Loading npm security reports…

@bfrs/agentic-components@0.4.9: AI-agent control-surface risk | LPM Firewall

registry / @bfrs/agentic-components / 0.4.9

@bfrs/agentic-components@0.4.9

Shiprocket agentic component library and documentation showcase.

AI Security Review

scanned 12d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic installation mutates the consumer project's broad AI-agent instruction files. This can influence agent behavior in repositories that use AGENTS.md or CLAUDE.md.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm installation of @bfrs/agentic-components@0.4.9

Impact

Unconsented persistent modification of foreign AI-agent control surfaces in the consuming project.

Mechanism

postinstall copies agent context and creates/appends AI-agent instruction files

Policy narrative

On npm postinstall, the script resolves the consumer project from INIT_CWD, copies its agent-context document there, and creates or appends references in AGENTS.md and CLAUDE.md (including lowercase variants). Those repository-level files are broadly consumed as AI-agent instructions, so the package persists an unrequested control-surface change during dependency installation.

Rationale

Source inspection confirms a concrete, automatic postinstall mutation of foreign/broad AI-agent instruction files. Under the install-control-surface policy, this is blocking even though no network or credential theft was found.

Evidence

package.jsonscripts/postinstall.cjsBFRS_AGENTIC_COMPONENTS.mdREADME.mddist/index.jsdist/custom-elements.jsAGENTS.mdagents.mdCLAUDE.mdclaude.md

Decision evidence

Source & flagged code

4 flagged

package.jsonView file

Lines 31-71json

31 "import": "./dist/theme.js"

32 },

33 "./styles": {

34 "default": "./dist/style.css"

35 },

36 "./fonts.css": {

37 "default": "./dist/fonts.css"

38 },

39 "./fonts": {

40 "default": "./dist/fonts.css"

41 }

42 },

43 "main": "./dist/index.js",

44 "types": "./dist/public-api.d.ts",

45 "files": [

46 "dist",

47 "BFRS_AGENTIC_COMPONENTS.md",

48 "scripts/postinstall.cjs"

49 ],

50 "scripts": {

51 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L51

52 "dev": "vite --host 0.0.0.0",

53 "build": "npm run build:lib && npm run build:demo",

54 "build:lib": "tsc -p tsconfig.json && vite build --config vite.lib.config.ts && vite build --config vite.custom-elements.config.ts && node scripts/copy-fonts.cjs",

55 "build:custom-elements": "vite build --config vite.custom-elements.config.ts",

56 "build:demo": "vite build --config vite.config.ts",

57 "preview": "vite preview --host 0.0.0.0 --outDir dist-demo",

58 "typecheck": "tsc -p tsconfig.json --noEmit",

59 "test:contracts": "node --test scripts/*.test.cjs",

60 "lint": "eslint . --ext ts,tsx --max-warnings 0",

61 "changeset": "changeset",

62 "version-packages": "changeset version",

63 "release": "npm run build:lib && changeset publish"

64 },

65 "dependencies": {

66 "@phosphor-icons/react": "^2.1.10",

67 "@radix-ui/react-checkbox": "^1.3.3",

68 "@radix-ui/react-dialog": "^1.1.15",

69 "@radix-ui/react-dropdown-menu": "^2.1.16",

70 "@radix-ui/react-popover": "^1.1.15",

71 "@radix-ui/react-radio-group": "^1.3.8",

scripts/postinstall.cjsView file

Lines 1-35javascript

1#!/usr/bin/env node

2"use strict";

3

4const fs = require("fs");

5const path = require("path");

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @bfrs/agentic-components@0.6.4 matchedIdentity = npm:[redacted]:0.6.4 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg