@inizioevoke/astro-core@3.1.5: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@inizioevoke/astro-core@3.1.5: AI-agent control-surface risk | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/components/PdfViewer/pdf.worker.min.mjsView file

24* pdfjsBuild = 7e5b36c2d L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],... L26: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/components/PdfViewer/pdf.worker.min.mjsView on unpkg · L24

postinstall.mjsView file

1Install-time AI-agent control hijack evidence: L1: import { cpSync, readdirSync, rmSync } from 'fs'; L2: import { join, dirname } from 'path'; ... L8: const projectRoot = join(__dirname, '..', '..', '..'); L9: const destDir = join(projectRoot, '.claude', 'skills'); L10: const src = join(__dirname, 'agents', 'claude'); ... L15: rmSync(skillDestDir, { recursive: true, force: true }); L16: cpSync(join(src, dir), skillDestDir, { recursive: true }); L17: } Payload evidence from agents/claude/evoke-astro-core/SKILL.md: L232: L233: Custom event: `evopdfviewer-click` (fires when a custom `http://pdfviewer.evo` protocol link is clicked) L234:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

postinstall.mjsView on unpkg · L1

src/components/PdfViewer/pdf.min.mjsView file

•matchType = malicious_source_fingerprint_signature signature = ed254e81219aaf60 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @inizioevoke/astro-core@3.0.3 matchedPath = src/components/PdfViewer/pdf.min.mjs matchedIdentity = npm:QGluaXppb2V2b2tlL2FzdHJvLWNvcmU:3.0.3 similarity = 1.000 shingleOverlap = 6 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/components/PdfViewer/pdf.min.mjsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 12-52json

12

13 "./BottomISI": "./src/components/ISI/BottomISI/index.ts",

14 "./Carousel": "./src/components/Carousel/index.ts",

15 "./CssBackgroundImage": "./src/components/CssBackgroundImage/index.ts",

16 "./CssVariables": "./src/components/CssVariables/index.ts",

17 "./FlipCard": "./src/components/FlipCard/index.ts",

18 "./Modal": "./src/components/Modal/index.ts",

19 "./ScrollContainer": "./src/components/ScrollContainer/index.ts",

20 "./Tabs": "./src/components/Tabs/index.ts",

21

22 "./lib/BottomISI": "./src/components/ISI/BottomISI/BottomISI.ts",

23 "./lib/Carousel": "./src/components/Carousel/Carousel.ts",

24 "./lib/FlipCard": "./src/components/FlipCard/FlipCard.ts",

25 "./lib/Modal": "./src/components/Modal/Modal.ts",

26 "./lib/ScrollContainer": "./src/components/ScrollContainer/ScrollContainer.ts",

27

28 "./lib/gestures/pinch": "./src/lib/client/gestures/pinch.ts",

29 "./lib/gestures/swipe": "./src/lib/client/gestures/swipe.ts"

30 },

31 "scripts": {

32 "postinstall": "node postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 },

34 "files": [

35 "agents",

36 "docs",

37 "src",

38 "index.ts",

39 "postinstall.mjs"

40 ],

41 "peerDependencies": {

42 "astro": ">=5.0.0",

43 "typescript": ">=5.0.0"

44 },

45 "devDependencies": {

46 "@astrojs/check": "^0.9.8",

47 "@astrojs/ts-plugin": "^1.10.7",

48 "@types/node": "^25.5.0",

49 "astro": "^6.0.5",

50 "pdfjs-dist": "^5.7.284",

51 "typescript": "^5.9.3"

52 }

src/components/PdfViewer/pdf.worker.min.mjsView file

24* pdfjsBuild = 7e5b36c2d L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],... L26: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/components/PdfViewer/pdf.worker.min.mjsView on unpkg · L24

postinstall.mjsView file

Lines 1-19javascript

1import { cpSync, readdirSync, rmSync } from 'fs';

2import { join, dirname } from 'path';

3import { fileURLToPath } from 'url';

4

5const __dirname =

src/components/PdfViewer/pdf.min.mjsView file

•matchType = malicious_source_fingerprint_signature signature = ed254e81219aaf60 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @inizioevoke/astro-core@3.0.3 matchedPath = src/components/PdfViewer/pdf.min.mjs matchedIdentity = npm:QGluaXppb2V2b2tlL2FzdHJvLWNvcmU:3.0.3 similarity = 1.000 shingleOverlap = 6 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

src/components/PdfViewer/pdf.min.mjsView on unpkg