts
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious package behavior was found, but the reachable debug endpoint is a dangerous project-mutation capability. Treat it as a security warning rather than a publish-blocking malware finding.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller sends a POST request to /__dev/api/deps/install on a server started with TINA4_DEBUG enabled.
Impact
A reachable development dashboard could be abused to alter project dependencies and run their lifecycle code.
Mechanism
Caller-controlled npm installation in the current project directory.
AI rationale
No concrete malicious package behavior was found, but the reachable debug endpoint is a dangerous project-mutation capability. Treat it as a security warning rather than a publish-blocking malware finding.
Evidence
packages/core/src/server.tspackages/core/src/devAdmin.tspackage.jsonnode_modules
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- A debug-only HTTP endpoint runs npm install for a caller-supplied package in the current project.
- The server registers the full development administration surface when TINA4_DEBUG is enabled.
- The manifest prepare hook only runs the package build and does not install another package.
Evidence against
- No install, preinstall, or postinstall hook is present.
- The reviewed AI client sends configured credentials only to the selected provider URL; its defaults are official OpenAI and Anthropic hosts.
- No self-dependency, hidden payload, or automatic Claude configuration call was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
25 flaggedpackages/core/dist/index.jsView file
14function warnEnv(message) {
L15: process.stderr.write(`[tina4] ${message}
L16: `);
...
L19: return value.replace(REFERENCE, (whole, name) => {
L20: const resolved = process.env[name] ?? parsed[name];
L21: if (resolved !== void 0) return resolved;
...
L245: try {
L246: return new TextDecoder("utf-8", { fatal: true }).decode(buf);
L247: } catch {
...
L504: }
L505: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L506: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
packages/core/dist/index.jsView on unpkg · L1414Trigger-reachable chain: manifest.main -> packages/core/dist/index.js
L14: function warnEnv(message) {
L15: process.stderr.write(`[tina4] ${message}
L16: `);
...
L19: return value.replace(REFERENCE, (whole, name) => {
L20: const resolved = process.env[name] ?? parsed[name];
L21: if (resolved !== void 0) return resolved;
...
L245: try {
L246: return new TextDecoder("utf-8", { fatal: true }).decode(buf);
L247: } catch {
...
L504: }
L505: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L506: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical10 High16 Medium6 Low
CriticalCredential Exfiltrationpackages/core/dist/index.js
CriticalTrigger Reachable Dangerous Capabilitypackages/core/dist/index.js
HighChild Processpackages/core/dist/index.js
HighShell
HighSame File Env Network Executionpackages/core/dist/index.js
HighCredential Redirect Persistencepackages/core/dist/index.js
HighCommand Output Exfiltrationpackages/core/dist/index.js
HighSandbox Evasion Gated Capabilitypackages/core/src/metrics.ts
HighCross File Remote Execution Contextpackages/cli/dist/bin.js
HighTrigger Reachable Credential Exfiltrationpackages/core/dist/index.js
HighRuntime Package Installpackages/core/src/devAdmin.ts
Affected versions and remediation
This report applies to tina4-nodejs@3.13.135.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.135 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.