Loading npm security reports…

@getmikie/cli@1.1.121: AI-agent control-surface risk | LPM Firewall

registry / @getmikie/cli / 1.1.121

@getmikie/cli@1.1.121

Native Mikie relay launcher for MCP clients

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically executes an opaque native binary that reconciles AI-client state. The wrapper directs it to prepare a Codex setup launcher and repair Claude hooks across the user profile.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

The install can add or replace MCP and lifecycle-hook commands in foreign Codex and Claude control surfaces without an explicit setup command.

Mechanism

Automatic native AI-agent configuration and hook reconciliation

Policy narrative

The postinstall hook runs immediately on installation. It launches a bundled platform-native executable for trajectory reconciliation and client repair, prepares a launcher using the Codex setup command, and invokes a Claude-hook repair command. The visible wrapper defines the intended repaired state as an MCP relay plus handlers for Claude lifecycle events. Because this foreign AI-agent configuration occurs automatically during installation and the native implementation is opaque in this snapshot, it is an unconsented agent-control-surface mutation.

AI rationale

This is an automatic install-time path that invokes opaque native code to configure Codex and Claude hooks, rather than an explicit user setup action. The visible source establishes a broad AI-agent control-surface mutation, which meets the install-hook abuse blocking boundary.

Evidence

package.jsonscripts/reconcile-install.mjslib/update.mjs.codex.claude.json.claude/settings.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/reconcile-install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

14"scripts": { "postinstall": "node ./scripts/reconcile-install.mjs" }

High

Suspicious Lifecycle Evidence

The package runs a postinstall script automatically.

package.jsonView on unpkg · L14

lib/launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.120 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launcher.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 56afec83ce73bd5e signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @getmikie/cli@1.1.120 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/launcher.mjsView on unpkg

lib/update.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.120 matchedPath = lib/update.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/update.mjsView on unpkg

scripts/reconcile-install.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.120 matchedPath = scripts/reconcile-install.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/reconcile-install.mjsView on unpkg

588const scriptIdentity = pathIdentity(fileURLToPath(import.meta.url), process.platform); const invokedIdentity = pathIdentity(process.argv[1], process.platform); if (scriptIdentity !== null && scriptIdentity === invokedIdentity) { try { await reconcileInstalledTrajectory(); const packageMetadata = JSON.parse( await readFile(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8"), ); const clients = await reconcileInstalledClients({ version: packageMetadata.version, allowDeferred: true, });

High

Suspicious Lifecycle Evidence

The postinstall script invokes an opaque native binary to reconcile a trajectory store and repair Claude hooks.

scripts/reconcile-install.mjsView on unpkg · L588

Source & flagged code

8 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "@getmikie/cli",

3 "version": "1.1.121",

4 "description": "Native Mikie relay launcher for MCP clients",

5 "license": "Apache-2.0",

6 "repository": {

7 "type": "git",

8 "url": "git+https://github.com/Zyph3rKeaton/new-ai-language.git"

9 },

10 "type": "module",

11 "bin": {

12 "mikie": "bin/mikie.mjs"

13 },

14 "scripts": {

15 "postinstall": "node ./scripts/reconcile-install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

16 },

High

Suspicious Lifecycle Evidence

The package runs a postinstall script automatically.

package.jsonView on unpkg · L14

17 "files": [

18 "bin",

19 "lib",

20 "scripts",

21 "README.md"

22 ],

23 "engines": {

24 "node": ">=22"

25 },

26 "optionalDependencies": {

27 "@getmikie/darwin-arm64": "1.1.121",

28 "@getmikie/darwin-x64": "1.1.121",

29 "@getmikie/linux-x64-gnu": "1.1.121",

30 "@getmikie/win32-x64": "1.1.121"

31 },

32 "publishConfig": {

33 "access": "public",

34 "registry": "https://registry.npmjs.org"

35 }

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

lib/launcher.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.120 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/launcher.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 56afec83ce73bd5e signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @getmikie/cli@1.1.120 matchedPath = lib/launcher.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 shingleOverlap = 5 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

lib/launcher.mjsView on unpkg

lib/update.mjsView file

•matchType = normalized_sha256 matchedPackage = @getmikie/cli@1.1.120 matchedPath = lib/update.mjs matchedIdentity = npm:QGdldG1pa2llL2NsaQ:1.1.120 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/update.mjsView on unpkg

scripts/reconcile-install.mjsView file

Lines 568-608javascript

568 throw new Error(

569 "Mikie could not authenticate every configured client; close active clients and run `mikie update` before reinstalling",

570 );

571 }

572 if ((await sha256File(binary)) !== initialRuntimeSha256) {