totem-llm@0.13.0: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

totem-llm@0.13.0: Clean npm security report (Allow) | LPM Firewall

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with medium false-positive risk.

Evidence for block

server/.env contains a configured OpenRouter credential and provider default.
scripts/postinstall.mjs runs nested production dependency installation.

Evidence against

postinstall only installs server/collector dependencies and generates Prisma; it does not harvest files or alter agent controls.
bin/totem-llm.js starts setup/launch only after an explicit CLI invocation.
lib/setup.js writes only Totem's own storage/configuration directory.
Web-search requests use user-configured provider keys when the feature is invoked.
No foreign AI-agent config writes, stealth persistence, payload fetch/execute chain, or credential exfiltration was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 575 file(s), 8.54 MB of source, external domains: 0.0.0.0, 127.0.0.1, ai.gitee.com, anythingllm.com, api.bing.microsoft.com, api.cerebras.ai, api.cometapi.com, api.deepseek.com, api.example.com, api.fireworks.ai, api.github.com, api.groq.com, api.minimax.io, api.mistral.ai, api.moonshot.ai, api.novita.ai, api.openai.com, api.perplexity.ai, api.ppinfra.com, api.sambanova.ai, api.serply.io, api.tavily.com, api.telegram.org, api.together.xyz, api.x.ai, api.z.ai, apidoc.cometapi.com, apipie.ai, aws.amazon.com, cdn.anythingllm.com, cdn.deepseek.com, cdn.jsdelivr.net, cdnjs.cloudflare.com, cloud.baidu.com, cohere.com, console.perplexity.ai, debuginfod.ubuntu.com, developer.mozilla.org, docs.anythingllm.com, docs.github.com, docs.gitlab.com, docs.privatemode.ai, docs.z.ai, drupal-wiki.com, drupalwiki.mycompany.tld, exa.ai, example.atlassian.net, example.com, fb.me, fireworks.ai

Oversized source lightweight scan

server/public/index.js2.70 MB file, sampled 256 KB

NetworkHighEntropyStringsMinifiedTelemetryUrlStringsai.gitee.comapidoc.cometapi.comapipie.aiaws.amazon.comcdn.deepseek.comcohere.comdocs.privatemode.aidocs.z.aifireworks.aigroq.comhuggingface.colegal.mistral.ainovita.aiopenai.comopenrouter.aiplatform.minimax.ioplatform.moonshot.aipolicies.google.comprivacy.microsoft.comqdrant.techreactjs.orgsambanova.aiweaviate.iowww.anthropic.com

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

server/.envView file

2patternName = blocked_file severity = critical matchedText = server/.env redactedSecretContext = secretLikeLines = 5 L2: DATABASE_URL=<redacted:30 token-like> L3: JWT_SECRET=<redacted:85 token-like> L46: OLLAMA_MODEL_TOKEN_LIMIT=<redacted:4 value> L47: OLLAMA_AUTH_TOKEN=<redacted:90 token-like> L67: OPENROUTER_API_KEY=<redacted:73 token-like>

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/.envView on unpkg · L2

server/public/assets/ort.min-faca3c2b.jsView file

4* Licensed under the MIT License. L5: */var vd=Object.create,Pn=Object.defineProperty,_d=Object.getOwnPropertyDescriptor,Od=Object.getOwnPropertyNames,Id=Object.getPrototypeOf,Sd=Object.prototype.hasOwnProperty,L=(e,r)... L6: precision highp float;

High

Eval

Package source references dynamic code evaluation.

server/public/assets/ort.min-faca3c2b.jsView on unpkg · L4

collector/middleware/verifyIntegrity.jsView file

1const { CommunicationKey } = require("../utils/comKey"); L2: const RuntimeSettings = require("../utils/runtimeSettings");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

collector/middleware/verifyIntegrity.jsView on unpkg · L1

server/utils/agents/aibitat/plugins/web-browsing.jsView file

40parameters: { L41: $schema: "http://json-schema.org/draft-07/schema#", L42: type: "object", ... L157: _serpApi: async function (query) { L158: if (!process.env.AGENT_SERPAPI_API_KEY) { L159: this.super.introspect( ... L173: L174: const params = new URLSearchParams({ L175: engine: engine, ... L185: .then((res) => { L186: if (res.ok) return res.json(); L187: throw new Error(

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

server/utils/agents/aibitat/plugins/web-browsing.jsView on unpkg · L40

server/public/thinking-animation.webmView file

•path = server/public/thinking-animation.webm kind = high_entropy_blob sizeBytes = 227599 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

server/public/thinking-animation.webmView on unpkg

server/endpoints/system.jsView file

412patternName = generic_password severity = medium line = 412 matchedText = console....or);

Medium

Secret Pattern

Hardcoded password in server/endpoints/system.js

server/endpoints/system.jsView on unpkg · L412

Source & flagged code

8 flagged

package.jsonView file

Lines 39-79json

39 "setup": "cd server && yarn && cd ../collector && yarn && cd ../frontend && yarn && cd .. && yarn setup:envs && yarn prisma:setup && echo \"Please run yarn dev:server, yarn dev:collector, and yarn dev:frontend in separate terminal tabs.\"",

