registry / tina4-nodejs / 3.13.152
tina4-nodejs@3.13.152
Tina4 for Node.js/TypeScript - native TypeScript conventions and shared Tina4 contracts
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection supports ordinary build, framework, and explicitly invoked setup behavior. The flagged scanner labels are not substantiated by the inspected source excerpts as a concrete attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the AI context CLI command or calls the MCP configuration helper.
Impact
The inspected behavior does not establish unauthorized credential transfer, payload execution, or automatic agent configuration changes.
Mechanism
The CLI writes selected context files and can fetch Tina4 skills; the MCP helper writes a project-local server entry pointing to localhost.
AI rationale
Source inspection supports ordinary build, framework, and explicitly invoked setup behavior. The flagged scanner labels are not substantiated by the inspected source excerpts as a concrete attack.
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes framework and CLI entrypoints; its prepare and prepublishOnly scripts run the build.
- AI context installation is reached through a CLI command that offers a selection menu or installs all only when the user passes --all; the AI tool list names its target configuration files.
- The MCP helper writes a project .claude/settings.json entry for a localhost server when called; the inspected code does not establish an automatic install-time configuration change.
- The inspected AI client and distribution code select named providers and use TINA4_AI_KEY for configured remote providers; the browser client attaches its stored token only when authentication is enabled and its URL passes the same-origin or configured API-origin check.
- The reviewed distribution and source paths show framework, database, routing, session, queue, and development-admin components; no concrete credential theft or payload execution was established in the inspected excerpts.
Evidence against
Behavioral surface
ChildProcessCrypto
Source & flagged code
26 flaggedpackages/core/dist/index.jsView file
18let end = s.length;
L19: while (end > 0 && s.charCodeAt(end - 1) === SLASH) end--;
L20: return end === s.length ? s : s.slice(0, end);
...
L78: function warnEnv(message) {
L79: process.stderr.write(`[tina4] ${message}
L80: `);
...
L83: return value.replace(REFERENCE, (whole, name) => {
L84: const resolved = process.env[name] ?? parsed[name];
L85: if (resolved !== void 0) return resolved;
...
L533: }
L534: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L535: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
packages/core/dist/index.jsView on unpkg · L18•context = LockMode = 'Exclusive', @LockOwner = 'Session', @LockTimeout = -1`\n );\n return { kind: "mssql" };\n }\n } catch (err) {\n Log.debug(`DB migration lock unavailable (${engine}): ${err instanceof Error ? err.message : err}; using a file lock`);\n }\n return acquireFileLock(dir);\n}\nasync function acquireFileLock(dir) {\n const lockFile = join6(tmpdir(), `tina4-migration-${createHash2("sha256").update(resolve3(dir)).digest("hex")}.lock`);\n const deadline = Date.now() + 6e4;\n for (; ; ) {\n try {\n writeFileSync(lockFile, String(process.pid), { flag: "wx" });\n return { kind: "file", resource: lockFile };\n } catch (err) {\n if (err.code !== "EEXIST") {\n Log.debug(`file migration lock unavailable: ${err instanceof Error ? err.mes
Critical
Findings
4 Critical9 High16 Medium7 Low
CriticalCredential Exfiltrationpackages/core/dist/index.js
CriticalEncrypted Payload Temp Executionpackages/core/dist/index.js
CriticalTrigger Reachable Dangerous Capabilitypackages/core/dist/index.js
CriticalPrevious Version Dangerous Deltapackages/cli/src/bin.ts
HighChild Processpackages/core/dist/index.js
HighShell
HighCredential Redirect Persistencepackages/core/dist/index.js
HighCommand Output Exfiltrationpackages/core/dist/index.js
HighSandbox Evasion Gated Capabilitypackages/core/src/metrics.ts
HighCross File Remote Execution Contextpackages/cli/dist/bin.js
HighTrigger Reachable Credential Exfiltration
Affected versions and remediation
This report applies to tina4-nodejs@3.13.152.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.152 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.