registry / AI-agent control-surface risk / @krvinay/express_api

@krvinay/express_api

Node API Application server

This report shows the evidence for @krvinay/express_api@1.0.8. 1 of 2 known versions is blocked or flagged. The newest version, 2.2.0, is flagged. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The concrete postinstall mutation of a consuming project's root CLAUDE.md meets the foreign/broad AI-agent control-surface blocking policy. No exfiltration was found, but it is not needed for this lifecycle-based block.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install

Impact

Unconsented modification of a broad project AI-agent control surface and project configuration.

Mechanism

postinstall project scaffolding and AI-agent context injection

Policy narrative

Installing the package executes install/index.js. It walks to the consumer project root, writes CLAUDE.md from the package, scaffolds files, and rewrites the consumer package.json main entry. A root CLAUDE.md can control Claude agent behavior for the whole project without an explicit user command.

AI rationale

Evidence

package.jsoninstall/index.jsinstall/CLAUDE.mdinstall/constants.js.envCLAUDE.mdserver.js.gitignore.cloudignorereadme.mdfavicon.svgsrc

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 97.0% confidence with low false-positive risk.

Evidence for policy risk

package.json runs `node install/index.js` as postinstall.
install/index.js derives the consuming project root and writes there.
install/index.js creates root CLAUDE.md during install.
install/index.js overwrites the consumer package.json `main` field.
install/CLAUDE.md is an AI-agent instruction guide loaded from project root.

Evidence against

No network or credential-exfiltration code found.
CLAUDE.md contains framework conventions, not payload instructions.
Runtime child process only loads application activity modules.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 28 file(s), 95.4 KB of source, external domains: db.test.in, expressjs.com, github.com, sequelize.org, www.npmjs.com, www.w3.org

Source & flagged code

4 flagged

package.jsonView file

Lines 33-72json

33 "url": "git+https://github.com/kumarvinay32/express_api.git"

34 },

35 "keywords": [

36 "API",

37 "SERVER"

38 ],

39 "bugs": {

40 "url": "https://github.com/kumarvinay32/express_api/issues"

41 },

42 "homepage": "https://github.com/kumarvinay32/express_api#readme",

43 "dependencies": {

44 "dotenv": "^17.3.1",

45 "express": "^4.21.2",

46 "mysql2": "^3.20.0",

47 "sequelize": "^6.37.8"

48 },

49 "engines": {

50 "node": ">= 18.0.0"

51 },

52 "scripts": {

53 "postinstall": "node install/index.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

54 "test": "echo \"Error: no test specified\" && exit 1"

55 },

56 "files": [

57 "index.d.ts",

58 "index.js",

59 "install",

60 "lib",

61 "mysql.d.ts",

62 "mysql.js",

63 "operators.d.ts",

64 "package.json",

65 "README.md",

66 "threads.d.ts",

67 "threads.js",

68 "util.d.ts",

69 "util.js"

70 ]

71}

install/constants.jsView file

Lines 198-238javascript

198 console.log('mysql_error', err.stack);

199 } else if (err) {

200 console.log('error', err.stack);

201 }

202 };

203

204

205

util.jsView file

Lines 1-13javascript

1/*!

2 * express api

4 * MIT Licensed

5 */

7'use strict';

9/**

10 * Expose `util`.

11 */

12exports

lib/util/index.jsView file

Lines 315-355javascript

315 }

316 }

317 if (all) {

318 roots = [{

319 id: 0,

320 parent_id: -1,

321 name: 'All',

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node install/index.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

install/constants.jsView file

218patternName = generic_password severity = medium line = 218 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

install/constants.jsView on unpkg · L218

util.jsView file

11*/ L12: exports = module.exports = require("./lib/util");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

Findings

1 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumSecret Patterninstall/constants.js

MediumDynamic Requireutil.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptolib/util/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @krvinay/express_api@1.0.8.

The versions list below shows the verdict for each recorded version.

Avoid installing @krvinay/express_api@1.0.8. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-21 21:09:12.301Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

2.2.0latestSuspicious—WarnPublishedSep 9, 2026, 7:29 AM 1.0.8shownMaliciousSoft block: AI-agent control surfaceBlockPublishedJul 3, 2026, 10:46 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other AI-agent control-surface risk packages

Runtime surface

Behavioral surface

Related packages

Other AI-agent control-surface risk packages

Source & flagged code