@kunlv/atdc@1.1.28: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@kunlv/atdc@1.1.28: AI-agent control-surface risk | LPM Firewall

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/repair-mcp.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/atdc.jsView file

171try { L172: const { execSync } = require('child_process'); L173: gitDir = execSync('git rev-parse --git-dir', { encoding: 'utf8' }).trim();

High

Child Process

Package source references child process execution.

bin/atdc.jsView on unpkg · L171

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. ${result.reportpath}`); console.log('next: human c2 code review'); } function cmdhandoff(args) { const change = args[0] || findactivechange(); if (!change) { console.log('usage: atdc handoff <change-name>'); process.exit(1); } runscript('handoff-compress.sh', change); } function cmdrun(args) { let mode = 'full'; if (args.includes('--bugfix')) mode = 'bugfix'; else if (args.includes('--hotfix')) mode = 'hotfix'; else if (args.includes('--tweak')) mode = 'tweak'; const { execsync } = require('child_process'); const ts = new date().toisostring().slice(0, 10).replace(/-/g, ''); const changename = `${mode}-${ts}`; const changedir = `openspec/changes/${chang

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/atdc.jsView on unpkg

src/validators/bugfix-finish.jsView file

19cwd: repoRoot, L20: shell: true, L21: encoding: 'utf8',

High

Shell

Package source references shell execution.

src/validators/bugfix-finish.jsView on unpkg · L19

src/installers/mcp-registry.jsView file

27Install-time code directly mutates a foreign AI-agent control surface: L59: function ensureStateDir() { L60: if (!exists(ATDC_STATE_DIR)) fs.mkdirSync(ATDC_STATE_DIR, { recursive: true }); L61: if (!exists(STABLE_BIN_DIR)) fs.mkdirSync(STABLE_BIN_DIR, { recursive: true }); L62: } ... L69: } L70: fs.writeFileSync(PACKAGE_ROOT_FILE, pkgDir + '\n', 'utf8'); L71: return pkgDir; ... L84: writePackageRoot(); L85: fs.writeFileSync(STABLE_MCP_LAUNCHER, LAUNCHER_MCP_SRC, { mode: 0o755 }); L86: fs.writeFileSync(STABLE_HEALTH_LAUNCHER, LAUNCHER_HEALTH_SRC, { mode: 0o755 }); L87: try { fs.chmodSync(STABLE_MCP_LAUNCHER, 0o755); } catch {} ... L160: const dir = path.dirname(filePath); Write operation from scripts/repair-mcp.js: L27: const targets = [ L28: { path: path.join(pkgRoot, '.mcp.json'), kind: '

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/installers/mcp-registry.jsView on unpkg · L27

src/doctor.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: ') { check('claude/agents 仅一侧存在或无重复', true); } else { check('当前目录无 claude.md / agents.md', true); } } catch (e) { check(`always-rules detect: ${e.message}`, false); } } function checkmcpprofiletip() { if (!process.argv.includes('--quiet')) { console.log('\n🎛️ mcp profile:'); } const profile = (process.env.atdc_mcp_profile || 'full').tolowercase(); if (profile === 'core') { check('atdc_mcp_profile=core（tools/list 已瘦身）', true); } else { check( `当前 profile=${profile}；日常编码可设 atdc_mcp_profile=core 约省一半 tools schema（需 kapi/audit/viz 时用 full）`, true ); if (!process.argv.includes('--quiet')) { console.log(' export atdc_mcp_pro

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/doctor.jsView on unpkg

src/cli/publish.jsView file

118try { L119: execSync(`npm install -g ${pkgPath}`, { stdio: 'inherit', cwd: safeCwd }); L120: console.log(` ✓ v${newVer} 已安装（本地路径，无需等待 CDN）\n`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/cli/publish.jsView on unpkg · L118

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/cli/publish.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/publish.jsView on unpkg

tools/test_pr_analyzer.pyView file

•path = tools/test_pr_analyzer.py kind = build_helper sizeBytes = 22402 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/test_pr_analyzer.pyView on unpkg

tools/kapi/tests/test_tme_cookie.pyView file

•path = tools/kapi/tests/test_tme_cookie.py kind = payload_in_excluded_dir sizeBytes = 8125 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tools/kapi/tests/test_tme_cookie.pyView on unpkg

src/installers/mcp-registry.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/installers/mcp-registry.js#virtual:normalized:round1View on unpkg

src/mcp/atdc-server.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/mcp/atdc-server.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mcp/atdc-server.jsView on unpkg

src/mcp/health-server.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/mcp/health-server.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mcp/health-server.jsView on unpkg

src/validators/r5-destructive.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/validators/r5-destructive.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/validators/r5-destructive.jsView on unpkg

tools/kapi/kapi-cdp-cookie.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = tools/kapi/kapi-cdp-cookie.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

tools/kapi/kapi-cdp-cookie.jsView on unpkg

src/mcp/modules/kb-providers.test.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/mcp/modules/kb-providers.test.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mcp/modules/kb-providers.test.jsView on unpkg

src/validators/kb-cite.test.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/validators/kb-cite.test.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/validators/kb-cite.test.jsView on unpkg

src/mcp/modules/evidence.jsView file

•matchType = normalized_sha256 matchedPackage = @kunlv/atdc@1.1.27 matchedPath = src/mcp/modules/evidence.js matchedIdentity = npm:QGt1bmx2L2F0ZGM:1.1.27 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mcp/modules/evidence.jsView on unpkg