registry / tina4-nodejs / 3.13.156
tina4-nodejs@3.13.156
Tina4 for Node.js/TypeScript - native TypeScript conventions and shared Tina4 contracts
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package lifecycle scripts build the workspaces, and the CLI does not dispatch commands on import. The flagged process execution and AI setup paths appear tied to dashboard analysis or user-selected setup; the source reviewed did not establish credential exfiltration or concealed payload execution.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No automatic malicious trigger was identified; setup requires a CLI action and selection.
Impact
No malicious impact identified.
Mechanism
The flagged process execution is used for framework metrics and optional AI setup; no credential exfiltration or concealed payload execution was established.
AI rationale
The package lifecycle scripts build the workspaces, and the CLI does not dispatch commands on import. The flagged process execution and AI setup paths appear tied to dashboard analysis or user-selected setup; the source reviewed did not establish credential exfiltration or concealed payload execution.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The prepare and prepublishOnly scripts run the workspace build; the manifest shows no install hook that sends data or runs a downloaded payload.
- The CLI dispatches commands only when invoked as the entrypoint, so importing it does not run a command.
- The AI setup flow prompts for a selection before performing installation actions.
- The metrics adapter runs the `tina4 metrics` command on a selected target for dashboard analysis.
Evidence against
- The package includes child-process execution and network-capable features, but the inspected paths tie them to framework functions and user-invoked setup or analysis.
- The CLI help text mentions a shell-based installer, but the inspected excerpt is a displayed instruction, not code that executes it.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
26 flaggedpackages/core/dist/index.jsView file
18let end = s.length;
L19: while (end > 0 && s.charCodeAt(end - 1) === SLASH) end--;
L20: return end === s.length ? s : s.slice(0, end);
...
L78: function warnEnv(message) {
L79: process.stderr.write(`[tina4] ${message}
L80: `);
...
L83: return value.replace(REFERENCE, (whole, name) => {
L84: const resolved = process.env[name] ?? parsed[name];
L85: if (resolved !== void 0) return resolved;
...
L533: }
L534: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L535: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
packages/core/dist/index.jsView on unpkg · L18•context = LockMode = 'Exclusive', @LockOwner = 'Session', @LockTimeout = -1`\n );\n return { kind: "mssql" };\n }\n } catch (err) {\n Log.debug(`DB migration lock unavailable (${engine}): ${err instanceof Error ? err.message : err}; using a file lock`);\n }\n return acquireFileLock(dir);\n}\nasync function acquireFileLock(dir) {\n const lockFile = join6(tmpdir(), `tina4-migration-${createHash2("sha256").update(resolve3(dir)).digest("hex")}.lock`);\n const deadline = Date.now() + 6e4;\n for (; ; ) {\n try {\n writeFileSync(lockFile, String(process.pid), { flag: "wx" });\n return { kind: "file", resource: lockFile };\n } catch (err) {\n if (err.code !== "EEXIST") {\n Log.debug(`file migration lock unavailable: ${err instanceof Error ? err.mes
Critical
Findings
4 Critical9 High16 Medium7 Low
CriticalCredential Exfiltrationpackages/core/dist/index.js
CriticalEncrypted Payload Temp Executionpackages/core/dist/index.js
CriticalTrigger Reachable Dangerous Capabilitypackages/core/dist/index.js
CriticalPrevious Version Dangerous Deltapackages/core/src/queueBackends/kafkaBackend.ts
HighChild Processpackages/core/dist/index.js
HighShell
HighCredential Redirect Persistencepackages/core/dist/index.js
HighCommand Output Exfiltrationpackages/core/dist/index.js
HighSandbox Evasion Gated Capabilitypackages/core/src/metrics.ts
HighCross File Remote Execution Contextpackages/cli/dist/bin.js
HighTrigger Reachable Credential Exfiltration
Affected versions and remediation
This report applies to tina4-nodejs@3.13.156.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.156 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.