Loading npm security reports…

@appsbd/vue3-appsbd-ui@1.0.18: AI-agent control-surface risk | LPM Firewall

registry / @appsbd/vue3-appsbd-ui / 1.0.18

@appsbd/vue3-appsbd-ui@1.0.18

Reusable Vue 3 component library

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically writes its command files into the consuming project's Claude and generic agent workflow directories. One named command is overwritten if present.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

Package-authored instructions become available to, and may replace instructions for, AI agents in the consumer project.

Mechanism

Automatic copying into foreign AI-agent configuration directories.

Policy narrative

A normal npm install invokes scripts/postinstall.js. It resolves the consumer project through INIT_CWD, then creates and populates .claude and .agent directories with package-provided Markdown instructions. This happens by default for Claude and Agent rather than through an explicit user setup command. The copy logic replaces use-appsbd-ui.md when it already exists, allowing the dependency to alter an existing agent command surface.

AI rationale

The automatic postinstall hook mutates foreign AI-agent control surfaces in the consuming project and can overwrite an existing command. This is concrete unconsented install-time control-surface modification, despite no observed exfiltration or network activity.

Evidence

package.jsonscripts/postinstall.jsscripts/skill-groups.js.claude/commands/*.md.agent/workflows/*.md.claude/skills/*.md.agent/skills/*.md

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/vue3-appsbd-ui.cjs.jsView file

•matchType = malicious_source_fingerprint_signature signature = 47179ce310083d2f signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @appsbd/vue3-appsbd-ui@1.0.17 matchedPath = dist/vue3-appsbd-ui.cjs.js matchedIdentity = npm:QGFwcHNiZC92dWUzLWFwcHNiZC11aQ:1.0.17 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/vue3-appsbd-ui.cjs.jsView on unpkg

310.vue-echarts-inner{flex-grow:1;min-width:0;width:auto!important;height:auto!important} L311: `,{});var T$=function(){if(bo!=null)return bo;if(typeof HTMLElement>"u"||typeof customElements>"u")return bo=!1;try{new Function("tag",`class EChartsElement extends HTMLElement { L312: __dispose = null;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vue3-appsbd-ui.cjs.jsView on unpkg · L310

scripts/skill-groups.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L21: src: join(pkgRoot, "skills", "commands"), L22: dests: [join(projectRoot, ".claude", "commands"), join(projectRoot, ".agent", "workflows")], L23: override: ["use-appsbd-ui.md"], ... L26: src: join(pkgRoot, "skills", "skills"), L27: dests: [join(projectRoot, ".claude", "skills"), join(projectRoot, ".agent", "skills")], L28: override: [], Write operation from scripts/postinstall.js: L1: import { existsSync, mkdirSync, copyFileSync, readFileSync, readdirSync } from "fs"; L2: import { join, resolve } from "path"; ... L40: for (const dest of group.dests) { L41: if (!existsSync(dest)) mkdirSync(dest, { recursive: true }); L42: for (const file of files) { ... L44: if (group.override.includes(file) || !existsSync(dst)) { L4

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/skill-groups.jsView on unpkg · L1

dist/style.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/style.cssView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 16-56json

16 },

17 "./style.css": "./dist/style.css",

18 "./skins/*.css": "./dist/skins/*.css",

19 "./skins/*.scss": "./dist/skins/*.scss",

20 "./skins/themes/*.scss": "./dist/skins/themes/*.scss"

21 },

22 "files": [

23 "dist",

24 "readme.md",

25 "CHANGELOG.md",

26 "AI_REFERENCE.md",

27 "AI_REF.md",

28 ".ai",

29 "skills",

30 "scripts/postinstall.js",

31 "scripts/setup.js",

32 "scripts/skill-groups.js",

33 "design-system.md"

34 ],

35 "scripts": {

36 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "up": "npm run build && npm publish",

38 "dev": "vite --mode playground",

39 "lib": "vite",

40 "build": "vite build",

41 "build:playground": "vite build --mode playground",

42 "build:skins": "vite build --mode skins"

43 },

44 "keywords": [

45 "vue",

46 "vue3",

47 "component-library",

48 "vite"

49 ],

50 "author": "appsbd",

51 "license": "MIT",

52 "peerDependencies": {

53 "@appsbd/vue3-elite-grid": ">=2.0.4",

54 "@lucide/vue": ">=1.28.0",

55 "@vee-validate/rules": ">=4.15.1",

56 "bootstrap": ">=5.3.7",

dist/vue3-appsbd-ui.cjs.jsView file

•matchType = malicious_source_fingerprint_signature signature = 47179ce310083d2f signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @appsbd/vue3-appsbd-ui@1.0.17 matchedPath = dist/vue3-appsbd-ui.cjs.js matchedIdentity = npm:QGFwcHNiZC92dWUzLWFwcHNiZC11aQ:1.0.17 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/vue3-appsbd-ui.cjs.jsView on unpkg

310.vue-echarts-inner{flex-grow:1;min-width:0;width:auto!important;height:auto!important} L311: `,{});var T$=function(){if(bo!=null)return bo;if(typeof HTMLElement>"u"||typeof customElements>"u")return bo=!1;try{new Function("tag",`class EChartsElement extends HTMLElement { L312: __dispose = null;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/vue3-appsbd-ui.cjs.jsView on unpkg · L310

scripts/skill-groups.jsView file

Lines 1-21javascript

1import { join } from "path";

2

3// Central config for all agent skill destinations.

4// Add new agents here — postinstall.js and setup.js both use this.

5

6const OPTIONAL_AGENTS = {

7 cursor: (pkgRoot,

dist/style.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/style.cssView on unpkg