registry / @hipmmai/hipmmcode / 1.1.0

@hipmmai/hipmmcode@1.1.0

Provider-agnostic AI coding agent for your terminal (binary distribution)

AI Security Review

scanned 23d ago · by lpm-firewall-ai

Installing the package downloads a mutable latest-release binary from GitHub, extracts it, and executes it. The source provides no checksum or signature verification.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall

Impact

A release asset selected at install time can run with the installing user's permissions.

Mechanism

remote binary download and automatic execution

Attack narrative

npm invokes install.js automatically. It builds a GitHub latest-release URL using an environment-controlled repository value, downloads and extracts the archive without integrity verification, then runs the extracted binary during installation to install skills. It also removes the macOS quarantine attribute from that binary. This gives remotely supplied executable code an automatic install-time execution path.

AI rationale

This is an unverified, mutable remote-binary execution chain in a postinstall hook, with an environment-controlled source and quarantine removal. That is concrete install-hook abuse rather than a safe package-local launcher.

Evidence

package.jsoninstall.jsdist/hipmmcode.tar.gzdist/hipmmcodedist/default-skills

Network endpoints1

github.com

@hipmmai/hipmmcode@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code