Loading npm security reports…

@impakers/debug: Suspicious npm security report (Warn) | LPM Firewall

registry / @impakers/debug / 1.9.9

@impakers/debug@1.9.9

Client feedback collection tool for Impakers OS

AI Security Review

scanned 12d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package runs a postinstall script that plants a first-party Claude skill in the consumer project. The skill tells the agent how to map UI files for this feedback widget and can also insert an ESLint preset. No credential theft, remote payload, or destructive action was found.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall, or running the impakers-debug-setup command, when skip checks pass.

Impact

A future Claude session in that project can load package-authored instructions on ordinary UI edits without a separate consent prompt at install time. Existing unmanaged skill files are preserved.

Mechanism

The script resolves the consumer project root and writes templates/ui-mapping-skill.md to .claude/skills/impakers-ui-mapping/SKILL.md, creating directories as needed, then may append this package ESLint preset to an existing flat config.

AI rationale

Postinstall writes a package-owned Claude skill into the consumer project without a consent prompt, which is guarded first-party agent extension setup rather than a hijack. The skill content matches the stated UI-mapping product and does not exfiltrate data or run a remote payload.

Evidence

package.jsonscripts/setup.mjstemplates/ui-mapping-skill.md.claude/skills/impakers-ui-mapping/SKILL.mdeslint.config.jseslint.config.mjseslint.config.cjs

Decision evidence

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/setup.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/setup.mjsView file

7// L8: // 1. .claude/skills/impakers-ui-mapping/SKILL.md 설치 L9: // 에이전트가 UI 코드를 짤 때 파일 매핑 규칙을 알고 있게 만든다. ... L114: /** L115: * .claude/skills/impakers-ui-mapping/SKILL.md 를 깐다. L116: * ... L126: L127: const target = path.join(root, ".claude", "skills", "impakers-ui-mapping", "SKILL.md"); L128: const next = fs.readFileSync(source, "utf-8"); ... L136: if (current === next) return; L137: fs.writeFileSync(target, next); L138: note(`스킬 갱신: ${rel(root, target)}`);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/setup.mjsView on unpkg · L7

24Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network L24: L25: import { spawnSync } from "node:child_process"; L26: import * as fs from "node:fs"; ... L39: /** postinstall은 조용해야 한다. 명시 실행(npx)일 때만 수다스러워진다. */ L40: const explicit = process.argv.includes("--explicit") || !process.env.npm[redacted]; L41: const silent = process.env.npm[redacted] === "silent"; ... L58: function resolveConsumerRoot() { L59: const candidate = explicit ? process.cwd() : process.env.INIT_CWD; L60: if (!candidate) return null; ... L88: L89: const manifestPath = path.join(root, "package.json"); L90: if (!fs.existsSync(manifestPath)) return "프로젝트 package.json 없음";

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

scripts/setup.mjsView on unpkg · L24

•matchType = normalized_sha256 matchedPackage = @impakers/debug@1.9.7 matchedPath = scripts/setup.mjs matchedIdentity = npm:QGltcGFrZXJzL2RlYnVn:1.9.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/setup.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @impakers/debug@1.9.3 matchedIdentity = npm:QGltcGFrZXJzL2RlYnVn:1.9.3 similarity = 0.471 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/setup.mjsView on unpkg