registry / ts-prorm-orm / 4.6.0
ts-prorm-orm@4.6.0
⚠ Under reviewA TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe credential-exfiltration scanner hint for dist/cli/core/io.js is not supported by that file’s inspected behavior. Clean publication cannot be established because the required clean-path citations exceed the 256-citation limit.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the passwordless query command or a CLI command using the file transfer helpers.
Impact
The inspected source does not establish credential theft or another confirmed attack surface.
Mechanism
The query command reads a local session file, signs a limited grant, and sends it with the requested query to the configured API; file helpers transfer a selected file to or from a supplied URL.
AI rationale
The credential-exfiltration scanner hint for dist/cli/core/io.js is not supported by that file’s inspected behavior. Clean publication cannot be established because the required clean-path citations exceed the 256-citation limit.
Decision evidence
public snapshotAI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest points consumers to dist/index.js and has a prepare hook that runs husky.
- The flagged CLI I/O source streams files to caller-supplied URLs and downloads from caller-supplied URLs; it does not read environment credentials.
- The passwordless query command is explicitly invoked, reads a local .klock, signs a short-lived grant, and sends that grant with the requested query.
- The query API destination can come from OUTH_API_URL, the .klock, or CLI configuration; the inspected source does not establish an attack recipient.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourcedist/schema-types.jsView file
31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL;
L32: const schema_objects_1 = require("./schema-objects");
L33: /**
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/schema-types.jsView on unpkg · L31dist/cli/core/io.jsView file
70const stream = fs.createReadStream(filePath);
L71: const res = await fetch(url, {
L72: method: 'PUT',
L73: // Node's fetch (undici) requires duplex for a stream body.
L74: body: stream_1.Readable.toWeb(stream),
L75: duplex: 'half',
...
L87: if (!res.body) {
L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer()));
L89: return;
...
L160: const g = (0, framework_1.getGlobalOptions)();
L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json;
L162: if (!active) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli/core/io.jsView on unpkg · L70dist/cli/basic/commands/packages.js#virtual:normalized:round1
Findings
1 Critical1 High4 Medium6 Low
CriticalCredential Exfiltrationdist/cli/core/io.js
HighSemantic Analysis Limiteddist/cli/basic/commands/packages.js#virtual:normalized:round1
MediumDynamic Requiredist/schema-types.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ts-prorm-orm@4.6.0.
See all versions of ts-prorm-orm for other recorded verdicts.
- Review the evidence and your use of ts-prorm-orm@4.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.