registry / AI-agent control-surface risk / @blazeinstall/hyperglob

@blazeinstall/hyperglob

A multi-threaded, AST-aware, zero-copy file discovery engine designed to replace legacy globbing for AI agents, monorepos, and high-performance developer tooling.

This report shows the evidence for @blazeinstall/hyperglob@1.0.5. 2 of 3 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

Source confirms an automatic install hook that adds the package’s MCP server to multiple agent configuration surfaces without consent. This is an unconsented install-time AI-agent control-surface change.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

The package’s postinstall hook runs during installation.

Impact

Affected agents can load the package’s file-query tools in later sessions.

Mechanism

The installer adds a local server entry to multiple agent configuration files when an entry for this package is absent; one entry is explicitly enabled.

Policy narrative

The postinstall hook writes MCP server registrations into global and project settings for several AI-agent tools without asking first. Those registrations point agents to this package’s file-query server.

AI rationale

Evidence

package.jsonscripts/install.jsmcp.js

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

package.json runs scripts/install.js automatically after installation.
The installer writes changed agent configuration files without prompting for consent.
The installer adds the package’s MCP server to global and project agent settings when no existing entry is present.
It also enables a global Kilo Code entry and adds entries to global and project Cursor settings.
mcp.js exposes file-query tools to agents that load the server.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 26.5 KB of source, external domains: github.com

Source & flagged code

6 flagged

package.jsonView file

Lines 37-67json

37 "monorepo",

38 "ai-agents"

39 ],

40 "license": "MIT",

41 "main": "index.js",

42 "module": "index.mjs",

43 "name": "@blazeinstall/hyperglob",

44 "repository": {

45 "type": "git",

46 "url": "git+https://github.com/Nom-nom-hub/hyperglob.git"

47 },

48 "scripts": {

49 "bench": "node bench/run.mjs",

50 "build": "node scripts/build-native.mjs",

51 "build:debug": "node scripts/build-native.mjs --debug",

52 "example": "node examples/prd-examples.js",

53 "test": "npm run build && node --test tests/hyperglob.test.js",

54 "bench:parity": "node bench/parity.mjs",

55 "bench:real": "node bench/real-repo.mjs",

56 "bench:check": "node bench/check-regression.mjs",

57 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L57

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L57

58 },

59 "types": "index.d.ts",

60 "version": "1.0.5",

High

Ai Review Evidence

package.json runs scripts/install.js automatically after installation.

package.jsonView on unpkg · L57

61 "dependencies": {

62 "@blazeinstall/hyperglob": "^1.0.2"

63 },

64 "allowScripts": {

65 "@blazeinstall/hyperglob@1.0.2": true

66 }

67}

index.jsView file

Lines 1-22javascript

1'use strict';

3const fs = require('fs');

4const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/install.jsView file

Lines 33-73javascript

33 f.on('finish', () => { console.log('hyperglob: binary installed.'); });

34 f.on('error', (e) => { try { fs.unlinkSync(dest); } catch {} console.warn

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

57"postinstall": "node scripts/install.js" }, "types": "index.d.ts", "version": "1.0.5

High

Ai Review Evidence

package.json runs scripts/install.js automatically after installation.

package.jsonView on unpkg · L57

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

Findings

1 Critical3 High4 Medium4 Low

CriticalAi Agent Control Hijackscripts/install.js

HighInstall Time Lifecycle Scriptspackage.json

HighPrevious Version Dangerous Deltascripts/install.js

HighAi Review Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requireindex.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @blazeinstall/hyperglob@1.0.5.

The versions list below shows the verdict for each recorded version.

Avoid installing @blazeinstall/hyperglob@1.0.5. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-16 21:42:40.964Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

1.0.5latestshownMaliciousSoft block: AI-agent control surfaceBlockPublishedOct 16, 2026, 9:38 PM 1.0.4MaliciousSoft block: AI-agent control surfaceBlockPublishedOct 16, 2026, 9:29 PM 0.4.2Clean—AllowPublishedOct 16, 2026, 9:13 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other AI-agent control-surface risk packages

Runtime surface

Behavioral surface

Source & flagged code

Related packages

Other AI-agent control-surface risk packages