Is patternlab-node safe to use?

patternlab-node has a security risk score of 85.25/100 (CRITICAL risk). Our security analysis detected 202 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of patternlab-node?

Based on our automated security analysis, patternlab-node presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "patternlab-node" on n8n Safe to Install?

Name: patternlab-node
Availability: InStock
Author: bmuenzenmeyer

bmuenzenmeyer · n8n · v2.12.0

Pattern Lab is a collection of tools to help you create atomic design systems. This is the node command line interface (CLI).

Risk Assessment

Analyzed

85.25

out of 100

CRITICAL

202 security findings detected across all analyzers

Severity Breakdown

Critical

High

132

Medium

Low

Info

Finding Categories

Network

130

IoC Indicators

YARA Rules Matched

9 rules(58 hits)

postinstall crypto operations postinstall file manipulation postinstall registry modification postinstall file download NoUseWeakRandom postinstall network communication postinstall obfuscation postinstall system command DebuggerStatementsShouldNotBeUsed

About This Extension

Pattern Lab is a collection of tools to help you create atomic design systems. This is the node command line interface (CLI).

Detailed Findings

71 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

130

All Indicators · 130

URL

detected URL: https://api.github.com/search/repositories?q=starterkit+in:name+user:pattern-lab&sort=stars&order=desc',

XIOC detected URL: https://api.github.com/search/repositories?q=starterkit+in:name+user:pattern-lab&sort=stars&order=desc',

