Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@getmikie/cli@1.1.100: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as agent extension risk

Allowed by default with warning: install-time first-party agent extension setup was detected.

View on npm All versions Policy details

registry / @getmikie/cli / 1.1.100

@getmikie/cli@1.1.100

Native Mikie relay launcher for MCP clients

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package automatically starts its selected native binary. The visible wrapper cannot establish what that native reconciliation operation changes.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall during package installation

Impact

Potential first-party AI-agent extension lifecycle changes; no confirmed exfiltration or destructive action in inspected source.

Mechanism

automatic native trajectory reconciliation

AI rationale

Automatic install-time execution of an unavailable native component creates unresolved lifecycle risk. The inspected wrapper contains safeguards and no concrete theft, remote payload, or destructive behavior.

Evidence

package.jsonscripts/reconcile-install.mjslib/launcher.mjs

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

The manifest runs a postinstall script automatically.
The postinstall script resolves and executes an opaque native platform binary for trajectory reconciliation.

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

The launcher’s update path is designed to manage Claude registration and hook paths.

Evidence against

No self-dependency is declared.
The inspected JavaScript has no credential harvesting, exfiltration, destructive command, or shell execution.
Registry access is confined to the explicit update command.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 134 KB of source, external domains: registry.npmjs.org

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/reconcile-install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

14"scripts": { "postinstall": "node ./scripts/reconcile-install.mjs" },

Medium

Suspicious Lifecycle Evidence

The manifest runs a postinstall script automatically.

package.jsonView on unpkg · L14

scripts/reconcile-install.mjsView file

42const binary = await resolveBinary(); const result = await commands.run(binary, RECONCILIATION_ARGUMENTS, { shell: false }); if (result.code !== 0) { throw new Error("native trajectory-store reconciliation failed"); } return [redacted](result.stdout, { allowNotConfigured: true });

Medium

Suspicious Lifecycle Evidence

The postinstall script resolves and executes an opaque native platform binary for trajectory reconciliation.

scripts/reconcile-install.mjsView on unpkg · L42

bin/mikie.mjsView file

140providerPaths: { registration: path.join(customerHome, ".claude.json"), settings: path.join(customerHome, ".claude", "settings.json"), ownership: path.join(customerHome, ".claude", "mikie-evidence-hook-ownership.json"), },

Medium

Ai Review Evidence

The launcher’s update path is designed to manage Claude registration and hook paths.

bin/mikie.mjsView on unpkg · L140

Findings

2 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedpackage.json

MediumEnvironment Vars

MediumSuspicious Lifecycle Evidencepackage.json

MediumSuspicious Lifecycle Evidencescripts/reconcile-install.mjs

MediumAi Review Evidencebin/mikie.mjs

LowScripts Present

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to @getmikie/cli@1.1.100.

See version security history for other recorded verdicts.

Review the evidence and your use of @getmikie/cli@1.1.100 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-05 07:43:01.134Z (UTC).

84%Suspicious

AI assessment confidence

IntentUnknown

TypeAgent extension lifecycle risk

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

Maintainerszyph3r

Version1.1.100

Latest on npm1.1.133

PublishedSep 5, 2026

LicenseApache-2.0

Dependencies4

Integrityverified

Package size26.0 KB

Files6

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → mikie

Runtimenode >=22

Artifact136 KB · 6 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemShellUrlStringsManifest: clean

LPM.dev Registry

© 2026 LPM

Source & flagged code

5 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "@getmikie/cli",

3 "version": "1.1.100",

4 "description": "Native Mikie relay launcher for MCP clients",

5 "license": "Apache-2.0",

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/Zyph3rKeaton/new-ai-language.git"

9 },

10 "type": "module",

11 "bin": {

12 "mikie": "bin/mikie.mjs"

13 },

14 "scripts": {

15 "postinstall": "node ./scripts/reconcile-install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

16 },

Medium

Suspicious Lifecycle Evidence

The manifest runs a postinstall script automatically.

package.jsonView on unpkg · L14

17 "files": [

18 "bin",

19 "lib",

20 "scripts",

21 "README.md"

22 ],

23 "engines": {

24 "node": ">=22"

