registry / tina4-nodejs / 3.13.154
tina4-nodejs@3.13.154
Tina4 for Node.js/TypeScript - native TypeScript conventions and shared Tina4 contracts
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection did not substantiate the scanner’s malicious labels. The highlighted behaviors resolve to build hooks, explicitly invoked setup helpers, gated MCP access, and ordinary framework and database functionality.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
No malicious trigger was found; the setup helpers require explicit invocation.
Impact
No malicious impact was identified.
Mechanism
No malicious mechanism was established. Inspected network and file operations support configured AI providers, database adapters, and local development tools.
AI rationale
Source inspection did not substantiate the scanner’s malicious labels. The highlighted behaviors resolve to build hooks, explicitly invoked setup helpers, gated MCP access, and ordinary framework and database functionality.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest’s `prepare` and `prepublishOnly` scripts run the build.
- AI context changes are made by setup helpers reached through the CLI’s explicit install command.
- The MCP settings helper writes a local server entry; remote MCP access requires explicit enablement and a valid token.
- AI provider keys and endpoints are configured for standard providers or caller-supplied settings; inspected database code uses configured database URLs and adapters.
- The MCP environment listing redacts values whose names indicate secrets, passwords, tokens, keys, or credentials.
- Inspected source describes project context indexing, API documentation, queue backends, routing, sessions, metrics, and database functionality; no malicious behavior was identified.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
25 flaggedpackages/core/dist/index.jsView file
18let end = s.length;
L19: while (end > 0 && s.charCodeAt(end - 1) === SLASH) end--;
L20: return end === s.length ? s : s.slice(0, end);
...
L78: function warnEnv(message) {
L79: process.stderr.write(`[tina4] ${message}
L80: `);
...
L83: return value.replace(REFERENCE, (whole, name) => {
L84: const resolved = process.env[name] ?? parsed[name];
L85: if (resolved !== void 0) return resolved;
...
L533: }
L534: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L535: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
packages/core/dist/index.jsView on unpkg · L18•context = LockMode = 'Exclusive', @LockOwner = 'Session', @LockTimeout = -1`\n );\n return { kind: "mssql" };\n }\n } catch (err) {\n Log.debug(`DB migration lock unavailable (${engine}): ${err instanceof Error ? err.message : err}; using a file lock`);\n }\n return acquireFileLock(dir);\n}\nasync function acquireFileLock(dir) {\n const lockFile = join6(tmpdir(), `tina4-migration-${createHash2("sha256").update(resolve3(dir)).digest("hex")}.lock`);\n const deadline = Date.now() + 6e4;\n for (; ; ) {\n try {\n writeFileSync(lockFile, String(process.pid), { flag: "wx" });\n return { kind: "file", resource: lockFile };\n } catch (err) {\n if (err.code !== "EEXIST") {\n Log.debug(`file migration lock unavailable: ${err instanceof Error ? err.mes
Critical
Findings
3 Critical9 High16 Medium7 Low
CriticalCredential Exfiltrationpackages/core/dist/index.js
CriticalEncrypted Payload Temp Executionpackages/core/dist/index.js
CriticalTrigger Reachable Dangerous Capabilitypackages/core/dist/index.js
HighChild Processpackages/core/dist/index.js
HighShell
HighCredential Redirect Persistencepackages/core/dist/index.js
HighCommand Output Exfiltrationpackages/core/dist/index.js
HighSandbox Evasion Gated Capabilitypackages/core/src/metrics.ts
HighCross File Remote Execution Contextpackages/cli/dist/bin.js
HighTrigger Reachable Credential Exfiltrationpackages/core/dist/index.js
HighRuntime Package Install
Affected versions and remediation
This report applies to tina4-nodejs@3.13.154.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.154 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.