registry / wrong-notebook / 2026.11.1
wrong-notebook@2026.11.1
错题本：上传题目图片，由 AI 识别、解析并标注知识点，支持练习、统计与打印导出
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe postinstall hook only invokes local Prisma client generation. The reviewed credential paths use administrator-selected provider settings and send keys to the corresponding provider, with no evidence of unrelated exfiltration or harmful automatic behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Postinstall runs Prisma client generation; AI provider requests require an authenticated admin action or configured application use.
Impact
No unsolicited credential collection, unrelated install-time network contact, or harmful automatic action was found.
Mechanism
Prisma is invoked locally with the bundled schema. Provider API keys are sent to the chosen provider endpoint, with a user-supplied base URL supported by the models route.
AI rationale
The postinstall hook only invokes local Prisma client generation. The reviewed credential paths use administrator-selected provider settings and send keys to the corresponding provider, with no evidence of unrelated exfiltration or harmful automatic behavior.
Evidence
~/.wrong-notebook/wrong-notebook.db~/.wrong-notebook/config/app-config.json~/.wrong-notebook/.nextauth_secret
Network endpoints2
api.openai.comgenerativelanguage.googleapis.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook invokes the CLI's prepare-client command.
- That command runs Prisma's local generate command against the package's schema.
- The AI models route requires an API key and admin session, then uses the selected provider's endpoint or supplied base URL.
- OpenAI environment credentials default to api.openai.com; the launcher disables Next.js telemetry.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = node bin/wrong-notebook.js prepare-client
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/wrong-notebook.js prepare-client
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg.next/server/chunks/[root-of-the-server]__0nujsu6qbn-8o._.jsView file
Findings
1 Critical2 High9 Medium3 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltalauncher.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Pattern.next/server/chunks/[root-of-the-server]__0nujsu6qbn-8o._.js
MediumDynamic Requirebin/wrong-notebook.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Pattern.next/server/chunks/[root-of-the-server]__0_uvtfu0yr-na._.js
MediumSecret Pattern.next/server/chunks/ssr/_0ltqx22v65imo._.js
MediumSecret Pattern.next/static/chunks/2zgqd5dt_6z_7.js
Affected versions and remediation
This report applies to wrong-notebook@2026.11.1.
See all versions of wrong-notebook for other recorded verdicts.
- Review the evidence and your use of wrong-notebook@2026.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.