registry / @lmdelm-dev/bmo / 0.3.0

@lmdelm-dev/bmo@0.3.0

BMO - a GameBoy-style terminal for Linux and Windows. Python (tkinter) app bootstrapped by npm/bun.

AI Security Review

scanned 13d ago · by lpm-firewall-ai

Installing the npm package automatically downloads and unpacks mutable remote application code, then installs additional software. It can invoke privileged package-manager commands and create user desktop/font artifacts.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall (`node cli.js --install`)

Impact

A package install can execute changing remote payloads and alter the host before the user runs `bmo`.

Mechanism

unconsented lifecycle remote-code bootstrap and system mutation

Attack narrative

npm installation triggers cli.js. It fetches and extracts an unpinned GitHub main-branch archive, then conditionally pipes remote opencode and Ollama installers to shells, uses OS package managers (including sudo) and pip, and writes desktop/font artifacts. The fetched application is subsequently executed by the bmo command, so a later remote-branch change can become local code execution without a package version change.

Rationale

The behavior is explicit rather than stealthy, but it is still an unconsented postinstall remote-code bootstrap with broad host mutation and no content pinning or verification. This meets the firewall block threshold for concrete install-time execution risk.

Evidence

package.jsoncli.jsREADME.mddist/$HOME/.opencode/bin$HOME/.local/share/fonts/Blue Water.otf$HOME/Library/Fonts/Blue Water.otf$XDG_DESKTOP_DIR/bmo.desktop

Network endpoints4

@lmdelm-dev/bmo@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code