PkgRadar

Package evidence

@librechat/[email protected]

Credential file access, Install Lifecycle Remote Or Exec, Remote Payload +2 more

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Publisher
GitHub ActionsTrusted automation · −70% score

Effective trust discount applied: 70% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@librechat/[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@librechat/[email protected]"],"fail_on":"high"}'
Artifact bytes3,620,407
Previous version3.1.92
Published2026-05-24T19:18:10.034Z
SHA-2563b1eb6f4ad17736555e7da81ede16917d5fc707303a8c985ea7415902fff7c3b

Why flagged

What the scanner saw

Credential file access

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high
Last checked
highRisk
1060Score
3.1.93Version
Status history (1 event)
  1. newavailable · risk high · score 1060 · status changed

Related candidates

Linked campaigns and clusters

Repeated static TTPstale

Install Lifecycle Remote Or Exec

4 members · evidence strength 90

Evidence

Static findings

68 static · 0 from release diff · showing high-signal first.

Showing 30 of 35 findings.

SeverityKindPathDetailPoints
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highInstall Lifecycle Remote Or Execmanifest30
Show all 68 findings (low-signal and informational)

Showing 60 of 68 findings.

SeverityKindPathDetailPoints
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highCredential file accessmanifest30
highInstall Lifecycle Remote Or Execmanifest30
mediumRemote Payloadmanifest12
mediumRemote Payloadmanifest12
mediumRemote Payloadmanifest12
mediumRemote Payloadmanifest12
mediumRemote Payloadmanifest12
lowInstall-time lifecycle scriptmanifest4
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3
lowObfuscationmanifest3

Manifest

Package metadata

Dependencies32
  • @anthropic-ai/sdk^0.92.0
  • @aws-sdk/client-bedrock-runtime^3.1013.0
  • @langchain/anthropic^1.3.28
  • @langchain/aws^1.3.5
  • @langchain/core1.1.44
  • @langchain/deepseek^1.0.25
  • @langchain/google-common2.1.28
  • @langchain/google-gauth2.1.28
  • @langchain/google-genai2.1.28
  • @langchain/google-vertexai2.1.28
  • @langchain/langgraph^1.2.9
  • @langchain/mistralai^1.0.8
  • @langchain/openai1.4.5
  • @langchain/textsplitters^1.0.1
  • @langchain/xai^1.3.17
  • @langfuse/langchain^5.3.0
  • @langfuse/otel^5.3.0
  • @langfuse/tracing^5.3.0
  • @opentelemetry/sdk-node^0.218.0
  • @scarf/scarf^1.4.0
  • @types/diff^7.0.2
  • ai-tokenizer^1.0.6
  • axios^1.16.0
  • cheerio^1.0.0
  • diff^9.0.0
  • dotenv^16.4.7
  • https-proxy-agent^7.0.6
  • mathjs^15.2.0
  • nanoid^3.3.7
  • okapibm25^1.4.1
  • …and 2 more.