@boomi/exosphere@8.1.1

A library of Web Components

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The install hook modifies Claude Code's project MCP configuration without prompting, but it registers this package's own server and provides an explicit environment-variable opt-out. Under the agent integration policy, this warrants a warning rather than a block.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Installing the package with npm when neither skip environment variable is set.

Impact

The agent can load Exosphere's MCP server after restart, without an installation-time consent prompt.

Mechanism

The hook writes a command entry pointing to this package's local MCP server into the project-level agent configuration.

AI rationale

Evidence

package.jsonscripts/postinstall-mcp.js.mcp.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json runs scripts/postinstall-mcp.js automatically after installation.
The postinstall script can be skipped with either of two environment variables; otherwise it targets the consumer project's .mcp.json and registers this package's MCP server.
The script writes the registration into .mcp.json and replaces an existing Exosphere entry; this is first-party package-owned agent setup.
The MCP server starts over standard input/output when invoked.
Inspected avatar and React output show bundled component and React library code; no attack behavior was identified in those excerpts.

Evidence against

The setup hook does not ask for consent; the opt-out requires a user-configured environment variable. It changes the consumer's agent configuration during installation.

Behavioral surface

Source

DynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinified

Source & flagged code

7 flagged

package.jsonView file

Lines 105-145json

105 "test:playwright:dev": "playwright test --ui",

106 "test:playwright:headed": "playwright test --headed",

107 "coverage": "vitest run --coverage",

108 "analyze": "wca analyze",

109 "lint": "npm run eslint && stylelint \"src/components/**/*.styles.ts\" \"src/components/**/*.scss\"",

110 "lint:fix": "npm run eslint:fix && stylelint \"src/components/**/*.styles.ts\" \"src/components/**/*.scss\" --fix",

111 "eslint": "eslint \"src/components/**/*.ts\" \"src/react/**/*.ts\"",

112 "eslint:fix": "eslint \"src/components/**/*.ts\" \"src/react/**/*.ts\" --fix",

113 "create-component": "node scripts/create-component.js",

114 "ui-kit": "sass --style=compressed --no-source-map src/styles/ai-kit.css dist/ui-kit/ai.css && sass --style=compressed --no-source-map src/styles/discover-kit.css dist/ui-kit/discover.css",

115 "scss": "sass --style=compressed --no-source-map --load-path=node_modules src/styles/styles.scss dist/styles.css && sass src/styles/exo-component-theme.scss dist/exo-component-theme.css --style=compressed --no-source-map --load-path=node_modules && sass src/styles/exo-table-styles.scss dist/exo-table-styles.css --style=compressed --no-source-map --load-path=node_modules && npm run ui-kit",

116 "scss:watch": "sass --watch --no-source-map src/styles/styles.scss dist/styles.css src/styles/ai-kit.css dist/ui-kit/ai.css src/styles/discover-kit.css dist/ui-kit/discover.css",

117 "icons-to-json": "node ./scripts/icons-to-json.js",

118 "generate-icons-meta": "npm run icons-to-json src/components/icon/icons/v1/assets src/components/icon/icons/v1/icons-story-map.json && npm run icons-to-json src/components/icon/icons/v2/assets src/components/icon/icons/v2/icons-story-map.json && npm run icons-to-json src/components/icon/icons/v3/assets src/components/icon/icons/v3/icons-story-map.json && npm run icons-to-json src/components/icon/icons/FullColor src/components/icon/icons/FullColor/icons-story-map.json && node scripts/load-icons.js",

119 "sonar-scanner": "sonar-scanner",

120 "version": "npm run update-auto-changelog",

121 "preversion": "npm i && npm run clean && rimraf node_modules && npm i",

122 "postversion": "npm run build && npm pack",

123 "update-rebase": "cross-env-shell git checkout $npm_config_branch && git pull --rebase",

124 "prepare": "node .husky/install.mjs",

125 "postinstall": "node ./scripts/postinstall-mcp.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L125

126 "generate-css-variables-json": "node scripts/generate-css-tokens.mjs",

127 "build:icons": "node scripts/build-icons.mjs",

128 "generate-rem-adjuster-file": "node scripts/generate-adjust-rem-script.mjs",

129 "validate-metadata": "node scripts/validate-component-metadata.js",

130 "mcp:generate-registry": "node scripts/generate-component-registry.mjs",

131 "mcp:bundle": "cd mcp-server && ../node_modules/.bin/esbuild src/index.ts --bundle --platform=node --target=node18 --outfile=../dist/mcp-server/index.js",

132 "mcp:copy-data": "node scripts/copy-mcp-data.js",

133 "mcp:build": "npm ci --prefix mcp-server && npm run mcp:generate-registry && npm run mcp:bundle && npm run mcp:copy-data",

134 "mcp:dev": "node dist/mcp-server/index.js",

135 "test:a11y": "playwright test playwright/a11y.spec.ts"

136 },

137 "auto-changelog": {

138 "output": "docs/stories/Miscellaneous/CHANGELOG.mdx",

139 "template": "keepachangelog",

140 "unreleased": true,

141 "commitLimit": false,

142 "replaceText": {

143 "(UU-\\d+)": "[$1](https://boomii.atlassian.net/browse/$1)"

144 }

145 },

dist/components/rich-input-suggestion/rich-input-suggestion.jsView file

Lines 1-21javascript

1var Ps=Object.create;var pn=Object.defineProperty;var ki=Object.getOwnPropertyDescriptor;var js=Object.getOwnPropertyNames;var Hs=Object.getPrototypeOf,Is=Object.prototype.hasOwnProperty;var

dist/mcp-server/index.jsView file

8var __hasOwnProp = Object.prototype.hasOwnProperty; L9: var __commonJS = (cb, mod) => function __require() { L10: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/mcp-server/index.jsView on unpkg · L8

scripts/postinstall-mcp.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

dist/components/index.jsView file

•path = dist/components/index.js kind = oversized_source_file sizeBytes = 6396902 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/components/index.jsView on unpkg

dist/components/avatar/avatar.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 25

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/components/avatar/avatar.js#virtual:normalized:round1View on unpkg

dist/react/node/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @boomi/exosphere@8.0.0 matchedIdentity = npm:QGJvb21pL2V4b3NwaGVyZQ:8.0.0 similarity = 0.433 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/react/node/index.jsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall-mcp.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/components/rich-input-suggestion/rich-input-suggestion.jsView file

1var Ps=Object.create;var pn=Object.defineProperty;var ki=Object.getOwnPropertyDescriptor;var js=Object.getOwnPropertyNames;var Hs=Object.getPrototypeOf,Is=Object.prototype.hasOwnPr... L2: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var d,g=!0,E=!1;return{s:function(){s=s.call(i)},n:function(){var y=s.next();return g=y.done,y}...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/components/rich-input-suggestion/rich-input-suggestion.jsView on unpkg · L1

dist/mcp-server/index.jsView file

Findings

1 Critical3 High5 Medium7 Low

CriticalAi Agent Control Hijackscripts/postinstall-mcp.js

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limiteddist/components/avatar/avatar.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/react/node/index.js

MediumDynamic Requiredist/mcp-server/index.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/components/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/components/rich-input-suggestion/rich-input-suggestion.js

LowFilesystem

Affected versions and remediation

This report applies to @boomi/exosphere@8.1.1.

See all versions of @boomi/exosphere for other recorded verdicts.

Review the evidence and your use of @boomi/exosphere@8.1.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 01:34:14.040Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.