Loading npm security reports…

@geraldmaron/construct@2.1.1: AI-agent control-surface risk | LPM Firewall

registry / @geraldmaron/construct / 2.1.1

@geraldmaron/construct@2.1.1

Construct — agent orchestration layer for OpenCode, Claude Code, and other coding surfaces

AI Security Review

scanned 15d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall mutates a consuming project's Claude Code control surface without an explicit setup command. It installs agent instructions, MCP wiring, and command hooks that run in later Claude sessions.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install of the package in a project with package.json

Impact

Alters a foreign AI-agent's project behavior and executes package-controlled hook commands on agent events.

Mechanism

postinstall stages Construct launcher and Claude agent/hook configuration

Policy narrative

On npm installation, the postinstall hook stages a launcher and runs the adapter synchronizer in the consumer project. The synchronizer writes Claude Code agent configuration, project settings containing command hooks, and MCP configuration. Those hooks later invoke package-controlled code for Claude tool events. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

The lifecycle hook creates and configures a consumer project's Claude Code control surface automatically. Under the install-control-surface policy, this concrete behavior requires blocking even though no secret exfiltration was confirmed.

Evidence

package.jsonbin/construct-postinstall.mjslib/install/stage-project.mjsscripts/sync-worker-profiles.mjsplatforms/claude/settings.template.json<consumer>/.construct/run.mjs<consumer>/.construct/install-manifest.json

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/construct-postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

platforms/opencode/sync-config.mjsView file

6import fs from "node:fs"; L7: import { spawnSync } from "node:child_process"; L8: import { readOpenCodeConfig, writeOpenCodeConfig, findOpenCodeConfigPath } from "../../lib/opencode-config.mjs";

High

Child Process

Package source references child process execution.

platforms/opencode/sync-config.mjsView on unpkg · L6

•matchType = normalized_sha256 matchedPackage = @geraldmaron/construct@1.5.5 matchedPath = platforms/opencode/sync-config.mjs matchedIdentity = npm:QGdlcmFsZG1hcm9uL2NvbnN0cnVjdA:1.5.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

platforms/opencode/sync-config.mjsView on unpkg

templates/distribution/run.mjsView file

221' - Bootstrap a binary: ./.construct/bootstrap.sh (POSIX)\n' + L222: ' powershell -File .construct/bootstrap.ps1 (Windows)\n' L223: );

High

Shell

Package source references shell execution.

templates/distribution/run.mjsView on unpkg · L221

lib/deck-export-pptx.mjsView file

24L25: const require = createRequire(import.meta.url); L26: const MODULE_URL = pathToFileURL(fileURLToPath(import.meta.url)).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/deck-export-pptx.mjsView on unpkg · L24

lib/document-assets.mjsView file

20import crypto from 'node:crypto'; L21: import { spawnSync } from 'node:child_process'; L22: L23: const REMOTE_REF = /^(?:https?:|data:)/i; L24: const HTTP_REF = /^https?:/i; ... L37: } catch { return null; } L38: const script = 'const u=process.argv[1],d=process.argv[2];fetch(u).then(r=>{if(!r.ok)process.exit(2);return r.arrayBuffer();}).then(b=>{require("node:fs").writeFileSync(d,Buffer.fr... L39: const res = spawnSync(process.execPath, ['-e', script, url, dest], { timeout: 20000 }); ... L122: L123: export function buildAssetManifest(doc, { baseDir = process.cwd() } = {}) { L124: const blocks = (doc?.sections || []).flatMap((section) => section.blocks || []);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/document-assets.mjsView on unpkg · L20

lib/embed/supervision.mjsView file

13* Linux — systemd user unit at ~/.config/systemd/user/<systemdUnit> L14: * Windows — Task Scheduler (schtasks) entry named <winTask> L15: * ... L26: import path from 'node:path'; L27: import { spawnSync } from 'node:child_process'; L28: ... L30: L31: const HOME = os.homedir(); L32: const PLATFORM = process.platform; L33: const NODE_BIN = process.execPath; ... L39: const result = spawnSync('which', ['construct'], { encoding: 'utf8' }); L40: return result.status === 0 ? result.stdout.trim() : 'construct';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/embed/supervision.mjsView on unpkg · L13

