@hone-ai/cli@1.34.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@hone-ai/cli@1.34.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = echo '\n Hone AI CLI installed successfully.\n Next: run `hone init --token <YOUR_TOKEN>` to configure.\n Docs: https://www.npmjs.com/package/@hone-ai/cli\n'

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = echo '\n Hone AI CLI installed successfully.\n Next: run `hone init --token <YOUR_TOKEN>` to configure.\n Docs: https://www.npmjs.com/package/@hone-ai/cli\n'

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

hone-cli.jsView file

25const crypto = require('crypto'); L26: const { execSync } = require('child_process'); L27:

High

Child Process

Package source references child process execution.

hone-cli.jsView on unpkg · L25

7830const run = spawnSync(command, { L7831: cwd: wt, shell: true, encoding: 'utf8', L7832: timeout: Number(opts.timeout) * 1000, env: verifyCommandEnv(gitEnv()),

High

Shell

Package source references shell execution.

hone-cli.jsView on unpkg · L7830

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. hone-cli.js: baseURL: config.apiUrl, Authorization: `Bearer ${config.token}`, fs.writeFileSync(target, f.content); fs.writeFileSync(pipelineConfigPath, updated); fs.writeFileSync(configPath, result.augmentedConfig); write: (data) => fs.writeFileSync(path.join(agentsDir, `${agent}.agent.md`), data), fs.writeFileSync(path.join(skillDir, 'SKILL.md'), data); write: (data) => fs.writeFileSync(path.join(enterpriseGH, 'copilot-instructions.md'), data),

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

hone-cli.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. c.config.length + mc.test.length; console.log(` ${p}: ${total} metadata types, ${data.selecteddocs.length} doc urls, mcp: ${data.mcp.available ? 'available' : 'not detected'}`); } for (const w of (result.warnings || [])) console.log(` ⚠ ${w}`); } else { console.log(`ℹ refresh skipped: ${result.reason}`); } return; } console.log('hone ai — pipeline setup'); console.log('=============================='); console.log(''); let orgconfig; try { const r = await client.get('/scripts/config'); orgconfig = r.data; console.log(`org:

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

hone-cli.jsView on unpkg

1154L1155: const installCmd = detected.pkgMgr === 'yarn' ? 'yarn add -D' : detected.pkgMgr === 'pnpm' ? 'pnpm add -D' : 'npm install -D'; L1156: ... L1162: try { L1163: execSync(`${installCmd} ${pkgs.unit.join(' ')}`, { stdio: 'inherit', cwd: repoRoot }); L1164: console.log(` ✓ Unit test framework installed`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

hone-cli.jsView on unpkg · L1154

•matchType = normalized_sha256 matchedPackage = @hone-ai/cli@1.28.0 matchedPath = hone-cli.js matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.28.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hone-cli.jsView on unpkg

bin/hone-mcp.jsView file

5// (or `hone-mcp` once installed). Delegates to ../mcp-server.js `start()`. L6: require('../mcp-server.js').start().catch((e) => { L7: process.stderr.write(`hone-mcp failed: ${e && e.message ? e.message : String(e)}\n`);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hone-mcp.jsView on unpkg · L5

lib/agent-eval-probes-boundary.jsView file

28contains invisible/control Unicode U+202E (right-to-left override) input: '<U+202E>abc� mixed with control chars',

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

lib/agent-eval-probes-boundary.jsView on unpkg · L28

lib/hook-templates/pre-push.shView file

•path = lib/hook-templates/pre-push.sh kind = build_helper sizeBytes = 2812 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/hook-templates/pre-push.shView on unpkg

lib/auto-verify.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/auto-verify.js#virtual:normalized:round1View on unpkg

lib/story-classifier-extract.jsView file

•matchType = normalized_sha256 matchedPackage = @hone-ai/cli@1.28.0 matchedPath = lib/story-classifier-extract.js matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.28.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/story-classifier-extract.jsView on unpkg

lib/performance-analyzer.jsView file

•matchType = normalized_sha256 matchedPackage = @hone-ai/cli@1.28.0 matchedPath = lib/performance-analyzer.js matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.28.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/performance-analyzer.jsView on unpkg

lib/mcp-tools.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @hone-ai/cli@1.33.0 matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.33.0 similarity = 0.841 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/mcp-tools.jsView on unpkg

