Loading npm security reports…

@bfrs/agentic-components@0.7.1: AI-agent control-surface risk | LPM Firewall

registry / @bfrs/agentic-components / 0.7.1

@bfrs/agentic-components@0.7.1

Shiprocket agentic component library and documentation showcase.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time code mutates a consuming project's broad AI-agent instruction files and build scripts without an explicit setup command. This establishes persistent package-authored guidance in foreign agent control surfaces.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm install executes postinstall.

Impact

AI coding agents and future builds in the consumer project are influenced by package-controlled content and commands.

Mechanism

Copies agent context, appends AGENTS.md/CLAUDE.md, and rewrites package.json build scripts.

Policy narrative

On installation, the postinstall script resolves the consumer root, copies package-controlled documentation there, creates or appends AGENTS.md or CLAUDE.md, and modifies package.json to run its binary before build commands. These are unconsented writes to a foreign project's broad AI-agent instruction and build-control surfaces.

Rationale

The package concretely performs unconsented postinstall mutation of consumer AGENTS.md/CLAUDE.md and build scripts. This meets the blocking policy for foreign/broad AI-agent control-surface mutation despite no observed exfiltration or network activity.

Evidence

package.jsonscripts/postinstall.cjsBFRS_AGENTIC_COMPONENTS.mdscripts/lint/cli.cjsAGENTS.mdagents.mdCLAUDE.mdclaude.md

Decision evidence

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.cjsView file

35const agentFileGroups = [ L36: ["AGENTS.md", "agents.md"], L37: ["CLAUDE.md", "claude.md"] L38: ]; ... L63: if (!fs.existsSync(filePath)) { L64: fs.writeFileSync(filePath, `${referenceLine}\n`, "utf8"); L65: return "created"; ... L72: L73: fs.writeFileSync(filePath, `${ensureTrailingNewline(existing)}\n${referenceLine}\n`, "utf8"); L74: return "updated"; ... L133: L134: fs.writeFileSync(packageJsonPath, `${JSON.stringify(pkg, null, 2)}\n`, "utf8");

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.cjsView on unpkg · L35

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @bfrs/agentic-components@0.7.0 matchedPath = dist/index.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

scripts/lint/cli.cjsView file

•matchType = malicious_source_fingerprint_signature signature = 9c81f6bfcf493483 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @bfrs/agentic-components@0.7.0 matchedPath = scripts/lint/cli.cjs matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/lint/cli.cjsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 35-75json

35 },

36 "./fonts.css": {

37 "default": "./dist/fonts.css"

38 },

39 "./fonts": {

40 "default": "./dist/fonts.css"

41 }

42 },

43 "main": "./dist/index.js",

44 "types": "./dist/public-api.d.ts",

45 "bin": {

46 "bfrs-agentic-lint": "./scripts/lint/cli.cjs"

47 },

48 "files": [

49 "dist",

50 "BFRS_AGENTIC_COMPONENTS.md",

51 "scripts/postinstall.cjs",

52 "scripts/lint"

53 ],

54 "scripts": {

55 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L55

56 "dev": "vite --host 0.0.0.0",

57 "build": "npm run build:lib && npm run build:custom-elements && npm run build:demo",

58 "build:lib": "tsc -p tsconfig.json && vite build --config vite.lib.config.ts && vite build --config vite.custom-elements.config.ts && node scripts/copy-fonts.cjs",

59 "build:custom-elements": "vite build --config vite.custom-elements.config.ts",

60 "build:demo": "vite build --config vite.config.ts",

61 "preview": "vite preview --host 0.0.0.0 --outDir dist-demo",

62 "typecheck": "tsc -p tsconfig.json --noEmit",

63 "test:contracts": "node --test scripts/*.test.cjs",

64 "test:unit": "vitest run",

65 "lint": "eslint . --ext ts,tsx --max-warnings 0",

66 "changeset": "changeset",

67 "version-packages": "changeset version",

68 "release": "npm run build:lib && changeset publish"

69 },

70 "dependencies": {

71 "@phosphor-icons/react": "^2.1.10",

72 "@radix-ui/react-checkbox": "^1.3.3",

73 "@radix-ui/react-dialog": "^1.1.15",

74 "@radix-ui/react-dropdown-menu": "^2.1.16",

75 "@radix-ui/react-popover": "^1.1.15",

scripts/postinstall.cjsView file

Lines 15-55javascript

15const lintScriptCommand = "bfrs-agentic-lint all";

16const buildScriptNames = ["build", "build:spa", "build:web-component", "build-ec2"];

17const knownGuardCommands

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @bfrs/agentic-components@0.7.0 matchedPath = dist/index.js matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

scripts/lint/cli.cjsView file

•matchType = malicious_source_fingerprint_signature signature = 9c81f6bfcf493483 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @bfrs/agentic-components@0.7.0 matchedPath = scripts/lint/cli.cjs matchedIdentity = npm:[redacted]:0.7.0 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/lint/cli.cjsView on unpkg