lib/runtime/whisper-bootstrap.mjsView file

23import { existsSync, mkdirSync, statSync, createWriteStream } from 'node:fs'; L24: import { spawnSync } from 'node:child_process'; L25: import { pipeline } from 'node:stream/promises'; ... L30: L31: const HF_MODEL_BASE_URL = 'https://huggingface.co/ggerganov/whisper.cpp/resolve/main'; L32: const DEFAULT_MODEL = process.env.CONSTRUCT_WHISPER_MODEL || 'base.en'; L33: const KNOWN_MODELS = new Set(['tiny', 'tiny.en', 'base', 'base.en', 'small', 'small.en', 'medium', 'medium.en', 'large-v3', 'large-v3-turbo']);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/runtime/whisper-bootstrap.mjsView on unpkg · L23

lib/mcp/tools/memory.mjsView file

14export async function memorySearch(args) { L15: const cwd = args.cwd ? resolve(String(args.cwd)) : process.cwd(); L16: const project = args.project || null; ... L28: try { L29: const hybrid = await buildHybridSearchResultsAsync(cwd, query, { limit, env: process.env }); L30: hybridResults = (hybrid.results || []).map((r) => ({ ... L177: const cloudId = process.env.ATLASSIAN_CLOUD_ID || 'hashicorp.atlassian.net'; L178: const res = await fetch(`https://api.atlassian.com/rovo/v1/search`, { L179: method: 'POST', ... L183: }, L184: body: JSON.stringify({ query, limit: topK }), L185: });

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

lib/mcp/tools/memory.mjsView on unpkg · L14

lib/providers/d2.mjsView file

8import fs from 'node:fs'; L9: import { spawnSync } from 'node:child_process'; L10: import { findProviderCard } from './provider-card.mjs'; ... L32: L33: function whichBin(name, env = process.env) { L34: const cmd = process.platform === 'win32' ? 'where' : 'which'; L35: const result = spawnSync(cmd, [name], { encoding: 'utf8', env }); L36: if (result.status !== 0) return null; L37: return (result.stdout || '').trim().split('\n')[0] || null; L38: } ... L67: ? 'brew install d2 (or: brew install graphviz for dot fallback)' L68: : 'See https://d2lang.com/tour/install'),

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/providers/d2.mjsView on unpkg · L8

packages/construct-ui/prototypes/graph-viewer/build.mjsView file

29L30: execFileSync('npx', ['esbuild', path.join(distDir, '_entry-with-cytoscape.mjs'), '--bundle', '--format=esm', '--minify', `--outfile=${path.join(distDir, 'with-cytoscape.min.mjs')}`... L31:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

packages/construct-ui/prototypes/graph-viewer/build.mjsView on unpkg · L29

lib/document-extract/docling-sidecar.pyView file

•path = lib/document-extract/docling-sidecar.py kind = build_helper sizeBytes = 7465 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/document-extract/docling-sidecar.pyView on unpkg

templates/distribution/construct-reference.docxView file

•path = [redacted]-reference.docx kind = high_entropy_blob sizeBytes = 11466 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

templates/distribution/construct-reference.docxView on unpkg

•path = [redacted]-reference.docx kind = compressed_blob sizeBytes = 11466 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

templates/distribution/construct-reference.docxView on unpkg

•path = [redacted]-reference.docx kind = nested_archive_needs_inspection sizeBytes = 11466 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

templates/distribution/construct-reference.docxView on unpkg

lib/doctor/watchers/mcp-protocol.mjsView file

•matchType = normalized_sha256 matchedPackage = @geraldmaron/construct@1.5.5 matchedPath = lib/doctor/watchers/mcp-protocol.mjs matchedIdentity = npm:QGdlcmFsZG1hcm9uL2NvbnN0cnVjdA:1.5.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/doctor/watchers/mcp-protocol.mjsView on unpkg

lib/providers/secret-resolver.mjsView file

•matchType = normalized_sha256 matchedPackage = @geraldmaron/construct@1.5.5 matchedPath = lib/providers/secret-resolver.mjs matchedIdentity = npm:QGdlcmFsZG1hcm9uL2NvbnN0cnVjdA:1.5.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/providers/secret-resolver.mjsView on unpkg

lib/distill.mjsView file

•matchType = normalized_sha256 matchedPackage = @geraldmaron/construct@1.5.5 matchedPath = lib/distill.mjs matchedIdentity = npm:QGdlcmFsZG1hcm9uL2NvbnN0cnVjdA:1.5.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/distill.mjsView on unpkg

lib/reflect.mjsView file

•matchType = normalized_sha256 matchedPackage = @geraldmaron/construct@1.5.5 matchedPath = lib/reflect.mjs matchedIdentity = npm:QGdlcmFsZG1hcm9uL2NvbnN0cnVjdA:1.5.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/reflect.mjsView on unpkg