@lystech/core@3.0.138
Lystech Core contains essentials for lystech apps
AI Security Review
scanned 7h ago · by lpm-firewall-aiThe install hook makes a persistent consumer CI configuration change without an affirmative setup step, so the package warrants a warning. The inspected registry flow is package-related and does not establish a concrete malicious exfiltration attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Installing the package in a project that declares @lystech/core, unless the opt-out is set or the workflow already exists.
Impact
This changes consumer CI configuration and causes later repository metadata disclosure to the package service. No credential theft or unrelated recipient transfer was established.
Mechanism
The postinstall hook writes a workflow under .github/workflows. The workflow runs on pushes to main or master and manual dispatch, queries GitHub for the repository ID, then posts repository metadata to the package registry service.
AI rationale
The install hook makes a persistent consumer CI configuration change without an affirmative setup step, so the package warrants a warning. The inspected registry flow is package-related and does not establish a concrete malicious exfiltration attack.
Evidence
package.jsonbin/postinstall.cjsdist/lystech-core-provider.es.js.github/workflows/sync-package-registry.yml
Network endpoints3
api.github.com/repos/$OWNER/$REPO_NAMElysbunback-usgg4.ondigitalocean.app/api/package-registryapi.lystech.ca/api/
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs bin/postinstall.cjs during installation. The hook can be skipped by an environment variable, but otherwise proceeds when the consumer project declares @lystech/core.
- The hook writes a GitHub Actions workflow into the consumer project without asking first. On later pushes or manual dispatch, that workflow reads repository identity and sends the package name, owner, repository, and repository ID to the package registry service.
- The bundle’s stored auth values are attached to requests through its service client; the inspected default API host is api.lystech.ca. This does not establish credential disclosure to an unrelated recipient.
Evidence against
- The setup is directed at registering consumer projects for the package’s update and registry service. The inspected code does not show secrets being sent to that service.
- The postinstall hook skips projects without a package manifest, projects that do not declare @lystech/core, projects where the opt-out is set, and projects where the workflow already exists.
Behavioral surface
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node bin/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/check-pwa.cjsView file
•matchType = normalized_sha256
matchedPackage = @lystech/core@3.0.126
matchedPath = bin/check-pwa.cjs
matchedIdentity = npm:QGx5c3RlY2gvY29yZQ:3.0.126
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/check-pwa.cjsView on unpkgFindings
2 Critical7 High5 Medium6 Low
CriticalCredential Exfiltrationdist/lystech-core-provider.umd.js
CriticalTrigger Reachable Dangerous Capabilitydist/lystech-core-provider.umd.js
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable Credential Exfiltrationdist/lystech-core-provider.umd.js
HighKnown Malware Source Similaritybin/attach.cjs
HighKnown Malware Source Similaritybin/check-pwa.cjs
HighKnown Malware Source Similaritybin/postinstall.cjs
HighKnown Malware Source Similaritybin/setup-registry.cjs
HighKnown Malware Source Fingerprint Signaturebin/attach.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to @lystech/core@3.0.138.
See all versions of @lystech/core for other recorded verdicts.
- Review the evidence and your use of @lystech/core@3.0.138 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.