Loading npm security reports…

@getmikie/cli@1.1.105: AI-agent control-surface risk | LPM Firewall

registry / @getmikie/cli / 1.1.105

@getmikie/cli@1.1.105

Native Mikie relay launcher for MCP clients

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically executes a native hook-repair command. That command can modify AI-client hook configuration outside the package, while its behavior is not inspectable from this snapshot.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

An opaque native binary can alter the user's AI-agent control surface without an explicit command.

Mechanism

automatic native Claude-hook reconciliation

Policy narrative

The package's postinstall invokes a script that resolves a native executable and runs repair-claude-hooks-v1 automatically in prepare and commit phases. It also derives the user's Codex directory. Because the configuration-changing implementation is inside an uninspectable native optional dependency, the package creates an unconsented install-time AI-agent control-surface mutation path.

AI rationale

Automatic postinstall execution of opaque native code to repair AI-client hooks is a concrete unconsented foreign control-surface mutation. No source-visible exfiltration was needed to establish this install-hook abuse.

Evidence

package.jsonscripts/reconcile-install.mjs.codex

Decision evidence

public snapshot

with false-positive risk.

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/reconcile-install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

14"scripts": { "postinstall": "node ./scripts/reconcile-install.mjs" },

High

Suspicious Lifecycle Evidence

A postinstall hook automatically runs the reconciliation script.

package.jsonView on unpkg · L14

lib/launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.108 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launcher.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 06c2e0c91708f519 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @getmikie/cli@1.1.108 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/launcher.mjsView on unpkg

lib/update.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.108 matchedPath = lib/update.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/update.mjsView on unpkg

scripts/reconcile-install.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.108 matchedPath = scripts/reconcile-install.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/reconcile-install.mjsView on unpkg

523const baseEnvironment = { MIKIE_DISTRIBUTION_MODE: "npm", MIKIE_NPM_UPDATE_TOPOLOGY: "npm_global", MIKIE_UPDATE_REPAIR_CANDIDATE: binary, MIKIE_UPDATE_REPAIR_LAUNCHER: finalLauncher, }; const prepared = await commands.run(binary, CLIENT_REPAIR_ARGUMENTS, { shell: false, capture: true, environment: { ...baseEnvironment, MIKIE_NPM_UPDATE_REPAIR_PHASE: "prepare" }, }); const preparedReceipt = parseClientRepair(prepared); const settlementPhase = preparedReceipt.action === "refused" ? "rollback" : "commit"; const committed = await commands.run(b…

High

Ai Review Evidence

The install script launches the native binary to repair Claude hooks in prepare and commit phases.

scripts/reconcile-install.mjsView on unpkg · L523

Source & flagged code

8 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "@getmikie/cli",

3 "version": "1.1.105",

4 "description": "Native Mikie relay launcher for MCP clients",

5 "license": "Apache-2.0",

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/Zyph3rKeaton/new-ai-language.git"

9 },

10 "type": "module",

11 "bin": {

12 "mikie": "bin/mikie.mjs"

13 },

14 "scripts": {

15 "postinstall": "node ./scripts/reconcile-install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

16 },

High

Suspicious Lifecycle Evidence

A postinstall hook automatically runs the reconciliation script.

package.jsonView on unpkg · L14

17 "files": [

18 "bin",

19 "lib",

20 "scripts",

21 "README.md"

22 ],

23 "engines": {

24 "node": ">=22"

25 },

26 "optionalDependencies": {

27 "@getmikie/darwin-arm64": "1.1.105",

28 "@getmikie/darwin-x64": "1.1.105",

29 "@getmikie/linux-x64-gnu": "1.1.105",

30 "@getmikie/win32-x64": "1.1.105"

31 },

32 "publishConfig": {

33 "access": "public",

34 "registry": "https://registry.npmjs.org"

35 }

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

lib/launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.108 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launcher.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 06c2e0c91708f519 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @getmikie/cli@1.1.108 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/launcher.mjsView on unpkg

lib/update.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.108 matchedPath = lib/update.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.108 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/update.mjsView on unpkg

scripts/reconcile-install.mjsView file

Lines 503-543javascript

503 pathIdentity(launcher, platform) !== pathIdentity(expectedLauncher, platform) ||

504 (await sha256File(binary)) !== initialRuntimeSha256 ||

505 (await sha256File(launcher)) !== initialRuntimeSha256