@kl-c/matrixos@0.1.19: AI-agent policy block | LPM Firewall

Loading npm security reports…

@kl-c/matrixos@0.1.19: AI-agent policy block | LPM Firewall

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/oh-my-opencode.jsView file

16L17: const require = createRequire(import.meta.url); L18:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/oh-my-opencode.jsView on unpkg · L16

dist/cli/skills/superpowers-brainstorming/scripts/server.cjsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.1.15 matchedPath = dist/cli/skills/superpowers-brainstorming/scripts/server.cjs matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.1.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/skills/superpowers-brainstorming/scripts/server.cjsView on unpkg

1const crypto = require('crypto'); L2: const http = require('http'); L3: const fs = require('fs'); ... L12: function computeAcceptKey(clientKey) { L13: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64'); L14: } ... L84: L85: const PORT_FILE = process.env.BRAINSTORM_PORT_FILE || null; L86: const randomPort = () => 49152 + Math.floor(Math.random() * 16383); ... L195: try { sessionStorage.setItem('brainstorm-session-key', ${jsonKey}); } catch (e) {} L196: location.replace('/'); L197: </script>

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli/skills/superpowers-brainstorming/scripts/server.cjsView on unpkg · L1

postinstall.mjsView file

1Install-time AI-agent control hijack evidence: L3: L4: import { readdirSync, rmSync, cpSync, mkdirSync, existsSync } from "node:fs"; L5: import { createRequire } from "node:module"; ... L19: * so OpenCode discovers them at startup. OpenCode scans L20: * `~/.config/opencode/command/*.md` (user-level) and `.opencode/command/*.md` L21: * (project-level), but NOT package internals under node_modules. Without this ... L28: const commandSources = [ L29: join(__dirname, ".opencode", "command"), L30: join(__dirname, ".agents", "command"), ... L35: if (!existsSync(sourceDir)) continue; L36: mkdirSync(targetDir, { recursive: true }); L37: for (const entry of readdirSync(sourceDir, { withFileTypes: true })) { Payload evidence from dist/features/builtin-skills/skills/playwright-mcp-skill.d.ts: L1: ex

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

postinstall.mjsView on unpkg · L1

dist/cli/skills/ast-grep/install.shView file

•path = dist/cli/skills/ast-grep/install.sh kind = build_helper sizeBytes = 7581 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cli/skills/ast-grep/install.shView on unpkg

dist/cli/skills/ast-grep/tests/smoke.ps1View file

•path = dist/cli/skills/ast-grep/tests/smoke.ps1 kind = payload_in_excluded_dir sizeBytes = 5701 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/cli/skills/ast-grep/tests/smoke.ps1View on unpkg

dist/cli-node/index.jsView file

•path = dist/cli-node/index.js kind = oversized_source_file sizeBytes = 4670493 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli-node/index.jsView on unpkg

•path = dist/cli-node/index.js kind = oversized_cli_entrypoint sizeBytes = 4670493 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli-node/index.jsView on unpkg

bin/matrixos.jsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.1.15 matchedPath = bin/matrixos.js matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.1.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/matrixos.jsView on unpkg

dist/skills/superpowers-brainstorming/scripts/server.cjsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.1.15 matchedPath = dist/cli/skills/superpowers-brainstorming/scripts/server.cjs matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.1.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/skills/superpowers-brainstorming/scripts/server.cjsView on unpkg

packages/lsp-daemon/dist/cli.jsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.1.15 matchedPath = packages/lsp-daemon/dist/cli.js matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.1.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/lsp-daemon/dist/cli.jsView on unpkg

packages/lsp-daemon/dist/client.jsView file

•matchType = normalized_sha256 matchedPackage = @kl-c/matrixos@0.1.15 matchedPath = packages/lsp-daemon/dist/client.js matchedIdentity = npm:QGtsLWMvbWF0cml4b3M:0.1.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/lsp-daemon/dist/client.jsView on unpkg