extracted_from_files

Domain

detected Domain: patternlab.events

XIOC detected Domain: patternlab.events

extracted_from_files

URL

detected URL: https://gist.github.com/tkihira/2367067

XIOC detected URL: https://gist.github.com/tkihira/2367067

extracted_from_files

Domain

detected Domain: dmolsen.com

XIOC detected Domain: dmolsen.com

extracted_from_files

Domain

detected Domain: bradfrostweb.com

XIOC detected Domain: bradfrostweb.com

extracted_from_files

Domain

detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain

detected Domain: contributor-covenant.org

XIOC detected Domain: contributor-covenant.org

extracted_from_files

Domain

detected Domain: js.build

XIOC detected Domain: js.build

extracted_from_files

Domain

detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain

detected Domain: bradfrost.com

XIOC detected Domain: bradfrost.com

extracted_from_files

Domain

detected Domain: www.patreon.com

XIOC detected Domain: www.patreon.com

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: demo.patternlab.io

XIOC detected Domain: demo.patternlab.io

extracted_from_files

Domain

detected Domain: editorconfig.org

XIOC detected Domain: editorconfig.org

extracted_from_files

Hash

detected SHA1 Hash: cb41f07f63a9f316a726d48fd2050e86f8899ce4

XIOC detected SHA1 Hash: cb41f07f63a9f316a726d48fd2050e86f8899ce4

extracted_from_files

Hash

detected SHA1 Hash: de9dc07e2a2978179edde9db33a1724bb18375b2

XIOC detected SHA1 Hash: de9dc07e2a2978179edde9db33a1724bb18375b2

extracted_from_files

Hash

detected SHA1 Hash: 92c3f7677a259ff11e2c0817526c81cf92c497ef

XIOC detected SHA1 Hash: 92c3f7677a259ff11e2c0817526c81cf92c497ef

extracted_from_files

Hash

detected SHA1 Hash: d24cb292c3df32c16288592f8652a4e3fc6d07c0

XIOC detected SHA1 Hash: d24cb292c3df32c16288592f8652a4e3fc6d07c0

extracted_from_files

Hash

detected SHA1 Hash: da61fbb619fb88f2927a5bc6e46a48ce356c87cc

XIOC detected SHA1 Hash: da61fbb619fb88f2927a5bc6e46a48ce356c87cc

extracted_from_files

Hash

detected SHA1 Hash: 9ff45a015e5dc5f8c57a3370faa4933c57fdf099

XIOC detected SHA1 Hash: 9ff45a015e5dc5f8c57a3370faa4933c57fdf099

extracted_from_files

Hash

detected SHA1 Hash: 189f0ecd5e0299057cd9504a9889954d059d7653

XIOC detected SHA1 Hash: 189f0ecd5e0299057cd9504a9889954d059d7653

extracted_from_files

Hash

detected SHA1 Hash: 6237a291d025958c605643c8f2d530889eae69e6

XIOC detected SHA1 Hash: 6237a291d025958c605643c8f2d530889eae69e6

extracted_from_files

Hash

detected SHA1 Hash: c8eda416c8bbda669e90371955fe8336b6956a87

XIOC detected SHA1 Hash: c8eda416c8bbda669e90371955fe8336b6956a87

extracted_from_files

Hash

detected SHA1 Hash: a1602a077a1867c95e10b87a4ccd22d9d7abb141

XIOC detected SHA1 Hash: a1602a077a1867c95e10b87a4ccd22d9d7abb141

extracted_from_files

Hash

detected SHA1 Hash: ff1c4c7109a48591b6d0899c0c9534307af6d9b0

XIOC detected SHA1 Hash: ff1c4c7109a48591b6d0899c0c9534307af6d9b0

extracted_from_files

Hash

detected SHA1 Hash: 9ff1423b80c56396ecceb704c7ac6b64de3cb576

XIOC detected SHA1 Hash: 9ff1423b80c56396ecceb704c7ac6b64de3cb576

extracted_from_files

Hash

detected SHA1 Hash: d2954358ce2307f9e4e746291bab9865941a8bdc

XIOC detected SHA1 Hash: d2954358ce2307f9e4e746291bab9865941a8bdc

extracted_from_files

Hash

detected SHA1 Hash: c4a7159729fe8df8b38c1bee7e5eb5eddd21e012

XIOC detected SHA1 Hash: c4a7159729fe8df8b38c1bee7e5eb5eddd21e012

extracted_from_files

Hash

detected SHA1 Hash: 9410cfb0f17455fbed387df2c181a32ecfbe9047

XIOC detected SHA1 Hash: 9410cfb0f17455fbed387df2c181a32ecfbe9047

extracted_from_files

Hash

detected SHA1 Hash: 024ad5f67114bd0ff240419dae936e54b5b16b14

XIOC detected SHA1 Hash: 024ad5f67114bd0ff240419dae936e54b5b16b14

extracted_from_files

Hash

detected SHA1 Hash: 531ddb92460ba74633510ac7b308b8bdba00f021

XIOC detected SHA1 Hash: 531ddb92460ba74633510ac7b308b8bdba00f021

extracted_from_files

Hash

detected SHA1 Hash: 627c11fbfac847c08041b0acdd614426259068e8

XIOC detected SHA1 Hash: 627c11fbfac847c08041b0acdd614426259068e8

extracted_from_files

Domain

detected Domain: img.shields.io

XIOC detected Domain: img.shields.io

extracted_from_files

Domain

detected Domain: travis-ci.org

XIOC detected Domain: travis-ci.org

extracted_from_files

URL

detected URL: http://brianmuenzenmeyer.com

XIOC detected URL: http://brianmuenzenmeyer.com

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/issues

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/issues

extracted_from_files

Hash

detected SHA1 Hash: f748b2aa62896ac094da63051119ad6b3f9761c8

XIOC detected SHA1 Hash: f748b2aa62896ac094da63051119ad6b3f9761c8

extracted_from_files

Hash

detected SHA1 Hash: e2ca66a3b1e7761fb9d2bb8700db976cbfd65e86

XIOC detected SHA1 Hash: e2ca66a3b1e7761fb9d2bb8700db976cbfd65e86

extracted_from_files

Hash

detected SHA1 Hash: 88fa534d39335f85db6b18eee921a3821a41dba5

XIOC detected SHA1 Hash: 88fa534d39335f85db6b18eee921a3821a41dba5

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/blob/master/LICENSE)

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/blob/master/LICENSE)

extracted_from_files

URL

detected URL: http://patternlab.io/docs/pattern-organization.html');

XIOC detected URL: http://patternlab.io/docs/pattern-organization.html');