40 "setup:envs": "node scripts/setup-envs.mjs",

41 "dev:server": "cd server && yarn dev",

42 "dev:collector": "cd collector && yarn dev",

43 "dev:frontend": "cd frontend && yarn dev",

44 "dev:all": "npx concurrently \"yarn dev:server\" \"yarn dev:frontend\" \"yarn dev:collector\"",

45 "prisma:generate": "cd server && npx prisma generate",

46 "prisma:migrate": "cd server && npx prisma migrate dev --name init",

47 "prisma:seed": "cd server && npx prisma db seed",

48 "prisma:setup": "yarn prisma:generate && yarn prisma:migrate && yarn prisma:seed",

49 "prisma:reset": "node -e \"const{writeFileSync,existsSync}=require('fs');const p='server/storage/anythingllm.db';if(existsSync(p)){writeFileSync(p,'');console.log('Database cleared.')}\" && yarn prisma:migrate",

50 "prod:server": "cd server && yarn start",

51 "prod:frontend": "cd frontend && yarn build",

52 "generate:cloudformation": "node cloud-deployments/aws/cloudformation/generate.mjs",

53 "generate::gcp_deployment": "node cloud-deployments/gcp/deployment/generate.mjs",

54 "translations:verify": "cd frontend/src/locales && node verifyTranslations.mjs",

55 "translations:normalize": "cd frontend/src/locales && node normalizeEn.mjs && cd ../../.. && cd frontend && yarn lint && cd .. && yarn translations:verify",

56 "translations:prune": "cd frontend/src/locales && node findUnusedTranslations.mjs --delete && cd ../../../ && yarn translations:normalize",

57 "translations:create": "cd extras/translator && node index.mjs --all && cd ../../frontend && yarn lint && cd ../..",

58 "prepublishOnly": "node scripts/build-frontend.mjs",

59 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L59

60 "test:install": "node scripts/test-install.mjs"

61 },

62 "private": false,

63 "devDependencies": {

64 "@babel/core": "^8.0.1",

65 "@babel/preset-env": "^8.0.2",

66 "@commitlint/cli": "^21.2.1",

67 "@commitlint/config-conventional": "^21.2.0",

68 "@langchain/textsplitters": "^1.0.1",

69 "babel-jest": "^30.4.1",

70 "concurrently": "^9.1.2",

71 "dotenv": "^17.4.2",

72 "fix-path": "^5.0.0",

73 "jest": "^29.7.0",

74 "jsonwebtoken": "^9.0.3",

75 "lodash": "^4.18.1",

76 "pg": "^8.22.0",

77 "slugify": "^1.6.9",

78 "standard-version": "^9.5.0",

79 "uuid": "^14.0.1"

server/.envView file

Lines 1-22text

1SERVER_PORT=8686

2DATABASE_URL="file:../storage/anythingllm.db"

3JWT_SECRET="my-random-string-for-seeding" # Please generate random string at least 12 chars long.

Critical

Critical Secret

Package contains a critical-looking secret pattern.

server/.envView on unpkg · L2

4# JWT_EXPIRY="30d" # (optional) https://docs.anythingllm.com/configuration#custom-ttl-for-sessions

5SIG_KEY='passphrase' # Please generate random string at least 32 chars long.

6SIG_SALT='salt' # Please generate random string at least 32 chars long.

7STORAGE_DIR=./storage # absolute filesystem path with no trailing slash. This is where all data including vector db and file uploads will be stored. Must be writable by the server process.

8

9###########################################

server/public/assets/ort.min-faca3c2b.jsView file

4* Licensed under the MIT License. L5: */var vd=Object.create,Pn=Object.defineProperty,_d=Object.getOwnPropertyDescriptor,Od=Object.getOwnPropertyNames,Id=Object.getPrototypeOf,Sd=Object.prototype.hasOwnProperty,L=(e,r)... L6: precision highp float;

High

Eval

Package source references dynamic code evaluation.

server/public/assets/ort.min-faca3c2b.jsView on unpkg · L4

collector/middleware/verifyIntegrity.jsView file

Lines 1-21javascript

1const { CommunicationKey } = require("../utils/comKey");

2const RuntimeSettings = require("../utils/runtimeSettings");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

collector/middleware/verifyIntegrity.jsView on unpkg · L1

server/utils/agents/aibitat/plugins/web-browsing.jsView file

Lines 20-60javascript

20 .toString()

21 .replace(/\B(?=(\d{3})+(?!\d))/g, ","),

22 description:

23 "Search the internet for real-time information. Look online for current news, recent updates, latest changes, or any information not available locally. Browse the web to find answers about current events, prices, weather, or live data."

server/public/thinking-animation.webmView file

•path = server/public/thinking-animation.webm kind = high_entropy_blob sizeBytes = 227599 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

server/public/thinking-animation.webmView on unpkg

server/endpoints/system.jsView file

Lines 392-432javascript

392 );

393

394 app.post(

395 "/system/reset-password",

396 [isMultiUserSetup],

397 async (request, response) => {

398 try