Loading npm security reports…

@kdrrr/overcast@0.0.6: AI-agent policy block | LPM Firewall

registry / @kdrrr/overcast / 0.0.6

@kdrrr/overcast@0.0.6

overcast — senses (video/audio/image) + OSINT reach for any agent, built on pi

AI Security Review

scanned 16d ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Install triggers a script that mutates an installed AI coding-agent dependency's package metadata. This is an unconsented lifecycle write to an AI-agent control/config surface, even though the apparent change is branding.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install / package postinstall

Impact

Changes pi-coding-agent piConfig.name to overcast in node_modules, affecting downstream agent branding/config without explicit user action.

Mechanism

postinstall AI-agent package.json mutation

Policy narrative

On installation, npm runs scripts/brand-pi.mjs. The script locates @earendil-works/pi-coding-agent in node_modules via filesystem traversal or require resolution, parses its package.json, sets piConfig.name to overcast, and writes the dependency package.json back. No exfiltration was found, but the install-time mutation targets an AI coding-agent configuration surface without a user-invoked CLI action.

Rationale

The package has substantial benign, user-invoked media/OSINT functionality, but the postinstall script performs a concrete unconsented mutation of an AI-agent dependency config file. That meets the firewall boundary for blocking lifecycle AI-agent control-surface mutation despite no credential or network abuse. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonscripts/brand-pi.mjsdist/bin/overcast.jsdist/extension/overcast.jsskills/overcast/SKILL.mdREADME.mdnode_modules/@earendil-works/pi-coding-agent/package.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/brand-pi.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/extension/overcast.jsView file

110// src/providers/exec.ts L111: import { spawn } from "child_process"; L112: function execCapture(command, args, opts = {}) {

High

Child Process

Package source references child process execution.

dist/extension/overcast.jsView on unpkg · L110

92Cross-file remote execution chain: dist/extension/overcast.js spawns dist/bin/overcast.js; helper contains network access plus dynamic code execution. L92: if (!t) continue; L93: out.push(JSON.parse(t)); L94: } ... L110: // src/providers/exec.ts L111: import { spawn } from "child_process"; L112: function execCapture(command, args, opts = {}) { L113: return new Promise((resolveP, rejectP) => { L114: const env = { ...opts.env ?? process.env }; L115: if (opts.extraPath && opts.extraPath.length) { L116: const sep = process.platform === "win32" ? ";" : ":"; L117: const key = Object.keys(env).find((k) => k.toLowerCase() === "path") ?? "PATH"; ... L128: });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/extension/overcast.jsView on unpkg · L92

92if (!t) continue; L93: out.push(JSON.parse(t)); L94: } ... L110: // src/providers/exec.ts L111: import { spawn } from "child_process"; L112: function execCapture(command, args, opts = {}) { L113: return new Promise((resolveP, rejectP) => { L114: const env = { ...opts.env ?? process.env }; L115: if (opts.extraPath && opts.extraPath.length) { L116: const sep = process.platform === "win32" ? ";" : ":"; L117: const key = Object.keys(env).find((k) => k.toLowerCase() === "path") ?? "PATH"; ... L128: });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/extension/overcast.jsView on unpkg · L92

dist/index.jsView file

124if (!t) continue; L125: out.push(JSON.parse(t)); L126: } ... L286: } L287: function openCase(dir = process.cwd()) { L288: return new Case(dir); ... L324: if (opts.home) return opts.home; L325: if (process.env[HOME_ENV]) return process.env[HOME_ENV]; L326: return join3(homedir(), ".overcast"); ... L371: } L372: const rawBase = process.env.CLOUDGLUE_BASE_URL || "https://api.cloudglue.dev"; L373: const baseUrl = rawBase.replace(/\/v1\/?$/, "");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L124

examples/providers/detect/detect.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 9411 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/providers/detect/detect.pyView on unpkg

assets/branding/sting.m4aView file

•path = assets/branding/sting.m4a kind = high_entropy_blob sizeBytes = 83043 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/branding/sting.m4aView on unpkg

dist/bin/overcast.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @kdrrr/overcast@0.0.5 matchedIdentity = npm:QGtkcnJyL292ZXJjYXN0:0.0.5 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/overcast.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 42-82json