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/issues/540

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/issues/540

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/issues/580

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/issues/580

extracted_from_files

URL

detected URL: http://patternlab.io/

XIOC detected URL: http://patternlab.io/

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/wiki

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/wiki

extracted_from_files

URL

detected URL: https://github.com/geoffp)

XIOC detected URL: https://github.com/geoffp)

extracted_from_files

URL

detected URL: https://github.com/raphaelokon)

XIOC detected URL: https://github.com/raphaelokon)

extracted_from_files

URL

detected URL: https://github.com/tburny)

XIOC detected URL: https://github.com/tburny)

extracted_from_files

URL

detected URL: https://gitter.im/pattern-lab/node)

XIOC detected URL: https://gitter.im/pattern-lab/node)

extracted_from_files

URL

detected URL: http://designsystems.herokuapp.com)

XIOC detected URL: http://designsystems.herokuapp.com)

extracted_from_files

URL

detected URL: https://twitter.com/jina).

XIOC detected URL: https://twitter.com/jina).

extracted_from_files

URL

detected URL: http://stackoverflow.com/questions/tagged/patternlab.io

XIOC detected URL: http://stackoverflow.com/questions/tagged/patternlab.io

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/blob/master/.github/CONTRIBUTING.md),

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/blob/master/.github/CONTRIBUTING.md),

extracted_from_files

URL

detected URL: https://docs.npmjs.com/cli/link).

XIOC detected URL: https://docs.npmjs.com/cli/link).

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node.git

XIOC detected URL: https://github.com/pattern-lab/patternlab-node.git

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Upgrading](https://github.com/pattern-lab/patternlab-node/wiki/Upgrading)

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Upgrading](https://github.com/pattern-lab/patternlab-node/wiki/Upgrading)

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/wiki/ChangeLog)

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/wiki/ChangeLog)

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/blob/master/.github/CONTRIBUTING.md

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/blob/master/.github/CONTRIBUTING.md

extracted_from_files

URL

detected URL: https://github.com/bmuenzenmeyer)

XIOC detected URL: https://github.com/bmuenzenmeyer)

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/edition-node-grunt)

XIOC detected URL: https://github.com/pattern-lab/edition-node-grunt)

extracted_from_files

URL

detected URL: http://patternlab.io/assets/pattern-lab-2-image_18-large-opt.png)

XIOC detected URL: http://patternlab.io/assets/pattern-lab-2-image_18-large-opt.png)

extracted_from_files

URL

detected URL: http://patternlab.io/docs/advanced-ecosystem-overview.html).

XIOC detected URL: http://patternlab.io/docs/advanced-ecosystem-overview.html).

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Configuration

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Configuration

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Command-Line-Interface)

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Command-Line-Interface)

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node-cli)

XIOC detected URL: https://github.com/pattern-lab/patternlab-node-cli)

extracted_from_files

URL

detected URL: http://stackoverflow.com/questions/6274339/how-can-i-shuffle-an-array-in-javascript

XIOC detected URL: http://stackoverflow.com/questions/6274339/how-can-i-shuffle-an-array-in-javascript

extracted_from_files

URL

detected URL: https://www.patreon.com/patternlab).

XIOC detected URL: https://www.patreon.com/patternlab).

extracted_from_files

URL

detected URL: http://bradfrost.com/)**

XIOC detected URL: http://bradfrost.com/)**

extracted_from_files

URL

detected URL: https://twitter.com/marcospeebles)

XIOC detected URL: https://twitter.com/marcospeebles)

extracted_from_files

URL

detected URL: https://twitter.com/susanmsimkins)

XIOC detected URL: https://twitter.com/susanmsimkins)

extracted_from_files

URL

detected URL: https://twitter.com/wnas)

XIOC detected URL: https://twitter.com/wnas)

extracted_from_files

Domain

detected Domain: brianmuenzenmeyer.com

XIOC detected Domain: brianmuenzenmeyer.com

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/edition-node-gulp)

XIOC detected URL: https://github.com/pattern-lab/edition-node-gulp)

extracted_from_files

Domain

detected Domain: badges.gitter.im

XIOC detected Domain: badges.gitter.im

extracted_from_files

URL

detected URL: https://travis-ci.org/pattern-lab/patternlab-node.svg?branch=master)](https://travis-ci.org/pattern-lab/patternlab-node)

