@lystech/core@3.0.95

Lystech Core contains essentials for lystech apps

AI Security Review

scanned 13d ago · by lpm-firewall-ai

The automatic consumer-project workflow mutation is a concrete risk, so the package merits a warning. The inspected source does not establish a block-eligible attack such as credential exfiltration or AI-agent control hijacking.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Package installation invokes the postinstall script in a project that depends on @lystech/core, unless the opt-out is set.

Impact

The consumer project gains an automatic workflow that can run on pushes and send repository metadata to the registry service.

Mechanism

The hook creates a registry-sync workflow when that file is absent; the workflow posts package and repository metadata to a Lystech endpoint.

AI rationale

Evidence

package.jsonbin/postinstall.cjs.github/workflows/sync-package-registry.yml

Network endpoints1

lysbunback-usgg4.ondigitalocean.app

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package runs bin/postinstall.cjs automatically during installation.
The hook skips the package’s own project and checks whether the consuming project lists @lystech/core.
When its workflow file is absent, the hook creates .github/workflows/sync-package-registry.yml without requiring an explicit command.
The generated workflow posts package and repository metadata to a Lystech registry endpoint.
The bundle’s token send is tied to an injected URL; the inspected excerpt does not establish that URL’s destination.

Evidence against

The hook includes a SKIP_LYSTECH_SETUP=true opt-out and skips when the workflow already exists.
The inspected install-hook behavior registers repository metadata; it does not show secrets being sent by the hook.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinified

Source & flagged code

11 flagged

package.jsonView file

•scripts.postinstall = node bin/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lystech-core-provider.umd.jsView file

16Trigger-reachable chain: manifest.main -> dist/lystech-core-provider.umd.js L16: * LICENSE file in the root directory of this source tree. L17: */var M0;function L4(){return M0||(M0=1,process.env.NODE_ENV!=="production"&&function(){var e=O,t=Symbol.for("react.element"),n=Symbol.for("react.portal"),r=Symbol.for("react.fragm... L18: `+ae+K}}var ie=!1,le;{var G=typeof WeakMap=="function"?WeakMap:Map;le=new G}function ne(K,Me){if(!K||ie)return"";{var Fe=le.get(K);if(Fe!==void 0)return Fe}var Ve;ie=!0;var at=Erro... ... L20: `),xt=ut.length-1,At=Bt.length-1;xt>=1&&At>=0&&ut[xt]!==Bt[At];)At--;for(;xt>=1&&At>=0;xt--,At--)if(ut[xt]!==Bt[At]){if(xt!==1||At!==1)do if(xt--,At--,At<0||ut[xt]!==Bt[At]){var We... L21: `+ut[xt].replace(" at new "," at ");return K.displayName&&We.includes("<anonymous>")&

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/lystech-core-provider.umd.jsView on unpkg · L16

1727patternName = google_api_key severity = high line = 1727

High

High Secret

Package contains a high-severity secret pattern.

dist/lystech-core-provider.umd.jsView on unpkg · L1727

16Trigger-reachable credential exfiltration chain: manifest.main -> dist/lystech-core-provider.umd.js L16: * LICENSE file in the root directory of this source tree. L17: */var M0;function L4(){return M0||(M0=1,process.env.NODE_ENV!=="production"&&function(){var e=O,t=Symbol.for("react.element"),n=Symbol.for("react.portal"),r=Symbol.for("react.fragm... L18: `+ae+K}}var ie=!1,le;{var G=typeof WeakMap=="function"?WeakMap:Map;le=new G}function ne(K,Me){if(!K||ie)return"";{var Fe=le.get(K);if(Fe!==void 0)return Fe}var Ve;ie=!0;var at=Erro... ... L20: `),xt=ut.length-1,At=Bt.length-1;xt>=1&&At>=0&&ut[xt]!==Bt[At];)At--;for(;xt>=1&&At>=0;xt--,At--)if(ut[xt]!==Bt[At]){if(xt!==1||At!==1)do if(xt--,At--,At<0||ut[xt]!==Bt[At]){var We... L21: `+ut[xt].replace(" at new "," at ");return K.displayName&&We.

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/lystech-core-provider.umd.jsView on unpkg · L16

1727patternName = google_api_key severity = high line = 1727

High

Secret Pattern

Google API key in dist/lystech-core-provider.umd.js

dist/lystech-core-provider.umd.jsView on unpkg · L1727

dist/lystech-core-provider.es.jsView file

44function pO() { L45: return Rp || (Rp = 1, process.env.NODE_ENV !== "production" && function() { L46: var e = me, t = Symbol.for("react.element"), n = Symbol.for("react.portal"), r = Symbol.for("react.fragment"), a = Symbol.for("react.strict_mode"), i = Symbol.for("react.profiler")... ... L401: var ze = function() { L402: Be || (Be = !0, y("%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you shou... L403: }; ... L670: for (let r = 0; r < e.length; r++) { L671: let a = e.charCodeAt(r); L672: a < 128 ? t[n++] = a : a < 2048 ? (t[n++] = a >> 6 | 192, t[n++] = a & 63 | 128) : (a & 64512) === 55296 && r + 1 < e.length && (e.charCodeAt(r + 1) & 64512) === 56320 ? (a = 65536... ... L704:

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/lystech-core-provider.es.jsView on unpkg · L44

bin/attach.cjsView file

•matchType = normalized_sha256 matchedPackage = @lystech/core@3.0.122 matchedPath = bin/attach.cjs matchedIdentity = npm:QGx5c3RlY2gvY29yZQ:3.0.122 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/attach.cjsView on unpkg

bin/postinstall.cjsView file

•matchType = normalized_sha256 matchedPackage = @lystech/core@3.0.122 matchedPath = bin/postinstall.cjs matchedIdentity = npm:QGx5c3RlY2gvY29yZQ:3.0.122 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.cjsView on unpkg

bin/setup-registry.cjsView file

•matchType = normalized_sha256 matchedPackage = @lystech/core@3.0.122 matchedPath = bin/setup-registry.cjs matchedIdentity = npm:QGx5c3RlY2gvY29yZQ:3.0.122 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/setup-registry.cjsView on unpkg

bin/check-pwa.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @lystech/core@3.0.114 matchedIdentity = npm:QGx5c3RlY2gvY29yZQ:3.0.114 similarity = 0.571 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/check-pwa.cjsView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/lystech-core-provider.umd.jsView file

Findings

3 Critical7 High4 Medium5 Low

CriticalCredential Exfiltrationdist/lystech-core-provider.es.js

CriticalTrigger Reachable Dangerous Capabilitydist/lystech-core-provider.umd.js

CriticalPrevious Version Dangerous Deltabin/check-pwa.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretdist/lystech-core-provider.umd.js

HighTrigger Reachable Credential Exfiltrationdist/lystech-core-provider.umd.js

HighKnown Malware Source Similaritybin/attach.cjs

HighKnown Malware Source Similaritybin/postinstall.cjs

HighKnown Malware Source Similaritybin/setup-registry.cjs

HighSecret Patterndist/lystech-core-provider.umd.js

Medium

Affected versions and remediation

This report applies to @lystech/core@3.0.95.

See all versions of @lystech/core for other recorded verdicts.

Review the evidence and your use of @lystech/core@3.0.95 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 23:45:18.930Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.