Loading npm security reports…

@getmikie/cli@1.1.120: AI-agent control-surface risk | LPM Firewall

registry / @getmikie/cli / 1.1.120

@getmikie/cli@1.1.120

Native Mikie relay launcher for MCP clients

AI Security Review

scanned 27d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically runs a native reconciliation routine. It can repair Claude hook integrations and trajectory state without an explicit user command.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall

Impact

A package install can alter AI-client control behavior through an opaque native runtime.

Mechanism

Automatic native execution that reconciles AI-client hooks and state

Policy narrative

npm runs reconcile-install.mjs after installation. The script launches the selected native binary to reconcile trajectory state and repair Claude hooks. The source defines hooks for prompt, tool, stop, and session events and identifies Claude files under the user home directory. Because the automatic lifecycle action delegates the actual mutation to an uninspectable native runtime, it creates an unconsented AI-agent control-surface change.

AI rationale

This is an automatic postinstall path that invokes an opaque native binary to reconcile AI-client hooks and state. That is a concrete unconsented lifecycle mutation of a foreign AI-agent control surface.

Evidence

package.jsonscripts/reconcile-install.mjslib/update.mjsbin/mikie.mjs.claude.json.claude/settings.json.claude/mikie-evidence-hook-ownership.json

Decision evidence

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/reconcile-install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

14"scripts": { "postinstall": "node ./scripts/reconcile-install.mjs" }

High

Suspicious Lifecycle Evidence

The package runs a postinstall script automatically.

package.jsonView on unpkg · L14

lib/launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.118 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launcher.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 56afec83ce73bd5e signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @getmikie/cli@1.1.118 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/launcher.mjsView on unpkg

lib/update.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.118 matchedPath = lib/update.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/update.mjsView on unpkg

scripts/reconcile-install.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.118 matchedPath = scripts/reconcile-install.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/reconcile-install.mjsView on unpkg

58export async function reconcileInstalledTrajectory({ environment = process.env, platform = process.platform, resolveBinary = resolveNativeBinary, commands = createCommandAdapter({ environment, platform }), } = {}) { if (isTransactionStagedInstall(environment, platform)) { return { status: "staged_candidate" }; } const binary = await resolveBinary(); const result = await commands.run(binary, RECONCILIATION_ARGUMENTS, { shell: false }); if (result.code !== 0) { throw new Error("native trajectory-store reconciliation failed"); } return parseTrajectoryR…

High

Ai Review Evidence

That script executes a native binary to reconcile a trajectory store and repair Claude hooks.

scripts/reconcile-install.mjsView on unpkg · L58

Source & flagged code

8 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "@getmikie/cli",

3 "version": "1.1.120",

4 "description": "Native Mikie relay launcher for MCP clients",

5 "license": "Apache-2.0",

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/Zyph3rKeaton/new-ai-language.git"

9 },

10 "type": "module",

11 "bin": {

12 "mikie": "bin/mikie.mjs"

13 },

14 "scripts": {

15 "postinstall": "node ./scripts/reconcile-install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

16 },

High

Suspicious Lifecycle Evidence

The package runs a postinstall script automatically.

package.jsonView on unpkg · L14

17 "files": [

18 "bin",

19 "lib",

20 "scripts",

21 "README.md"

22 ],

23 "engines": {

24 "node": ">=22"

25 },

26 "optionalDependencies": {

27 "@getmikie/darwin-arm64": "1.1.120",

28 "@getmikie/darwin-x64": "1.1.120",

29 "@getmikie/linux-x64-gnu": "1.1.120",

30 "@getmikie/win32-x64": "1.1.120"

31 },

32 "publishConfig": {

33 "access": "public",

34 "registry": "https://registry.npmjs.org"

35 }

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

lib/launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.118 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launcher.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 56afec83ce73bd5e signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @getmikie/cli@1.1.118 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/launcher.mjsView on unpkg

lib/update.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.118 matchedPath = lib/update.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/update.mjsView on unpkg

scripts/reconcile-install.mjsView file

Lines 38-78javascript

38function pathIdentity(value, platform) {

39 const pathApi = platform === "win32" ? path.win32 : path.posix;

40 if (