XIOC detected URL: https://travis-ci.org/pattern-lab/patternlab-node.svg?branch=master)](https://travis-ci.org/pattern-lab/patternlab-node)

extracted_from_files

URL

detected URL: https://img.shields.io/github/release/pattern-lab/patternlab-node.svg)

XIOC detected URL: https://img.shields.io/github/release/pattern-lab/patternlab-node.svg)

extracted_from_files

URL

detected URL: https://img.shields.io/github/license/pattern-lab/patternlab-node.svg)

XIOC detected URL: https://img.shields.io/github/license/pattern-lab/patternlab-node.svg)

extracted_from_files

URL

detected URL: https://badges.gitter.im/pattern-lab/node.svg)](https://gitter.im/pattern-lab/node)

XIOC detected URL: https://badges.gitter.im/pattern-lab/node.svg)](https://gitter.im/pattern-lab/node)

extracted_from_files

URL

detected URL: http://demo.patternlab.io/)

XIOC detected URL: http://demo.patternlab.io/)

extracted_from_files

URL

detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Thanks).

XIOC detected URL: https://github.com/pattern-lab/patternlab-node/wiki/Thanks).

extracted_from_files

Domain

detected Domain: gist.github.com

XIOC detected Domain: gist.github.com

extracted_from_files

Domain

detected Domain: paint.net

XIOC detected Domain: paint.net

extracted_from_files

URL

detected URL: http://contributor-covenant.org/version/1/4][version]

XIOC detected URL: http://contributor-covenant.org/version/1/4][version]

extracted_from_files

URL

detected URL: http://contributor-covenant.org

XIOC detected URL: http://contributor-covenant.org

extracted_from_files

URL

detected URL: http://contributor-covenant.org/version/1/4/

XIOC detected URL: http://contributor-covenant.org/version/1/4/

extracted_from_files

URL

detected URL: http://bradfrostweb.com

XIOC detected URL: http://bradfrostweb.com

extracted_from_files

URL

detected URL: http://dmolsen.com

XIOC detected URL: http://dmolsen.com

extracted_from_files

Domain

detected Domain: dependencygraph.dot

XIOC detected Domain: dependencygraph.dot

extracted_from_files

Domain

detected Domain: engine.build

XIOC detected Domain: engine.build

extracted_from_files

Domain

detected Domain: api.github.com

XIOC detected Domain: api.github.com

extracted_from_files

Domain

detected Domain: repo.name

XIOC detected Domain: repo.name

extracted_from_files

Domain

detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain

detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain

detected Domain: paths.public.data

XIOC detected Domain: paths.public.data

extracted_from_files

Domain

detected Domain: patterns.map

XIOC detected Domain: patterns.map

extracted_from_files

Domain

detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

Domain

detected Domain: patternlab.build

XIOC detected Domain: patternlab.build

extracted_from_files

Domain

detected Domain: contributing.md

XIOC detected Domain: contributing.md

extracted_from_files

URL

detected URL: https://github.com/raphaelokon).

XIOC detected URL: https://github.com/raphaelokon).

