Loading npm security reports…

vaspera-pm@2.14.3: Clean npm security report (Allow) | LPM Firewall

registry / vaspera-pm / 2.14.3

vaspera-pm@2.14.3

VasperaPM - AI-powered verified specifications. Discover docs, analyze code, detect drift.

AI Security Review

scanned 5h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The executable performs package-aligned AI-service, usage, and optional telemetry requests only when the CLI/MCP server is invoked.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs the CLI or starts `vaspera-pm serve`; setup/configuration follows explicit CLI invocation.

Impact

Writes first-party/project configuration and sends limited service/telemetry metadata; no install-time or stealth persistence chain was found.

Mechanism

User-invoked MCP setup, AI API access, usage tracking, and anonymous telemetry.

Rationale

The static findings map to declared MCP functionality: explicit setup writes its own server entry, Git calls derive repository metadata, and network use serves VasperaPM/telemetry workflows. No lifecycle-triggered execution or concrete credential exfiltration, remote-code execution, destructive action, or foreign AI-agent control-surface mutation was found.

Evidence

package.jsondist/cli.jsdist/server.js.mcp.json.vaspera/config.json~/.vasperapm/config.json~/.vaspera/telemetry.json

Network endpoints3

vasperapm.comus.i.posthog.comconsole.anthropic.com

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with high false-positive risk.

Evidence for block

`dist/cli.js` enables PostHog telemetry by default and stores an install ID.
`dist/cli.js` sends authenticated usage/quota requests to VasperaPM.
`dist/cli.js` can create a project `.mcp.json` for its own MCP server.

Evidence against

`package.json` has no preinstall, install, or postinstall hook.
`dist/cli.js` runs setup/config writes only after explicit CLI invocation.
MCP configuration adds only the `vaspera-pm` server entry.
Child-process use is limited to Git metadata queries and opening an auth URL.
No eval, VM execution, remote payload loading, credential-file harvesting, or destructive commands were found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

Source & flagged code

7 flagged

dist/server.jsView file

79reason: `Trial limit reached (${TRIAL_CALL_LIMIT} calls). Subscribe for unlimited access OR use your own ANTHROPIC_API_KEY.`, L80: upgradeUrl: "https://vasperapm.com/pricing", L81: trialRemaining: 0 ... L180: // src/middleware/auth.ts L181: var VALIDATE_KEY_URL = process.env.VASPERA_API_URL || "https://vasperapm.com"; L182: var SUPABASE_URL = process.env.SUPABASE_URL || process.env.NEXT_PUBLIC_SUPABASE_URL || "http://127.0.0.1:54321"; ... L196: }, L197: body: JSON.stringify({ p_key_prefix: keyPrefix }) L198: }); ... L201: } L202: const results = await response.json(); L203: const result = results[0];

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/server.jsView on unpkg · L79

445// src/middleware/repo.ts L446: import { execFileSync } from "child_process"; L447: function deriveRepoInfo(args) {

High

Child Process

Package source references child process execution.

dist/server.jsView on unpkg · L445

14844import * as path3 from "path"; L14845: var execAsync = promisify(exec); L14846: var GitHistoryAnalyzer = class {

High

Shell

Package source references shell execution.

dist/server.jsView on unpkg · L14844

3296script: | L3297: const issues = require('./issues.json').issues; L3298: for (const issue of issues) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server.jsView on unpkg · L3296

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/server.jsView on unpkg · L79

dist/cli.jsView file

31Trigger-reachable chain: manifest.main -> dist/cli.js L31: reason: `Trial limit reached (${TRIAL_CALL_LIMIT} calls). Subscribe for unlimited access OR use your own ANTHROPIC_API_KEY.`, L32: upgradeUrl: "https://vasperapm.com/pricing", L33: trialRemaining: 0 ... L198: }, L199: body: JSON.stringify({ p_key_prefix: keyPrefix }) L200: }); ... L203: } L204: const results = await response.json(); L205: const result = results[0]; ... L245: async function validateApiKey(apiKey) { L246: if (process.env.VASPERA_DEV_MODE === "true") { L247: if (process.env.NODE_ENV === "production") {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L31

453"use strict"; L454: USAGE_API_URL = process.env.VASPERA_API_URL || "https://vasperapm.com"; L455: INTERNAL_SERVICE_KEY = process.env.INTERNAL_SERVICE_KEY; ... L463: // src/middleware/repo.ts L464: import { execFileSync } from "child_process"; L465: function deriveRepoInfo(args) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L453

Source & flagged code

7 flagged · loading source

dist/server.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/server.jsView on unpkg · L79

445// src/middleware/repo.ts L446: import { execFileSync } from "child_process"; L447: function deriveRepoInfo(args) {

High

Child Process

Package source references child process execution.

dist/server.jsView on unpkg · L445

14844import * as path3 from "path"; L14845: var execAsync = promisify(exec); L14846: var GitHistoryAnalyzer = class {

High

Shell

Package source references shell execution.

dist/server.js

Findings

2 Critical3 High4 Medium8 Low

CriticalCredential Exfiltrationdist/server.js

CriticalTrigger Reachable Dangerous Capabilitydist/cli.js

HighChild Processdist/server.js

HighShelldist/server.js

HighSame File Env Network Executiondist/cli.js

MediumDynamic Requiredist/server.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/server.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

Source & flagged code

7 flagged

dist/server.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/server.jsView on unpkg · L79

445// src/middleware/repo.ts L446: import { execFileSync } from "child_process"; L447: function deriveRepoInfo(args) {

High

Child Process

Package source references child process execution.

dist/server.jsView on unpkg · L445

14844import * as path3 from "path"; L14845: var execAsync = promisify(exec); L14846: var GitHistoryAnalyzer = class {

High

Shell

Package source references shell execution.

dist/server.jsView on unpkg · L14844

3296script: | L3297: const issues = require('./issues.json').issues; L3298: for (const issue of issues) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server.jsView on unpkg · L3296

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/server.jsView on unpkg · L79

dist/cli.jsView file

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L31

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L453