registry / wrong-notebook / 2026.10.31
wrong-notebook@2026.10.31
错题本：上传题目图片，由 AI 识别、解析并标注知识点，支持练习、统计与打印导出
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe install hook only generates Prisma Client, and the launcher’s file and database operations support the documented local service setup. Credential and metadata references are consistent with user-configured AI provider and Google cloud authentication features; no unrelated credential destination or install-time exfiltration was found.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Prisma Client generation runs during install; the server starts when the user invokes the start command.
Impact
No unauthorized collection or transmission was identified in the inspected flows.
Mechanism
The launcher creates local data files, applies database migrations, then starts the bundled Next.js server. AI requests use configured provider credentials.
AI rationale
The install hook only generates Prisma Client, and the launcher’s file and database operations support the documented local service setup. Credential and metadata references are consistent with user-configured AI provider and Google cloud authentication features; no unrelated credential destination or install-time exfiltration was found.
Evidence
~/.wrong-notebook/config/app-config.json~/.wrong-notebook/wrong-notebook.db~/.wrong-notebook/.nextauth_secret
Network endpoints4
api.openai.com/v1localhost:8080/api/recognize169.254.169.254metadata.google.internal.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall runs the package’s prepare-client command.
- That command runs Prisma Client generation against the package’s schema.
- The launcher disables Next.js telemetry and configures the app’s local database and data directory.
- The AI configuration uses an OpenAI key with the provider API or a base URL supplied by the user.
Evidence against
- The bundled Google authentication code can read GOOGLE_APPLICATION_CREDENTIALS and contains Google metadata-service support; this is consistent with cloud authentication for the app’s AI features.
- The scanner flagged launcher.js for similarity to known malware, but the inspected launcher behavior is routine Prisma setup, local database migration, and server startup.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
8 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node bin/wrong-notebook.js prepare-client
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/wrong-notebook.js prepare-client
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg.next/server/chunks/ssr/_1y_a6k7q3vg2p._.jsView file
Findings
1 Critical3 High7 Medium3 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritylauncher.js
HighKnown Malware Source Fingerprint Signaturelauncher.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Pattern.next/server/chunks/ssr/_1y_a6k7q3vg2p._.js
MediumDynamic Requirebin/wrong-notebook.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Pattern.next/static/chunks/3d86o-8o9e1_5.js
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to wrong-notebook@2026.10.31.
See all versions of wrong-notebook for other recorded verdicts.
- Review the evidence and your use of wrong-notebook@2026.10.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.