Loading npm security reports…

@kingingwang/grok@1.0.35-7096013f: AI-agent control-surface risk | LPM Firewall

registry / @kingingwang/grok / 1.0.35-7096013f

@kingingwang/grok@1.0.35-7096013f

Bring Grok into your terminal

AI Security Review

scanned 20d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On npm install, postinstall extracts a native grok binary from @kingingwang platform packages and writes it into ~/.grok/bin, then updates ~/.grok/config.toml. That is the official Grok CLI home, so an existing grok install can be replaced without a separate user command.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install of @kingingwang/grok runs the postinstall script.

Impact

Later grok invocations can run the publisher's binary, and an existing official CLI install under ~/.grok can be overwritten.

Mechanism

Install-time drop of a native grok binary and config into the official Grok home directory

Policy narrative

This package impersonates the official Grok CLI while publishing as @kingingwang/grok. After npm install, postinstall.js extracts a native binary from @kingingwang/grok platform packages, installs it to ~/.grok/bin, and rewrites ~/.grok/config.toml. That directory belongs to the official Grok CLI, so an existing grok install can be replaced with no extra command. README and grok-bootstrap.js still name @xai-official/grok, showing a cloned official launcher under another npm scope. Running grok then executes the dropped binary.

AI rationale

This is a cloned official Grok CLI wrapper published as @kingingwang/grok. Its postinstall automatically plants a native binary and config into ~/.grok, hijacking another vendor's Grok CLI control surface.

Evidence

package.jsonbin/postinstall.jsbin/grok-bootstrap.jsREADME.md~/.grok/bin/grok

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

2"name": "@kingingwang/grok", "version": "1.0.35-7096013f", "description": "Bring Grok into your terminal", "license": "Apache-2.0", "bin": { "grok": "bin/grok" },

High

Suspicious Lifecycle Evidence

Package.json names this @kingingwang/grok, registers a grok binary, and runs node bin/postinstall.js automatically after install.

package.jsonView on unpkg · L2

21"scripts": { "postinstall": "node bin/postinstall.js" },

High

Suspicious Lifecycle Evidence

Package.json names this @kingingwang/grok, registers a grok binary, and runs node bin/postinstall.js automatically after install.

package.jsonView on unpkg · L21

33"optionalDependencies": { "@kingingwang/grok-darwin-arm64": "1.0.35-7096013f", "@kingingwang/grok-darwin-x64": "1.0.35-7096013f", "@kingingwang/grok-linux-arm64": "1.0.35-7096013f", "@kingingwang/grok-linux-x64": "1.0.35-7096013f", "@kingingwang/grok-win32-arm64": "1.0.35-7096013f", "@kingingwang/grok-win32-x64": "1.0.35-7096013f"

High

Suspicious Dependency Evidence

optionalDependencies pull same-version @kingingwang/grok platform packages that supply the native payload.

package.jsonView on unpkg · L33

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @kingingwang/grok@1.0.24-b208f462 matchedPath = bin/postinstall.js matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.24-b208f462 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 830396dc7d8ac054 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @kingingwang/grok@1.0.24-b208f462 matchedPath = bin/postinstall.js matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.24-b208f462 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/postinstall.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @kingingwang/grok@1.0.12-8d051d60 matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.12-8d051d60 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/grok-bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @kingingwang/grok@1.0.24-b208f462 matchedPath = bin/grok-bootstrap.js matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.24-b208f462 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/grok-bootstrap.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 1-42json

1{

2 "name": "@kingingwang/grok",

3 "version": "1.0.35-7096013f",

4 "description": "Bring Grok into your terminal",

5 "license": "Apache-2.0",

6 "bin": {

7 "grok": "bin/grok"

8 },

High

Suspicious Lifecycle Evidence

Package.json names this @kingingwang/grok, registers a grok binary, and runs node bin/postinstall.js automatically after install.

package.jsonView on unpkg · L2

9 "files": [

10 "bin/"

11 ],

12 "os": [

13 "darwin",

14 "linux",

15 "win32"

16 ],

17 "cpu": [

18 "arm64",

19 "x64"

20 ],

21 "scripts": {

22 "postinstall": "node bin/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L22

23 },

High

Suspicious Lifecycle Evidence

Package.json names this @kingingwang/grok, registers a grok binary, and runs node bin/postinstall.js automatically after install.

package.jsonView on unpkg · L21

24 "publishConfig": {

25 "access": "public"

26 },

27 "engines": {

28 "node": ">=20"

29 },

30 "dependencies": {

31 "@iarna/toml": "^3.0.0"

32 },

33 "optionalDependencies": {

34 "@kingingwang/grok-darwin-arm64": "1.0.35-7096013f",

35 "@kingingwang/grok-darwin-x64": "1.0.35-7096013f",

36 "@kingingwang/grok-linux-arm64": "1.0.35-7096013f",

37 "@kingingwang/grok-linux-x64": "1.0.35-7096013f",

38 "@kingingwang/grok-win32-arm64": "1.0.35-7096013f",

39 "@kingingwang/grok-win32-x64": "1.0.35-7096013f"

High

Suspicious Dependency Evidence

optionalDependencies pull same-version @kingingwang/grok platform packages that supply the native payload.

package.jsonView on unpkg · L33

40 }

41}

42

bin/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @kingingwang/grok@1.0.24-b208f462 matchedPath = bin/postinstall.js matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.24-b208f462 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 830396dc7d8ac054 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @kingingwang/grok@1.0.24-b208f462 matchedPath = bin/postinstall.js matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.24-b208f462 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/postinstall.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @kingingwang/grok@1.0.12-8d051d60 matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.12-8d051d60 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/grok-bootstrap.jsView file

•matchType = normalized_sha256 matchedPackage = @kingingwang/grok@1.0.24-b208f462 matchedPath = bin/grok-bootstrap.js matchedIdentity = npm:QGtpbmdpbmd3YW5nL2dyb2s:1.0.24-b208f462 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/grok-bootstrap.jsView on unpkg