registry / @lijuneleven/iris / 0.2.12

@lijuneleven/iris@0.2.12

Feishu-first personal AI assistant powered by local Agents.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall launches a bundled or downloaded native binary that installs Codex and Claude Code hooks. This mutates foreign AI-agent control surfaces without an explicit user command.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation

Impact

Codex and Claude Code completion behavior can be changed and routed through Iris.

Mechanism

postinstall native hook installation

Policy narrative

Installing the package runs scripts/install.js, which executes the native Iris binary with --install-agent-hooks. The documented effect is installation of Codex notify and Claude Code Stop completion hooks, affecting external agent configurations during npm postinstall rather than after an explicit Iris command.

Rationale

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces. Documentation does not eliminate the install-time control-hijack risk.

Evidence

package.jsonscripts/install.jsREADME.mdvendor/iris-linux-amd64vendor/iris

Network endpoints2

github.com/elevenlj/iris/releases/download/v${version}/${assetName}/eleven_lj/iris/releases/download/v${version}/${assetName}

@lijuneleven/iris@0.2.12

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code