Source & flagged code

15 flagged

package.jsonView file

Lines 4-44json

4 "description": "Hone AI — Enterprise SDLC Pipeline CLI",

5 "main": "hone-cli.js",

6 "bin": {

7 "hone": "./bin/hone.js",

8 "hone-mcp": "./bin/hone-mcp.js"

9 },

10 "files": [

11 "README.md",

12 "bin/",

13 "hone-cli.js",

14 "lib/",

15 "!lib/*.test.js",

16 "schema/",

17 "mcp-server.js"

18 ],

19 "scripts": {

20 "test": "echo \"No tests yet\" && exit 0",

21 "link": "npm link",

22 "sync-server-cli-version": "node scripts/sync-server-cli-version.js",

23 "prepublishOnly": "node scripts/sync-server-cli-version.js",

24 "postinstall": "echo '\\n Hone AI CLI installed successfully.\\n Next: run `hone init --token <YOUR_TOKEN>` to configure.\\n Docs: https://www.npmjs.com/package/@hone-ai/cli\\n'"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L24

25 },

26 "dependencies": {

27 "@modelcontextprotocol/sdk": "^1.30.0",

28 "ajv": "^8.20.0",

29 "axios": "^1.20.0",

30 "commander": "^11.0.0",

31 "js-yaml": "^4.3.2"

32 },

33 "engines": {

34 "node": ">=18.0.0"

35 },

36 "keywords": [

37 "hone",

38 "ai",

39 "sdlc",

40 "pipeline",

41 "enterprise",

42 "developer-tools"

43 ],

44 "author": "Hone AI",

hone-cli.jsView file

Lines 5-45javascript

5 *

6 * Bridges the gap between setup-ai-pipeline.sh v3.1 and the Hone server.

7 * The key insight: setup-ai-pipeline.sh needs ENTERPRISE_SOURCE = enterprise-github

bin/hone-mcp.jsView file

Lines 1-10javascript

1#!/usr/bin/env node

2'use strict';

3// HC-COMM-012 (A1 P1): entry point for the Hone MCP server (stdio).

4// Registered by the Claude Code plugin's .mcp.json as `npx -y @hone-ai/cli hone-mcp`

5// (or `hone-mcp` once installed). Delegates to ../mcp-server.js `start()`.

6require('../mcp-server.js').start().catch((e) => {

lib/agent-eval-probes-boundary.jsView file

Lines 8-32javascript

8 * the `json_or_refusal` grader encodes that contract.

9 */

10module.exports = [

11 {

12 id: 'boundary-empty-001',

13 input: '',

lib/hook-templates/pre-push.shView file

•path = lib/hook-templates/pre-push.sh kind = build_helper sizeBytes = 2812 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/hook-templates/pre-push.shView on unpkg

lib/auto-verify.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/auto-verify.js#virtual:normalized:round1View on unpkg

lib/story-classifier-extract.jsView file

•matchType = normalized_sha256 matchedPackage = @hone-ai/cli@1.28.0 matchedPath = lib/story-classifier-extract.js matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.28.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/story-classifier-extract.jsView on unpkg

lib/performance-analyzer.jsView file

•matchType = normalized_sha256 matchedPackage = @hone-ai/cli@1.28.0 matchedPath = lib/performance-analyzer.js matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.28.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/performance-analyzer.jsView on unpkg

lib/mcp-tools.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @hone-ai/cli@1.33.0 matchedIdentity = npm:QGhvbmUtYWkvY2xp:1.33.0 similarity = 0.841 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/mcp-tools.jsView on unpkg

Lines 1134-1174javascript

1134 const installE2e = opts && opts.e2e !== false && opts.noE2e !== true;

1135 if (installE2e) {

1136 console.log('');

1137 console.log(` Skipping Playwright (Python) e2e auto-install — adopters opt in via \`pip install pytest-playwright\` separately.`);

1138 console.log(` See pytest-playwright docs for details.`);

1139 }

1140}

1141

1142async function installTestFramework(repoRoot, opts) {

1143 console.log('');

1144 console.log('── Test Framework Setup ────────────────────────────────');

1145 console.log('');

1146

1147 const detected = detectExistingTestFramework(repoRoot);

1148 const pkgs = getInstallPackages(detected.stack);

1149

1150 // H-002b: Python branch — different install commands + pyproject.toml (not package.json)

1151 if (pkgs.pkgManagerKind === 'python') {

1152 return installPythonTestFramework(repoRoot, detected, pkgs, opts);

