registry / @boomi/exosphere / 8.0.0
@boomi/exosphere@8.0.0
A library of Web Components
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is a guarded first-party agent-extension lifecycle risk, not concrete malware. The package should warn because it automatically changes a project AI-agent control configuration during postinstall.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall when installed under node_modules, unless EXOSPHERE_SKIP_MCP or npm_config_exosphere_skip_mcp is set
Impact
Enables the package's MCP tools in a project AI-agent configuration without an explicit setup command.
Mechanism
automatic first-party MCP configuration and local stdio server registration
AI rationale
This is a guarded first-party agent-extension lifecycle risk, not concrete malware. The package should warn because it automatically changes a project AI-agent control configuration during postinstall.
Evidence
package.jsonscripts/postinstall-mcp.jsdist/mcp-server/index.jsprojectRoot/.mcp.jsondist/mcp-server/data/component-registry.jsondist/mcp-server/data/icon-registry.json
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- package.json runs postinstall-mcp.js on install.
- scripts/postinstall-mcp.js automatically writes projectRoot/.mcp.json.
- The install hook registers an exosphere MCP command without explicit user action.
Evidence against
- The hook only adds/updates its own mcpServers.exosphere entry.
- MCP command points to the package-local dist/mcp-server/index.js.
- dist/mcp-server/index.js exposes local component/icon data via stdio; no network or shell execution found.
- Malformed existing .mcp.json is left unchanged; opt-out environment variables are supported.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-mcp.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/components/rich-input-suggestion/rich-input-suggestion.jsView file
1var Ps=Object.create;var pn=Object.defineProperty;var ki=Object.getOwnPropertyDescriptor;var js=Object.getOwnPropertyNames;var Hs=Object.getPrototypeOf,Is=Object.prototype.hasOwnPr...
L2: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var d,g=!0,E=!1;return{s:function(){s=s.call(i)},n:function(){var y=s.next();return g=y.done,y}...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/components/rich-input-suggestion/rich-input-suggestion.jsView on unpkg · L1dist/mcp-server/index.jsView file
Findings
1 Critical1 High5 Medium7 Low
CriticalAi Agent Control Hijackscripts/postinstall-mcp.js
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requiredist/mcp-server/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/components/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/components/rich-input-suggestion/rich-input-suggestion.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @boomi/exosphere@8.0.0.
See all versions of @boomi/exosphere for other recorded verdicts.
- Review the evidence and your use of @boomi/exosphere@8.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.