Loading npm security reports…

@appsbd/vue3-appsbd-ui@1.0.13: AI-agent control-surface risk | LPM Firewall

registry / @appsbd/vue3-appsbd-ui / 1.0.13

@appsbd/vue3-appsbd-ui@1.0.13

Reusable Vue 3 component library

AI Security Review

scanned 4d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package runs a lifecycle script that mutates the consuming project's AI-agent command/workflow directories without consent. It installs package-authored instructions and overwrites one existing command file.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm install of @appsbd/vue3-appsbd-ui@1.0.13

Impact

A dependency install can alter subsequent Claude Code and agent behavior in the consumer project.

Mechanism

postinstall copies AI-agent skill Markdown into project control surfaces

Policy narrative

The postinstall hook resolves the consuming project from INIT_CWD and, by default, copies package-controlled command files into .claude/commands and .agent/workflows. It creates those directories if absent and overwrites use-appsbd-ui.md. Optional environment selection extends this to Cursor and Windsurf, but the two foreign agent surfaces are changed on every consumer install.

Rationale

This is unconsented postinstall mutation of foreign AI-agent control surfaces, meeting the block boundary. No exfiltration or remote payload is needed for this concrete control-surface attack.

Evidence

package.jsonscripts/postinstall.jsscripts/skill-groups.jsskills/commands/use-appsbd-ui.mdskills/commands/*.md.claude/commands/*.md.agent/workflows/*.md

Decision evidence

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/vue3-appsbd-ui.cjs.jsView file

•matchType = malicious_source_fingerprint_signature signature = fbb4baa50ba84971 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @appsbd/vue3-appsbd-ui@1.0.12 matchedPath = dist/vue3-appsbd-ui.cjs.js matchedIdentity = npm:QGFwcHNiZC92dWUzLWFwcHNiZC11aQ:1.0.12 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/vue3-appsbd-ui.cjs.jsView on unpkg

285.vue-echarts-inner{flex-grow:1;min-width:0;width:auto!important;height:auto!important} L286: `,{});var Xz=function(){if(fo!=null)return fo;if(typeof HTMLElement>"u"||typeof customElements>"u")return fo=!1;try{new Function("tag",`class EChartsElement extends HTMLElement { L287: __dispose = null;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vue3-appsbd-ui.cjs.jsView on unpkg · L285

scripts/skill-groups.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L21: src: join(pkgRoot, "skills", "commands"), L22: dests: [join(projectRoot, ".claude", "commands"), join(projectRoot, ".agent", "workflows")], L23: override: ["use-appsbd-ui.md"], ... L26: src: join(pkgRoot, "skills", "skills"), L27: dests: [join(projectRoot, ".claude", "skills"), join(projectRoot, ".agent", "skills")], L28: override: [], Write operation from scripts/postinstall.js: L1: import { existsSync, mkdirSync, copyFileSync, readFileSync, readdirSync } from "fs"; L2: import { join, resolve } from "path"; ... L40: for (const dest of group.dests) { L41: if (!existsSync(dest)) mkdirSync(dest, { recursive: true }); L42: for (const file of files) { ... L44: if (group.override.includes(file) || !existsSync(dst)) { L4

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/skill-groups.jsView on unpkg · L1

Source & flagged code

5 flagged

package.jsonView file

Lines 16-56json

16 },

17 "./style.css": "./dist/style.css",

18 "./skins/*.css": "./dist/skins/*.css",

19 "./skins/*.scss": "./dist/skins/*.scss",

20 "./skins/themes/*.scss": "./dist/skins/themes/*.scss"

21 },

22 "files": [

23 "dist",

24 "readme.md",

25 "CHANGELOG.md",

26 "AI_REFERENCE.md",

27 "AI_REF.md",

28 ".ai",

29 "skills",

30 "scripts/postinstall.js",

31 "scripts/setup.js",

32 "scripts/skill-groups.js",

33 "design-system.md"

34 ],

35 "scripts": {

36 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "up": "npm run build && npm publish",

38 "dev": "vite --mode playground",

39 "lib": "vite",

40 "build": "vite build",

41 "build:playground": "vite build --mode playground",

42 "build:skins": "vite build --mode skins"

43 },

44 "keywords": [

45 "vue",

46 "vue3",

47 "component-library",

48 "vite"

49 ],

50 "author": "appsbd",

51 "license": "MIT",

52 "peerDependencies": {

53 "@appsbd/vue3-elite-grid": ">=2.0.4",

54 "@vee-validate/rules": ">=4.15.1",

55 "bootstrap": ">=5.3.7",

56 "@lucide/vue": ">=1.28.0",

dist/vue3-appsbd-ui.cjs.jsView file

•matchType = malicious_source_fingerprint_signature signature = fbb4baa50ba84971 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @appsbd/vue3-appsbd-ui@1.0.12 matchedPath = dist/vue3-appsbd-ui.cjs.js matchedIdentity = npm:QGFwcHNiZC92dWUzLWFwcHNiZC11aQ:1.0.12 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/vue3-appsbd-ui.cjs.jsView on unpkg

285.vue-echarts-inner{flex-grow:1;min-width:0;width:auto!important;height:auto!important} L286: `,{});var Xz=function(){if(fo!=null)return fo;if(typeof HTMLElement>"u"||typeof customElements>"u")return fo=!1;try{new Function("tag",`class EChartsElement extends HTMLElement { L287: __dispose = null;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vue3-appsbd-ui.cjs.jsView on unpkg · L285

scripts/skill-groups.jsView file

Lines 1-21javascript

1import { join } from "path";

2

3// Central config for all agent skill destinations.

4// Add new agents here — postinstall.js and setup.js both use this.

5

6const OPTIONAL_AGENTS = {

7 cursor: (pkgRoot,