registry  /  @1interface/chat-core  /  0.2.0

@1interface/chat-core@0.2.0

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The only confirmed harmful behavior is an npm `postinstall` command deleting package-local React and React DOM directories. No exfiltration, remote payload execution, persistence, or AI-agent control-surface mutation is established.

Static reason
One or more suspicious static signals were detected.
Trigger
npm installation of the package.
Impact
Can disrupt React peer-dependency installation within the package context.
Mechanism
Postinstall shell deletion of local dependency paths.
Rationale
The install-time deletion is a concrete integrity risk that warrants a warning. It does not demonstrate malware behavior or a publish-blocking attack chain.
Evidence
package.jsondist/index.mjsdist/index.d.tsdist/index.js

Decision evidence

public snapshot
AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • `package.json` defines a `postinstall` lifecycle hook.
  • The hook runs `rm -rf node_modules/react node_modules/react-dom` and suppresses errors with `|| true`.
  • This is install-time destructive mutation of dependency directories, though scoped to the package working directory.
Evidence against
  • `dist/index.mjs` imports only React/Redux, shared-core, and fetch-event-source dependencies.
  • No child-process, eval/vm, native-loading, filesystem, credential-harvesting, or AI-agent-control writes were found in `dist`.
  • No static application network endpoint is embedded in the published distribution; runtime URLs come from shared-core configuration.
  • Runtime code is consistent with a browser chat client: authenticated SSE, account/session APIs, audio transcription, and tool-server OAuth hooks.
Behavioral surface
Source
EnvironmentVarsNetwork
Supply chain
MinifiedTrivialUrlStrings
Manifest
NoLicense
scanned 2 file(s), 253 KB of source, external domains: bit.ly, nominatim.openstreetmap.org

Source & flagged code

2 flagged · loading source
package.jsonView file
•scripts.postinstall = rm -rf node_modules/react node_modules/react-dom 2>/dev/null || true
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = rm -rf node_modules/react node_modules/react-dom 2>/dev/null || true
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High3 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowUrl Strings
LowNo License