registry / @boomi/exosphere / 8.1.0
@boomi/exosphere@8.1.0
A library of Web Components
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe postinstall hook automatically configures the package's own MCP server in the consumer project's agent configuration, so this warrants a warning as agent extension lifecycle risk. The opt-out and narrow package-owned entry do not establish a broader attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installing the package with its postinstall hook enabled and without the opt-out variable.
Impact
The MCP server is configured to load in Claude Code after restart.
Mechanism
The hook creates or updates the project's .mcp.json with a command that launches this package's MCP server.
AI rationale
The postinstall hook automatically configures the package's own MCP server in the consumer project's agent configuration, so this warrants a warning as agent extension lifecycle risk. The opt-out and narrow package-owned entry do not establish a broader attack.
Evidence
package.jsonscripts/postinstall-mcp.js.mcp.json
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs the MCP setup script in postinstall.
- The script targets the consumer project's .mcp.json and configures the package's MCP server.
- The install hook writes the configuration automatically, without a consent prompt.
Evidence against
- The hook has an environment-variable opt-out.
- The configuration entry is limited to this package's own MCP server.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-mcp.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/components/rich-input-suggestion/rich-input-suggestion.jsView file
1var Ps=Object.create;var pn=Object.defineProperty;var ki=Object.getOwnPropertyDescriptor;var js=Object.getOwnPropertyNames;var Hs=Object.getPrototypeOf,Is=Object.prototype.hasOwnPr...
L2: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var d,g=!0,E=!1;return{s:function(){s=s.call(i)},n:function(){var y=s.next();return g=y.done,y}...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/components/rich-input-suggestion/rich-input-suggestion.jsView on unpkg · L1dist/mcp-server/index.jsView file
Findings
1 Critical3 High5 Medium7 Low
CriticalAi Agent Control Hijackscripts/postinstall-mcp.js
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/components/avatar/avatar.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/react/node/index.js
MediumDynamic Requiredist/mcp-server/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/components/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/components/rich-input-suggestion/rich-input-suggestion.js
LowFilesystem
Affected versions and remediation
This report applies to @boomi/exosphere@8.1.0.
See all versions of @boomi/exosphere for other recorded verdicts.
- Review the evidence and your use of @boomi/exosphere@8.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.