42 "examples",

43 "scripts/brand-pi.mjs"

44 ],

45 "engines": {

46 "node": ">=22"

47 },

48 "publishConfig": {

49 "access": "public"

50 },

51 "scripts": {

52 "build": "tsup",

53 "typecheck": "tsc --noEmit",

54 "test": "node --test --import tsx test/unit/*.test.ts",

55 "test:e2e": "bash test/e2e/run.sh",

56 "test:e2e:live": "bash test/e2e/live/run.sh",

57 "build:bun": "bun build --compile bin/overcast.ts --outfile dist/bin/overcast && node scripts/bun-sidecar.mjs",

58 "dev": "tsx bin/overcast.ts",

59 "sync-version": "node scripts/sync-version.mjs",

60 "version": "node scripts/sync-version.mjs && git add -A src/version.ts .claude-plugin/plugin.json .claude-plugin/marketplace.json",

61 "prepublishOnly": "npm run build",

62 "postinstall": "node scripts/brand-pi.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L62

63 "brand": "node scripts/brand-pi.mjs"

64 },

65 "dependencies": {

66 "@earendil-works/pi-agent-core": "0.80.1",

67 "@earendil-works/pi-ai": "0.80.1",

68 "@earendil-works/pi-coding-agent": "0.80.1",

69 "@earendil-works/pi-tui": "0.80.1",

70 "zod": "^3.24.1"

71 },

72 "devDependencies": {

73 "@types/node": "^22.10.2",

74 "tsup": "^8.3.5",

75 "tsx": "^4.19.2",

76 "typescript": "^5.7.2"

77 },

78 "optionalDependencies": {

79 "playwright": "^1.61.1"

80 }

81}

82

dist/extension/overcast.jsView file

110// src/providers/exec.ts L111: import { spawn } from "child_process"; L112: function execCapture(command, args, opts = {}) {

High

Child Process

Package source references child process execution.

dist/extension/overcast.jsView on unpkg · L110

92Cross-file remote execution chain: dist/extension/overcast.js spawns dist/bin/overcast.js; helper contains network access plus dynamic code execution. L92: if (!t) continue; L93: out.push(JSON.parse(t)); L94: } ... L110: // src/providers/exec.ts L111: import { spawn } from "child_process"; L112: function execCapture(command, args, opts = {}) { L113: return new Promise((resolveP, rejectP) => { L114: const env = { ...opts.env ?? process.env }; L115: if (opts.extraPath && opts.extraPath.length) { L116: const sep = process.platform === "win32" ? ";" : ":"; L117: const key = Object.keys(env).find((k) => k.toLowerCase() === "path") ?? "PATH"; ... L128: });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/extension/overcast.jsView on unpkg · L92

92if (!t) continue; L93: out.push(JSON.parse(t)); L94: } ... L110: // src/providers/exec.ts L111: import { spawn } from "child_process"; L112: function execCapture(command, args, opts = {}) { L113: return new Promise((resolveP, rejectP) => { L114: const env = { ...opts.env ?? process.env }; L115: if (opts.extraPath && opts.extraPath.length) { L116: const sep = process.platform === "win32" ? ";" : ":"; L117: const key = Object.keys(env).find((k) => k.toLowerCase() === "path") ?? "PATH"; ... L128: });

dist/index.jsView file

Lines 104-144javascript

104 const okSpan = Array.isArray(at) && at.length === 2 && at.every((n) => typeof n ===

examples/providers/detect/detect.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 9411 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/providers/detect/detect.pyView on unpkg

assets/branding/sting.m4aView file

•path = assets/branding/sting.m4a kind = high_entropy_blob sizeBytes = 83043 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/branding/sting.m4aView on unpkg

dist/bin/overcast.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @kdrrr/overcast@0.0.5 matchedIdentity = npm:QGtkcnJyL292ZXJjYXN0:0.0.5 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin/overcast.jsView on unpkg