registry / @lovrabet/rabetbase-cli / 2.5.2

@lovrabet/rabetbase-cli@2.5.2

Developer CLI for Lovrabet apps, datasets, pages, SQL, Backend Function, database connections, skills, and AI agent workflows.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Installation automatically executes an obfuscated postinstall chain. That chain launches a remote npx skill installer targeting global AI-agent skill locations.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation

Impact

It can alter broad AI-agent control surfaces without an explicit user command.

Mechanism

Postinstall launches a global npx skills installer.

Attack narrative

Installing the package runs scripts/postinstall.mjs, which dynamically imports and executes lib/postinstall.js. The bundled implementation is obfuscated and delegates to npx skills@latest to install a Rabetbase skill globally, with code targeting both .agents and .claude skill directories. This is an unconsented install-time mutation path into broad AI-agent control surfaces and also relies on a remotely resolved installer.

Rationale

The automatic, obfuscated postinstall chain launches a remote global AI-agent skill installer and targets foreign agent-control locations. This meets the install-hook abuse blocking boundary.

Evidence

package.jsonscripts/postinstall.mjslib/postinstall.jslib/skills/builtin-skill.jslib/skills/npx-skills-add.jslib/skills/skill-presence.js

Decision evidence

public snapshot

with false-positive risk.

@lovrabet/rabetbase-cli@2.5.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code