extracted_from_files

Domain

detected Domain: plutils.log.info

XIOC detected Domain: plutils.log.info

extracted_from_files

Domain

detected Domain: paths.source.data

XIOC detected Domain: paths.source.data

extracted_from_files

Domain

detected Domain: graphlib.json.read

XIOC detected Domain: graphlib.json.read

extracted_from_files

Domain

detected Domain: nodes.map

XIOC detected Domain: nodes.map

extracted_from_files

Domain

detected Domain: lineage.map

XIOC detected Domain: lineage.map

extracted_from_files

Domain

detected Domain: lineager.map

XIOC detected Domain: lineager.map

extracted_from_files

Domain

detected Domain: pattern.name

XIOC detected Domain: pattern.name

extracted_from_files

Domain

detected Domain: from.name

XIOC detected Domain: from.name

extracted_from_files

Domain

detected Domain: to.name

XIOC detected Domain: to.name

extracted_from_files

Domain

detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain

detected Domain: fileobject.name

XIOC detected Domain: fileobject.name

extracted_from_files

Domain

detected Domain: subtypepattern.name

XIOC detected Domain: subtypepattern.name

extracted_from_files

Domain

detected Domain: chalk.green

XIOC detected Domain: chalk.green

extracted_from_files

Domain

detected Domain: enginediscovery.name

XIOC detected Domain: enginediscovery.name

extracted_from_files

Domain

detected Domain: chalk.red

XIOC detected Domain: chalk.red

extracted_from_files

Domain

detected Domain: enginenames.map

XIOC detected Domain: enginenames.map

extracted_from_files

Domain

detected Domain: designsystems.herokuapp.com

XIOC detected Domain: designsystems.herokuapp.com

extracted_from_files

Domain

detected Domain: patternlab.graph.link

XIOC detected Domain: patternlab.graph.link

extracted_from_files

Domain

detected Domain: config.paths.source.data

XIOC detected Domain: config.paths.source.data

extracted_from_files

Domain

detected Domain: patternlab.data

XIOC detected Domain: patternlab.data

extracted_from_files

Domain

detected Domain: alldata.link

XIOC detected Domain: alldata.link

extracted_from_files

Domain

detected Domain: patternlab.data.link

XIOC detected Domain: patternlab.data.link

extracted_from_files

Domain

detected Domain: pathobj.name

XIOC detected Domain: pathobj.name

extracted_from_files

Domain

detected Domain: twitter.com

XIOC detected Domain: twitter.com

extracted_from_files

Domain

detected Domain: patternlab.io

XIOC detected Domain: patternlab.io

extracted_from_files

Domain

detected Domain: docs.npmjs.com

XIOC detected Domain: docs.npmjs.com

extracted_from_files

Domain

detected Domain: gitter.im

XIOC detected Domain: gitter.im

extracted_from_files

Domain

detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain

detected Domain: sortedkeys.map

XIOC detected Domain: sortedkeys.map

extracted_from_files

Domain

detected Domain: eventemitter.call

XIOC detected Domain: eventemitter.call

extracted_from_files

URL

detected URL: https://github.com/pattern-lab?utf8=%E2%9C%93&query=edition-node).

XIOC detected URL: https://github.com/pattern-lab?utf8=%E2%9C%93&query=edition-node).

extracted_from_files

Security Analysis Summary

Security Analysis Overview

patternlab-node is a n8n extension published by bmuenzenmeyer. Version 2.12.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 85.25/100 (CRITICAL risk) based on 202 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

Medium: 132 finding(s)
Low: 70 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

patternlab-node is published by bmuenzenmeyer on the n8n marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

@elastic/apm-rum-core

GitHub Actions

CRITICAL

freerasp-react-native

GitHub Actions

CRITICAL

@zilliz/milvus2-sdk-node

GitHub Actions

CRITICAL

payload

elliotpayload

CRITICAL

parse-server

parseadmin

CRITICAL

nitropack

pi0

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

About This Extension

Detailed Findings

NET-FETCH-package/core/lib/starterkit_manager.js-58

DEP-graphlib-^2.1.1

DEP-chalk-^1.1.3

DEP-diveSync-^0.3.0

DEP-fs-extra-^0.30.0

DEP-glob-^7.0.0

DEP-js-yaml-^3.6.1

DEP-lodash-~4.13.1

DEP-update-notifier-^2.2.0

DEP-js-beautify-^1.6.3

DEP-markdown-it-^6.0.1

DEP-node-fetch-^1.6.0

DEP-patternengine-node-mustache-^1.0.0

YARA Rule Matches

postinstall crypto operations

postinstall file manipulation

postinstall registry modification

postinstall file download

NoUseWeakRandom

postinstall network communication

postinstall obfuscation

postinstall system command

DebuggerStatementsShouldNotBeUsed

Indicators of Compromise

All Indicators · 130

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

@elastic/apm-rum-core

freerasp-react-native

@zilliz/milvus2-sdk-node

payload

parse-server

nitropack