@metaphi-ai/hum@0.1.5: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@metaphi-ai/hum@0.1.5: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2209: ]; L2210: if (process.platform !== "win32") { L2211: module.exports.push( ... L2357: } L2358: process13.exitCode = code || /* istanbul ignore next */ L2359: 0;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

31298/** @param {string} s */ L31299: exec(s) { L31300: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/cli.mjsView on unpkg · L31298

56858L56859: // node_modules/highlight.js/lib/languages/powershell.js L56860: var require_powershell = __commonJS({

High

Shell

Package source references shell execution.

dist/cli.mjsView on unpkg · L56858

84166// src/engine.js L84167: import net from "node:net"; L84168: import { spawn } from "node:child_process"; L84169: var EngineError = class extends Error { ... L84171: var ENGINE_CANDIDATES = [ L84172: process.env.HUM_ENGINE, L84173: // explicit: a command to run

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L84166

57423/* metaparameters */ L57424: "alias audit before loglevel noop require subscribe tag owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_diff type_check e... L57425: ), ... L80422: if (filePath && origin?.line && fs.existsSync(filePath)) { L80423: const sourceCode = fs.readFileSync(filePath, "utf8"); L80424: excerpt = dist_default3(sourceCode, origin.line); ... L84167: import net from "node:net"; L84168: import { spawn } from "node:child_process"; L84169: var EngineError = class extends Error {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/cli.mjsView on unpkg · L57423

bin/hum.jsView file

7const here = path.dirname(fileURLToPath(import.meta.url)); L8: await import(path.join(here, '..', 'dist', 'cli.mjs'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hum.jsView on unpkg · L7

scripts/postinstall.jsView file

2// Quiet when it already is; installs uv first when it is missing; never fails the npm install. L3: import { execSync, spawnSync } from 'node:child_process'; L4: import os from 'node:os'; ... L6: L7: const which = (cmd) => spawnSync(process.platform === 'win32' ? 'where' : 'which', [cmd], { stdio: 'ignore' }).status === 0; L8: const local = path.join(os.homedir(), '.local', 'bin'); L9: const sh = (cmd) => { try { execSync(cmd, { stdio: 'inherit', env: { ...process.env, PATH: `${local}${path.delimiter}${process.env.PATH || ''}` } }); return true; } catch { return ... L10: ... L16: const ok = process.platform === 'win32' L17: ? sh('powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"') L18: : sh('curl -LsSf https://astral.sh/uv/install.sh | sh');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.jsView on unpkg · L2

Source & flagged code

9 flagged

package.jsonView file

Lines 1-13json

1{

2 "name": "@metaphi-ai/hum",

3 "version": "0.1.5",

4 "description": "Hum (हम): a self-improving coding agent for your terminal.",

5 "license": "UNLICENSED",

6 "type": "module",

7 "bin": { "hum": "bin/hum.js" },

8 "files": ["bin", "dist", "scripts"],

9 "scripts": { "postinstall": "node scripts/postinstall.js" },

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "engines": { "node": ">=18" },

11 "repository": { "type": "git", "url": "git+https://github.com/metaphi-labs/hum-cli.git" }

12}

13

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2209: ]; L2210: if (process.platform !== "win32") { L2211: module.exports.push( ... L2357: } L2358: process13.exitCode = code || /* istanbul ignore next */ L2359: 0;

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

31298/** @param {string} s */ L31299: exec(s) { L31300: this.matcherRe.lastIndex = this.lastIndex;

High

Child Process

Package source references child process execution.

dist/cli.mjsView on unpkg · L31298

56858L56859: // node_modules/highlight.js/lib/languages/powershell.js L56860: var require_powershell = __commonJS({

High

Shell

Package source references shell execution.

dist/cli.mjsView on unpkg · L56858

84166// src/engine.js L84167: import net from "node:net"; L84168: import { spawn } from "node:child_process"; L84169: var EngineError = class extends Error { ... L84171: var ENGINE_CANDIDATES = [ L84172: process.env.HUM_ENGINE, L84173: // explicit: a command to run

bin/hum.jsView file

Lines 1-9javascript

1#!/usr/bin/env node

2// `hum` from npm: the Ink front-end, which starts Hum's engine (Python, installed by postinstall

3// via uv) and talks to it over localhost. Everything the person sees is here; everything the

4// session records is in the engine.

5import { fileURLToPath } from 'node:url';

6import path from 'node:path';

7const

scripts/postinstall.jsView file

Lines 1-22javascript

1// Make sure the engine is installed: `hum-engine` on PATH (uv tool install hum-cli).

2// Quiet when it already is; installs uv first when it is missing; never fails the npm install.

3import { execSync, spawnSync } from 'node:child_process';

4import os from 'node:os';

5import path from 'node:path';