registry / @hashbrownai/react / 0.8.1
@hashbrownai/react@0.8.1
React components for Hashbrown AI
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection confirmed automatic postinstall telemetry to the package's own service, with opt-outs and a loopback-only endpoint override. The collected Git fields are limited to name, email, and a known-host repository hint, and are omitted in CI; no concrete malicious behavior was established.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The package manager runs the package's postinstall script.
Impact
The inspected behavior is package-aligned installation telemetry; source does not establish a concrete attack surface.
Mechanism
The hook gathers an installation identifier, package and environment details, and limited Git identity, then sends a JSON event to the fixed package-aligned endpoint unless an opt-out is set.
AI rationale
Source inspection confirmed automatic postinstall telemetry to the package's own service, with opt-outs and a loopback-only endpoint override. The collected Git fields are limited to name, email, and a known-host repository hint, and are omitted in CI; no concrete malicious behavior was established.
Evidence
install/postinstall.cjsinstall/collector.cjsinstall/identity.cjsinstall/git-context.cjsinstall/policy.cjs
Network endpoints1
hashbrown.dev/_/growth/collect/v1/install
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs the postinstall hook through install/postinstall.cjs.
- The hook is limited to the package manager's postinstall event and calls the collector.
- The collector reports package installation metadata to the package's hashbrown.dev endpoint; it omits Git identity in CI.
- The collector honors telemetry opt-outs, and endpoint overrides are restricted to loopback addresses.
- Git identity collection is limited to configured name, email, and a repository hint from the consuming checkout.
- The CommonJS and ESM entrypoints provide React signal subscription behavior; the prepared dependencies provide JSON and Markdown parsing code.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg62"scripts": {
"postinstall": "node install/postinstall.cjs"
}
}
Low
Suspicious Lifecycle Evidence
package.json runs the postinstall hook through install/postinstall.cjs.
package.jsonView on unpkg · L62install/git-context.cjsView file
Findings
3 High3 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similarityinstall/git-context.cjs
HighKnown Malware Source Similarityinstall/policy.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Dependency Evidenceindex.cjs
LowSuspicious Dependency Evidenceindex.mjs
Affected versions and remediation
This report applies to @hashbrownai/react@0.8.1.
See all versions of @hashbrownai/react for other recorded verdicts.
- Review the evidence and your use of @hashbrownai/react@0.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.