@lystech/core@3.0.109
Lystech Core contains essentials for lystech apps
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe package automatically writes a consumer GitHub workflow during postinstall, creating unresolved installation-time mutation risk despite the package-aligned registry purpose and skip guards. The inspected source does not substantiate the scanner’s credential-exfiltration claim.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Installing the package in a project that lists @lystech/core, unless the workflow already exists or the skip environment flag is set.
Impact
The consumer project gains an automated workflow that runs on pushes or manual dispatch and registers the package.
Mechanism
The hook creates .github/workflows/sync-package-registry.yml containing workflow steps for package registry registration.
AI rationale
The package automatically writes a consumer GitHub workflow during postinstall, creating unresolved installation-time mutation risk despite the package-aligned registry purpose and skip guards. The inspected source does not substantiate the scanner’s credential-exfiltration claim.
Evidence
package.jsonbin/postinstall.cjs.github/workflows/sync-package-registry.yml
Network endpoints1
api.github.com
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs bin/postinstall.cjs automatically after installation.
- The hook proceeds when the consumer project lists @lystech/core and no existing workflow is present; it also supports an environment skip flag.
- The hook creates a GitHub Actions workflow in the consumer project without an explicit setup command.
- The generated workflow registers the project in the package registry; the inspected excerpt shows it uses the GitHub repository context.
- The UMD bundle excerpt reads Firebase defaults from environment or browser cookies, with no evidence in that excerpt of sending them elsewhere.
Evidence against
- The postinstall hook skips when run inside @lystech/core itself and skips projects that do not depend on the package.
- The inspected setup workflow uses GitHub repository context and the GitHub API, consistent with package registry setup.
- The flagged bundle excerpt alone does not establish credential exfiltration.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node bin/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/lystech-core-provider.umd.jsView file
16* LICENSE file in the root directory of this source tree.
L17: */var rp;function K8(){return rp||(rp=1,process.env.NODE_ENV!=="production"&&function(){var e=O,t=Symbol.for("react.element"),n=Symbol.for("react.portal"),r=Symbol.for("react.fragm...
L18: `+ie+Z}}var oe=!1,ce;{var G=typeof WeakMap=="function"?WeakMap:Map;ce=new G}function ne(Z,Ne){if(!Z||oe)return"";{var ae=ce.get(Z);if(ae!==void 0)return ae}var Ee;oe=!0;var Re=Erro...
...
L20: `),St=Ke.length-1,xt=Mt.length-1;St>=1&&xt>=0&&Ke[St]!==Mt[xt];)xt--;for(;St>=1&&xt>=0;St--,xt--)if(Ke[St]!==Mt[xt]){if(St!==1||xt!==1)do if(St--,xt--,xt<0||Ke[St]!==Mt[xt]){var We...
L21: `+Ke[St].replace(" at new "," at ");return Z.displayName&&We.includes("<anonymous>")&&(We=We.replace("<anonymous>",Z.displayName)),typeof Z=="function"&&ce.set(Z
Findings
3 Critical7 High4 Medium5 Low
CriticalCredential Exfiltrationdist/lystech-core-provider.umd.js
CriticalTrigger Reachable Dangerous Capabilitydist/lystech-core-provider.umd.js
CriticalPrevious Version Dangerous Deltabin/check-pwa.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretdist/lystech-core-provider.umd.js
HighTrigger Reachable Credential Exfiltrationdist/lystech-core-provider.umd.js
HighKnown Malware Source Similaritybin/attach.cjs
HighKnown Malware Source Similaritybin/postinstall.cjs
HighKnown Malware Source Similaritybin/setup-registry.cjs
HighSecret Patterndist/lystech-core-provider.umd.js
Medium
Affected versions and remediation
This report applies to @lystech/core@3.0.109.
See all versions of @lystech/core for other recorded verdicts.
- Review the evidence and your use of @lystech/core@3.0.109 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.