1153 }

1154

1155 const installCmd = detected.pkgMgr === 'yarn' ? 'yarn add -D' : detected.pkgMgr === 'pnpm' ? 'pnpm add -D' : 'npm install -D';

1156

1157 // ── Unit test framework ────────────────────────────────

1158 if (detected.testFw) {

1159 console.log(` Test framework detected: ${detected.testFw} ✓ (skipping install)`);

1160 } else {

1161 console.log(` Stack: ${detected.stack} → Installing: ${pkgs.unit.join(', ')}`);

1162 try {

1163 execSync(`${installCmd} ${pkgs.unit.join(' ')}`, { stdio: 'inherit', cwd: repoRoot });

1164 console.log(` ✓ Unit test framework installed`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

hone-cli.jsView on unpkg · L1154

1165 } catch (e) {

1166 console.error(` ✗ Install failed: ${e.message}`);

1167 return;

1168 }

1169 }

1170

1171 // ── Test config file ───────────────────────────────────

1172 if (detected.hasTestConfig) {

1173 console.log(` Test config exists ✓ (skipping creation)`);

1174 } else {

Lines 7810-7850javascript

7810 applyDetail = (e.stderr || '').toString().split('\n').find(Boolean) || 'git apply failed';

7811 }

7812 if (!applied) {

7813 emit({ ok: false, verdict: 'does_not_apply', detail: applyDetail },

7814 `✗ diff did not apply in the worktree: ${applyDetail}`);

7815 exitCode = EXIT.DOES_NOT_APPLY;

7816 reportVerdict = 'does_not_apply'; reportDetail = applyDetail;

7817 } else {

7818 // 5. Run the adopter's test command in the worktree.

7819 // HC-COMM-010-followup-6: a bare worktree has no dependencies — provision it

7820 // (link the repo's node_modules when the lockfile is unchanged, else run the

7821 // lockfile's install, or ci.install_command). Fail-open; --no-provision opts out.

7822 if (opts.provision !== false) {

7823 const { planProvision, provisionWorktree } = require('./lib/worktree-provision');

7824 const { readCIConfigDetails } = require('./lib/pipeline-config');

7825 const plan = planProvision({ worktreeDir: wt, parentDir: process.cwd(), installCommand: readCIConfigDetails(process.cwd()).install_command });

7826 const prov = provisionWorktree(plan, { worktreeDir: wt, exec: spawnSync });

7827 if (opts.format !== 'json') console.log(` provisioning: ${prov.summary}`);

7828 }

7829 if (opts.format !== 'json') console.log(` running: ${command} (in isolated worktree, timeout ${opts.timeout}s)`);

7830 const run = spawnSync(command, {

7831 cwd: wt, shell: true, encoding: 'utf8',

7832 timeout: Number(opts.timeout) * 1000, env: verifyCommandEnv(gitEnv()),

High

Shell

Package source references shell execution.

hone-cli.jsView on unpkg · L7830

7833 stdio: ['ignore', 'pipe', 'pipe'],

7834 });

7835 const timedOut = run.error && run.error.code === 'ETIMEDOUT';

7836 const v = verdictFromRun({ code: run.status, timedOut, stdout: run.stdout, stderr: run.stderr, command, source: commandSource });

7837 // HC-GF-077: nothing was applied when HEAD already held the step — say what the command actually ran on.

7838 if (alreadyInHead && v.verdict === 'pass') v.detail = "tests passed on HEAD, which already contains the step's files";

7839 const sym = v.verdict === 'pass' ? '✓' : v.verdict === 'timeout' ? '⏱' : v.verdict === 'unresolved' ? '○'

7840

7841 // HC-GF-023: on a failure the operator needs the OUTPUT, not a quote from it.

7842 // The full log is written OUTSIDE the worktree (cleanup removes the worktree)

7843 // and its path is named, so diagnosing does not require re-running by hand.

7844 let logPath = null;

7845 if (v.verdict !== 'pass') {

7846 try {

7847 logPath = path.join(os.tmpdir(), `hone-verify-${workflowId.slice(0, 8)}-${opts.stepKey}.log`);

7848 fs.writeFileSync(logPath,

7849 `$ ${command}\n(cwd: isolated worktree from HEAD ${headSha || 'unknown'})\n\n` +

7850 `${run.stdout || ''}\n${run.stderr || ''}\n`);