25 },

26 "optionalDependencies": {

27 "@getmikie/darwin-arm64": "1.1.100",

28 "@getmikie/darwin-x64": "1.1.100",

29 "@getmikie/linux-x64-gnu": "1.1.100",

30 "@getmikie/win32-x64": "1.1.100"

31 },

32 "publishConfig": {

33 "access": "public",

34 "registry": "https://registry.npmjs.org"

35 }

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

scripts/reconcile-install.mjsView file

Lines 22-60javascript

22 platform = process.platform,

23) {

24 const marker = pathIdentity(environment.MIKIE_UPDATE_CANDIDATE_STAGING, platform);

25 const npmPrefix = pathIdentity(environment.npm_config_prefix, platform);

bin/mikie.mjsView file

Lines 120-160javascript

120 platformPackageJson: stagedPlatform,

121 binary: path.join(

122 path.dirname(stagedPlatform),

123 ...selected.binaryPath.split("/"),

124 ),

125

26 return (

27 marker !== null &&

28 marker === npmPrefix &&

29 TRANSACTION_TOKEN.test(environment.MIKIE_UPDATE_CANDIDATE_TOKEN ?? "")

30 );

31}

32

33export async function reconcileInstalledTrajectory({

34 environment = process.env,

35 platform = process.platform,

36 resolveBinary = resolveNativeBinary,

37 commands = createCommandAdapter({ environment, platform }),

38} = {}) {

39 if (isTransactionStagedInstall(environment, platform)) {

40 return { status: "staged_candidate" };

41 }

42 const binary = await resolveBinary();

43 const result = await commands.run(binary, RECONCILIATION_ARGUMENTS, { shell: false });

44 if (result.code !== 0) {

45 throw new Error("native trajectory-store reconciliation failed");

46 }

47 return parseTrajectoryReconciliationReceipt(result.stdout, { allowNotConfigured: true });

Medium

Suspicious Lifecycle Evidence

The postinstall script resolves and executes an opaque native platform binary for trajectory reconciliation.

scripts/reconcile-install.mjsView on unpkg · L42

48}

49

50const scriptIdentity = pathIdentity(fileURLToPath(import.meta.url), process.platform);

51const invokedIdentity = pathIdentity(process.argv[1], process.platform);

52if (scriptIdentity !== null && scriptIdentity === invokedIdentity) {

53 try {

54 await reconcileInstalledTrajectory();

55 } catch (error) {

56 console.error(`Mikie install reconciliation failed: ${error.message}`);

57 process.exitCode = 1;

58 }

59}

60

shims

:

126 process.platform === "win32"

127 ? ["mikie", "mikie.cmd", "mikie.ps1"].map((name) =>

128 path.join(stagingPrefix, name),

129 )

130 : [path.join(stagingPrefix, "bin", "mikie")],

131 };

132 }

133 return {

134 wrapperPackageJson,

135 platformPackageJson: require.resolve(`${selected.packageName}/package.json`),

136 binary: await resolveNativeBinary(),

137 shims: globalShims,

138 };

139 },

140 providerPaths: {

141 registration: path.join(customerHome, ".claude.json"),

142 settings: path.join(customerHome, ".claude", "settings.json"),

143 ownership: path.join(customerHome, ".claude", "mikie-evidence-hook-ownership.json"),

144 },

Medium

Ai Review Evidence

The launcher’s update path is designed to manage Claude registration and hook paths.

bin/mikie.mjsView on unpkg · L140

145 transactionRoot,

146 settleProviderRepair: async (phase, snapshot) => {

147 const settlementBinary = snapshot?.preparedCandidate?.binary;

148 const finalLauncher = snapshot?.preparedCandidate?.finalLauncher;

149 if (!settlementBinary || !finalLauncher) {

150 throw new Error("prepared candidate recovery authority is unavailable");

151 }

152 const settlement = await commands.run(settlementBinary, handoff.repair_command, {

153 shell: false,

154 capture: true,

155 environment: {

156 MIKIE_DISTRIBUTION_MODE: "npm",

157 MIKIE_NPM_UPDATE_TOPOLOGY: UpdateTopology.NpmGlobal,

158 MIKIE_NPM_UPDATE_REPAIR_PHASE: phase,

159 MIKIE_UPDATE_REPAIR_CANDIDATE: settlementBinary,

160 MIKIE_UPDATE_REPAIR_LAUNCHER: finalLauncher,