Loading npm security reports…

@bfrs/agentic-components@0.7.2: AI-agent control-surface risk | LPM Firewall

registry / @bfrs/agentic-components / 0.7.2

@bfrs/agentic-components@0.7.2

Shiprocket agentic component library and documentation showcase.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package silently modifies the consuming project's AI-agent instruction files and package scripts. It can create AGENTS.md or CLAUDE.md when absent and forces its linter before recognized build commands.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during consumer installation

Impact

Persists package-authored guidance and an enforced executable guard in the consumer project without an explicit user command.

Mechanism

install-time foreign project and AI-agent control-surface mutation

Policy narrative

On npm install, postinstall selects the consumer project via INIT_CWD, copies package-authored agent context into it, creates or appends AGENTS.md and CLAUDE.md, and rewrites its package.json. The rewrite adds bfrs-agentic-lint and prepends it to selected build scripts, causing future builds to execute package-provided policy code. This is unconsented postinstall mutation of a foreign AI-agent control surface and project execution configuration.

Rationale

The lifecycle hook performs concrete, automatic writes outside the package, including broad AI-agent instruction files and consumer build commands. That meets the blocking policy even though no exfiltration or network activity was found.

Evidence

package.jsonscripts/postinstall.cjsscripts/lint/cli.cjsBFRS_AGENTIC_COMPONENTS.mdAGENTS.mdCLAUDE.md

Decision evidence

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.cjsView file

35const agentFileGroups = [ L36: ["AGENTS.md", "agents.md"], L37: ["CLAUDE.md", "claude.md"] L38: ]; ... L63: if (!fs.existsSync(filePath)) { L64: fs.writeFileSync(filePath, `${referenceLine}\n`, "utf8"); L65: return "created"; ... L72: L73: fs.writeFileSync(filePath, `${ensureTrailingNewline(existing)}\n${referenceLine}\n`, "utf8"); L74: return "updated"; ... L133: L134: fs.writeFileSync(packageJsonPath, `${JSON.stringify(pkg, null, 2)}\n`, "utf8");

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.cjsView on unpkg · L35

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @bfrs/agentic-components@0.7.1 matchedPath = dist/index.js matchedIdentity = npm:[redacted]:0.7.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

scripts/lint/cli.cjsView file

•matchType = malicious_source_fingerprint_signature signature = 9c81f6bfcf493483 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @bfrs/agentic-components@0.7.1 matchedPath = scripts/lint/cli.cjs matchedIdentity = npm:[redacted]:0.7.1 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/lint/cli.cjsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 35-75json

35 },

36 "./fonts.css": {

37 "default": "./dist/fonts.css"

38 },

39 "./fonts": {

40 "default": "./dist/fonts.css"

41 }

42 },

43 "main": "./dist/index.js",

44 "types": "./dist/public-api.d.ts",

45 "bin": {

46 "bfrs-agentic-lint": "./scripts/lint/cli.cjs"

47 },

48 "files": [

49 "dist",

50 "BFRS_AGENTIC_COMPONENTS.md",

51 "scripts/postinstall.cjs",

52 "scripts/lint"

53 ],

54 "scripts": {

55 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L55

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L55

56 "dev": "vite --host 0.0.0.0",

57 "build": "npm run build:lib && npm run build:custom-elements && npm run build:demo",

58 "build:lib": "tsc -p tsconfig.json && vite build --config vite.lib.config.ts && vite build --config vite.custom-elements.config.ts && node scripts/copy-fonts.cjs",

59 "build:custom-elements": "vite build --config vite.custom-elements.config.ts",

60 "build:demo": "vite build --config vite.config.ts",

61 "preview": "vite preview --host 0.0.0.0 --outDir dist-demo",

62 "typecheck": "tsc -p tsconfig.json --noEmit",

63 "test:contracts": "node --test scripts/*.test.cjs",

64 "test:unit": "vitest run",

65 "lint": "eslint . --ext ts,tsx --max-warnings 0",

66 "changeset": "changeset",

67 "version-packages": "changeset version",

68 "release": "npm run build:lib && changeset publish"

69 },

70 "dependencies": {

71 "@phosphor-icons/react": "^2.1.10",

72 "@radix-ui/react-checkbox": "^1.3.3",

73 "@radix-ui/react-dialog": "^1.1.15",

74 "@radix-ui/react-dropdown-menu": "^2.1.16",

75 "@radix-ui/react-popover": "^1.1.15",

scripts/postinstall.cjsView file

Lines 15-55javascript

15const lintScriptCommand = "bfrs-agentic-lint all";

16const buildScriptNames = ["build", "build:spa", "build:web-component", "build-ec2"];

17const knownGuardCommands

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = @bfrs/agentic-components@0.7.1 matchedPath = dist/index.js matchedIdentity = npm:[redacted]:0.7.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

scripts/lint/cli.cjsView file

•matchType = malicious_source_fingerprint_signature signature = 9c81f6bfcf493483 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @bfrs/agentic-components@0.7.1 matchedPath = scripts/lint/cli.cjs matchedIdentity = npm:[redacted]:0.7.1 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/lint/cli.cjsView on unpkg