@metaphi-ai/hum@0.1.26
Hum (हम): a self-improving coding agent for your terminal.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe source confirms conditional remote installer execution from an automatic postinstall hook, so a warning is warranted. The inspected code installs the package’s engine and does not establish the scanner’s browser credential theft claim or a concrete malicious chain.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package when the Hum engine is not already at this version and `uv` is unavailable.
Impact
Installer code can execute with the privileges of the npm installation process. The inspected behavior is consistent with engine setup, and no broader project mutation or credential exfiltration was established.
Mechanism
The hook runs the Astral installer through PowerShell or `curl | sh`, then uses `uv` to create an environment and install the matching `hum-cli` release.
AI rationale
The source confirms conditional remote installer execution from an automatic postinstall hook, so a warning is warranted. The inspected code installs the package’s engine and does not establish the scanner’s browser credential theft claim or a concrete malicious chain.
Evidence
package.jsonscripts/postinstall.jsdist/cli.mjs~/.hum/engine~/.hum
Network endpoints3
astral.sh/uv/install.ps1astral.sh/uv/install.shstorage.googleapis.com/hum-dist
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall script during installation.
- If `uv` is missing, postinstall downloads and executes its installer through a shell pipeline.
- Postinstall creates a Python environment and installs `hum-cli` at the package version.
- The bundled CLI checks for updates at a configurable distribution URL and can launch an installer for native installs.
Evidence against
- The inspected setup installs the package’s named engine into its configured Hum environment; no browser credential collection or exfiltration behavior was established in the inspected executable paths.
- The bundled CLI’s update check uses the configured distribution endpoint; the inspected code did not establish credential forwarding.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.mjsView file
317"use strict";
L318: if (process.env.NODE_ENV !== "production") {
L319: (function() {
...
L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."],
L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."]
L547: };
...
L2209: ];
L2210: if (process.platform !== "win32") {
L2211: module.exports.push(
...
L2357: }
L2358: process13.exitCode = code || /* istanbul ignore next */
L2359: 0;
Findings
1 Critical7 High4 Medium5 Low
CriticalBrowser Credential Phishingdist/cli.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.mjs
HighShelldist/cli.mjs
HighSame File Env Network Executiondist/cli.mjs
HighSandbox Evasion Gated Capabilitydist/cli.mjs
HighRemote Agent Bridgedist/cli.mjs
HighKnown Malware Source Similaritydist/cli.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirebin/hum.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @metaphi-ai/hum@0.1.26.
See all versions of @metaphi-ai/hum for other recorded verdicts.
- Review the evidence and your use of @metaphi-ai/hum@0.1.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.