@metaphi-ai/hum@0.1.35: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@metaphi-ai/hum@0.1.35: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/install.mjsView file

1// src/install.js L2: import { spawnSync } from "node:child_process"; L3: import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

74say("installing uv (it creates the Python environment for the part of hum that does the work) \u2026"); L75: const r = win ? runImpl("powershell", ["-ExecutionPolicy", "ByPass", "-c", "irm https://astral.sh/uv/install.ps1 | iex"], { stdio: "inherit" }) : runImpl("sh", ["-c", "curl -LsSf h... L76: u = r && r.status === 0 ? uv() : null;

High

Shell

Package source references shell execution.

dist/install.mjsView on unpkg · L74

bin/hum.jsView file

8// a URL, not a path: on Windows `C:\…` is not something the ESM loader will import L9: await import(pathToFileURL(path.join(here, '..', 'dist', 'cli.mjs')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hum.jsView on unpkg · L8

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2209: ]; L2210: if (process.platform !== "win32") { L2211: module.exports.push( ... L2357: } L2358: process13.exitCode = code || /* istanbul ignore next */ L2359: 0;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

75739"use strict"; L75740: if (process.env.NODE_ENV === "production") { L75741: module.exports = require_react_jsx_runtime_production_min(); ... L75749: import fs5 from "node:fs"; L75750: import net from "node:net"; L75751: import os6 from "node:os"; ... L75753: import crypto from "node:crypto"; L75754: import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process"; L75755: function uvToolDirs() {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L75739

57423/* metaparameters */ L57424: "alias audit before loglevel noop require subscribe tag owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_diff type_check e... L57425: ), ... L74578: // src/install.js L74579: import { spawnSync } from "node:child_process"; L74580: import fs2 from "node:fs"; ... L74588: try { L74589: return fs2.readFileSync(stampPath(env3), "utf8").trim() || null; L74590: } catch {

Source & flagged code

8 flagged

package.jsonView file

Lines 1-13json

1{

2 "name": "@metaphi-ai/hum",

3 "version": "0.1.35",

4 "description": "Hum (हम): a self-improving coding agent for your terminal.",

5 "license": "UNLICENSED",

6 "type": "module",

7 "bin": { "hum": "bin/hum.js" },

8 "files": ["bin", "dist", "scripts"],

9 "scripts": { "postinstall": "node scripts/postinstall.js" },

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "engines": { "node": ">=18" },

11 "repository": { "type": "git", "url": "git+https://github.com/metaphi-labs/hum-cli.git" }

12}

13

dist/install.mjsView file

Lines 1-21javascript

1// src/install.js

2import { spawnSync } from "node:child_process";

3import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

4import os from "node:os";

bin/hum.jsView file

Lines 1-10javascript

1#!/usr/bin/env node

2// `hum` from npm: the Ink front-end, which starts Hum's engine (Python, installed by postinstall

3// via uv) and talks to it over localhost. Everything the person sees is here; everything the

4// session records is in the engine.

5import { fileURLToPath, pathToFileURL } from 'node:url';

6import path from 'node:path';

7const

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2209: ]; L2210: if (process.platform !== "win32") { L2211: module.exports.push( ... L2357: } L2358: process13.exitCode = code || /* istanbul ignore next */ L2359: 0;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

75739"use strict"; L75740: if (process.env.NODE_ENV === "production") { L75741: module.exports = require_react_jsx_runtime_production_min(); ... L75749: import fs5 from "node:fs"; L75750: import net from "node:net"; L75751: import os6 from "node:os"; ... L75753: import crypto from "node:crypto"; L75754: import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process"; L75755: function uvToolDirs() {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L75739

57423/* metaparameters */ L57424: "alias audit before loglevel noop require subscribe tag owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_diff type_check e... L57425: ), ... L74578: // src/install.js L74579: import { spawnSync } from "node:child_process"; L74580: import fs2 from "node:fs"; ... L74588: try { L74589: return fs2.readFileSync(stampPath(env3), "utf8").trim() || null; L74590: } catch {

Lines 54-94javascript

54 return true;

55}

56function installEngine(version, { env = process.env, say = (m) => console.log(`hum: ${m}`), runImpl = run, now = Date.now() } = {}) {

57 const home = humHome(env);

58 const dir = engineDir(env);

59 const python = enginePython(env);

60 const localBin = path.join(os.homedir(), ".local", "bin");

61 const uvNames = ["uv", path.join(localBin, win ? "uv.exe" : "uv")];

62 const uv = () => uvNames.find((u) => {

63 const r = runImpl(u, ["--version"]);

64 return r && r.status === 0;

65 });

66 const spec = env.HUM_ENGINE_SPEC || `hum-cli==${version}`;

67 const outcome = (ok, error = null, got = version) => {

68 writeInstallState({ version: got, wanted: version, ok, error, at: now }, env);

69 return { ok, version: got, error };

70 };

71 try {

72 let u = uv();

73 if (!u) {

74 say("installing uv (it creates the Python environment for the part of hum that does the work) \u2026");

75 const r = win ? runImpl("powershell", ["-ExecutionPolicy", "ByPass", "-c", "irm https://astral.sh/uv/install.ps1 | iex"], { stdio: "inherit" }) : runImpl("sh", ["-c", "curl -LsSf https://astral.sh/uv/install.sh | sh"], { stdio: "inherit"

76 u = r && r.status === 0 ? uv() : null;

High

Shell

Package source references shell execution.

dist/install.mjsView on unpkg · L74

77 if (!u) return outcome(false, `could not install uv; install it from https://astral.sh/uv and run: ${npmFix(version)}`);

78 }

79 say(`installing ${env.HUM_ENGINE_SPEC ? spec : `hum ${version}`} into ${dir} \u2026`);

80 fs.mkdirSync(home, { recursive: true });

81 try {

82 fs.unlinkSync(stampPath(env));

83 } catch {

84 }

85 if (!fs.existsSync(python)) {

86 const args = ["venv", "--quiet", "--python", "3.12", ...fs.existsSync(dir) ? ["--clear"] : [], dir];

87 if ((runImpl(u, args, { stdio: "inherit" }) || {}).status !== 0) return outcome(false, "uv venv failed");

88 }

89 if ((runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status !== 0) return outcome(false, `uv pip install ${spec} failed`);

90 const got = importedVersion(env, runImpl);

91 if (!got) return outcome(false, "hum did not import after the install");

92 if (got !== version && !env.HUM_ENGINE_SPEC) return outcome(false, `installed ${got}, wanted ${version}`, got);

93 fs.mkdirSync(dir, { recursive: true });

94 fs.writeFileSync(stampPath(env), `${got}