ts-prorm-orm@4.8.0

⚠ Under review

A TypeScript ORM for MySQL, PostgreSQL, SQLite, MSSQL, and more

AI Security Review

scanned 23h ago · by lpm-firewall-ai

The inspected source does not substantiate the scanner’s credential-exfiltration claim, and the manifest’s lifecycle hooks appear build and Husky related. The required clean citation set exceeds the citation limit, leaving broad runtime coverage unresolved; manual review is appropriate.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The inspected upload helper is called by a CLI operation with a file path and URL; no caller was found in the inspected CLI tree.

Impact

No confirmed attack impact; broader package behavior remains unresolved.

Mechanism

The helper streams the selected file to the supplied URL; inspected code did not show credential collection or a package-selected recipient.

AI rationale

Evidence

package.jsondist/cli/core/io.jsdist/cli/core/cloud.jsdist/index.js

Decision evidence

public snapshot

AI called this Manual Review at 68.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest identifies a database ORM and its prepare hook runs Husky; prepublishOnly runs build and package checks.
The flagged I/O helper streams a caller-specified file to a caller-specified URL, with no credential or environment-variable handling in the inspected transfer code.
The requested clean citation coverage exceeds the 256-citation limit, so the full required source set could not be certified.

Evidence against

The scanner’s credential-exfiltration hint is not supported by the inspected I/O helper: its upload body is a file stream, and the download helper fetches the provided URL. The review did not establish a package-selected credential recipient.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

Source & flagged code

3 flagged

dist/schema-types.jsView file

Lines 11-51javascript

11 * actually need — adding a value to a live enum.

12 *

13 * Values reaching SQL here are literals, not identifiers: an enum's members, a

14 * comment's text, a domain's default. Each goes through {@link quoteLiteral}

15 * rather than being interpolated.

16 */

17Object.defineProperty(exports, "__esModule", { value: true });

18exports.quoteLiteral = quoteLiteral;

19exports.buildCreateExtensionSQL = buildCreateExtensionSQL;

20exports.buildDropExtensionSQL = buildDropExtensionSQL;

21exports.buildCreateEnumSQL = buildCreateEnumSQL;

22exports.buildAddEnumValueSQL = buildAddEnumValueSQL;

23exports.buildRenameEnumValueSQL = buildRenameEnumValueSQL;

24exports.buildDropEnumSQL = buildDropEnumSQL;

25exports.buildCreateDomainSQL = buildCreateDomainSQL;

26exports.buildDropDomainSQL = buildDropDomainSQL;

27exports.buildCommentOnTableSQL = buildCommentOnTableSQL;

28exports.buildCommentOnColumnSQL = buildCommentOnColumnSQL;

29exports.buildSetSequenceValueSQL = buildSetSequenceValueSQL;

30exports.buildRestartSequenceSQL = buildRestartSequenceSQL;

31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL;

32const schema_objects_1 = require("./schema-objects");

33/**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/schema-types.jsView on unpkg · L31

34 * Quote a SQL string literal.

35 *

36 * Doubling the quote is the portable escape and the only one needed here —

37 * these are DDL statements, so nothing can be bound as a parameter.

38 */

39function quoteLiteral(value) {

40 return `'${String(value).replace(/'/g, "''")}'`;

41}

42/**

43 * Install a database extension.

44 *

45 * ```ts

46 * await qi.createExtension('uuid-ossp');

47 * await qi.createExtension('postgis', { cascade: true });

48 * ```

49 *

50 * Extension names are quoted, which matters more than it looks: `uuid-ossp`

51 * contains a hyphen and is a syntax error unquoted.

dist/cli/core/io.jsView file

Lines 50-90javascript

50const framework_1 = require("./framework");

51const prompt_1 = require("./prompt");

52// ─── Overwrite protection ──────────────────────────────────────────────────────

53/**

dist/compliance/backup-verification.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 61

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/compliance/backup-verification.js#virtual:normalized:round1View on unpkg

Source & flagged code

3 flagged · loading source

dist/schema-types.jsView file

31exports.buildNextSequenceValueSQL = buildNextSequenceValueSQL; L32: const schema_objects_1 = require("./schema-objects"); L33: /**

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/schema-types.jsView on unpkg · L31

dist/cli/core/io.jsView file

70const stream = fs.createReadStream(filePath); L71: const res = await fetch(url, { L72: method: 'PUT', L73: // Node's fetch (undici) requires duplex for a stream body. L74: body: stream_1.Readable.toWeb(stream), L75: duplex: 'half', ... L87: if (!res.body) { L88: fs.writeFileSync(dest, Buffer.from(await res.arrayBuffer())); L89: return; ... L160: const g = (0, framework_1.getGlobalOptions)(); L161: const active = Boolean(process.stderr.isTTY) && !g.quiet && !g.json; L162: if (!active) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli/core/io.jsView on unpkg · L70

dist/compliance/backup-verification.js#virtual:normalized:round1

Findings

1 Critical1 High4 Medium6 Low

CriticalCredential Exfiltrationdist/cli/core/io.js

HighSemantic Analysis Limiteddist/compliance/backup-verification.js#virtual:normalized:round1

MediumDynamic Requiredist/schema-types.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to ts-prorm-orm@4.8.0.

See all versions of ts-prorm-orm for other recorded verdicts.

Review the evidence and your use of ts-prorm-orm@4.8.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 06:30:17.604Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.