Loading npm security reports…

@adammcarter/use-cases@0.5.0: AI-agent policy block | LPM Firewall

registry / @adammcarter/use-cases / 0.5.0

@adammcarter/use-cases@0.5.0

**Keep your AI agent's "it works" honest.**

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Global installation triggers a postinstall that mutates multiple user-level AI-agent control surfaces. Future sessions execute a package shell hook or load its plugin and inject package-controlled instructions.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm global install of the package, unless disabled by environment variables.

Impact

Persistent package-controlled instructions execute across Claude, Codex, OpenCode, and Copilot sessions.

Mechanism

postinstall agent-hook registration and session prompt injection

Policy narrative

The postinstall runs on every global install by default and writes user-level configuration for four unrelated AI-agent hosts. Those registrations invoke the package hook or plugin in future sessions, injecting package-controlled bootstrap text. This is a persistent, broad AI-agent control-surface mutation without an explicit setup command.

Rationale

Source inspection confirms a concrete unconsented postinstall persistence chain across foreign AI-agent configurations. No exfiltration was found, but the lifecycle control-surface mutation meets the blocking policy.

Evidence

package.jsonscripts/install-agent-hooks.mjshooks/session-startbootstrap/use-cases.md.opencode/plugin/use-cases.js~/.claude/settings.json~/.codex/hooks.json~/.config/opencode/opencode.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-agent-hooks.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

packages/mcp/dist/index.jsView file

11try { L12: return await import("@adammcarter/use-cases-core"); L13: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

packages/mcp/dist/index.jsView on unpkg · L11

scripts/install-agent-hooks.mjsView file

1Install-time AI-agent control hijack evidence: L2: import { spawnSync } from "node:child_process"; L3: import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"; L4: import { homedir } from "node:os"; ... L42: function writeJson(path, value) { L43: mkdirSync(dirname(path), { recursive: true }); L44: writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`, "utf8"); L45: } ... L116: const config = readJson(path, { $schema: "https://opencode.ai/config.json" }); L117: const pluginPath = resolve(packageRoot, ".opencode/plugin/use-cases.js"); L118: const plugins = (Array.isArray(config.plugin) ? config.plugin : []).filter((entry) => { L119: const value = Array.isArray(entry) ? entry[0] : entry; L120: return typeof value !== "string" || !value.endsWith("/.opencode/plugin/use-

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install-agent-hooks.mjsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = @adammcarter/use-cases@0.4.3 matchedPath = scripts/install-agent-hooks.mjs matchedIdentity = npm:QGFkYW1tY2FydGVyL3VzZS1jYXNlcw:0.4.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install-agent-hooks.mjsView on unpkg

examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.pyView file

•path = examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.py kind = payload_in_excluded_dir sizeBytes = 843 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.pyView on unpkg

•path = examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.py kind = build_helper sizeBytes = 843 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.pyView on unpkg

packages/core/dist/schema/registry.jsView file

•matchType = normalized_sha256 matchedPackage = @adammcarter/use-cases@0.4.3 matchedPath = [redacted].js matchedIdentity = npm:QGFkYW1tY2FydGVyL3VzZS1jYXNlcw:0.4.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/core/dist/schema/registry.jsView on unpkg

packages/core/dist/markers/cli/verify.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adammcarter/use-cases@0.3.0 matchedIdentity = npm:QGFkYW1tY2FydGVyL3VzZS1jYXNlcw:0.3.0 similarity = 0.858 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

packages/core/dist/markers/cli/verify.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 48-85json

48 "docs/tutorials",

49 "examples",

50 "hosts",

51 "packages/cli/dist",

52 "packages/cli/package.json",

53 "packages/core/dist",

54 "packages/core/package.json",

55 "packages/mcp/dist",

56 "packages/mcp/package.json",

57 "plugin.json",

58 "use-cases.yml",

59 "schemas/v1",

60 "scripts/install-agent-hooks.mjs",

61 "use-cases"

62 ],

63 "scripts": {

64 "build": "tsc -b packages/core packages/cli packages/mcp && node packages/core/scripts/copy-schemas.mjs && chmod +x packages/cli/dist/index.js packages/mcp/dist/index.js",

65 "clean": "rm -rf packages/*/dist coverage",

66 "cli": "node packages/cli/dist/index.js",

67 "lint": "tsc -b --pretty false --dry",

68 "postinstall": "node scripts/install-agent-hooks.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L68

69 "test": "vitest run",

70 "typecheck": "tsc -b --pretty false"

71 },

72 "devDependencies": {

73 "@types/node": "26.1.0",

74 "typescript": "6.0.3",

75 "vitest": "4.1.10"

76 },

77 "dependencies": {

78 "ajv": "^8.20.0",

79 "remark-gfm": "^4.0.1",

80 "remark-parse": "^11.0.0",

81 "unified": "^11.0.5",

82 "yaml": "^2.9.0"

83 }

84}

85

packages/mcp/dist/index.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2import { realpathSync } from "node:fs";

3import { createInterface } from "node:readline";

4import { stdin, stdout } from "node:process";

5import { fileURLToPath } from

scripts/install-agent-hooks.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawnSync } from "node:child_process";

3import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

4import { homedir } from "node:os";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.pyView file

•path = examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.py kind = payload_in_excluded_dir sizeBytes = 843 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.pyView on unpkg

•path = examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.py kind = build_helper sizeBytes = 843 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/python-pytest/tests/use_cases/example.checkout.apply_coupon_test.pyView on unpkg

packages/core/dist/schema/registry.jsView file

•matchType = normalized_sha256 matchedPackage = @adammcarter/use-cases@0.4.3 matchedPath = [redacted].js matchedIdentity = npm:QGFkYW1tY2FydGVyL3VzZS1jYXNlcw:0.4.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/core/dist/schema/registry.jsView on unpkg

packages/core/dist/markers/cli/verify.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adammcarter/use-cases@0.3.0 matchedIdentity = npm:QGFkYW1tY2FydGVyL3VzZS1jYXNlcw:0.3.0 similarity = 0.858 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

packages/core/dist/markers/cli/verify.jsView on unpkg