@metaphi-ai/hum@0.1.53: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@metaphi-ai/hum@0.1.53: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/install.mjsView file

1// src/install.js L2: import { spawnSync } from "node:child_process"; L3: import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

88say("installing uv (it creates the Python environment for the part of hum that does the work) \u2026"); L89: const r = win ? runImpl("powershell", ["-ExecutionPolicy", "ByPass", "-c", "irm https://astral.sh/uv/install.ps1 | iex"], { stdio: "inherit" }) : runImpl("sh", ["-c", "curl -LsSf h... L90: u = r && r.status === 0 ? uv() : null;

High

Shell

Package source references shell execution.

dist/install.mjsView on unpkg · L88

•matchType = normalized_sha256 matchedPackage = @metaphi-ai/hum@0.1.50 matchedPath = dist/install.mjs matchedIdentity = npm:QG1ldGFwaGktYWkvaHVt:0.1.50 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/install.mjsView on unpkg

bin/hum.jsView file

8// a URL, not a path: on Windows `C:\…` is not something the ESM loader will import L9: await import(pathToFileURL(path.join(here, '..', 'dist', 'cli.mjs')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hum.jsView on unpkg · L8

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2398: cwdFunction = isBrowser ? () => { L2399: throw new Error("`process.cwd()` only works in Node.js, not the browser."); L2400: } : process2.cwd; ... L2502: } L2503: const imageBuffer = Buffer.from(data); L2504: return wrapOsc(returnValue + `;size=${imageBuffer.byteLength}:` + imageBuffer.toString("base64") + BEL);

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

83456import fs4 from "node:fs"; L83457: import net from "node:net"; L83458: import os5 from "node:os"; ... L83460: import crypto from "node:crypto"; L83461: import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process"; L83462: function uvToolDirs() { L83463: const dirs = []; L83464: if (process.env.UV_TOOL_DIR) dirs.push(process.env.UV_TOOL_DIR); L83465: if (win3) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L83456

32611if (filePath && origin?.line && fs.existsSync(filePath)) { L32612: const sourceCode = fs.readFileSync(filePath, "utf8"); L32613: excerpt = dist_default3(sourceCode, origin.line); ... L65850: /* metaparameters */ L65851: "alias audit before loglevel noop require subscribe tag owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_diff type_check e... L65852: ), ... L83192: // src/install.js L83193: import { spawnSync } from "node:child_process"; L83194: import fs2 from "node:fs";

Source & flagged code

11 flagged

package.jsonView file

Lines 1-13json

1{

2 "name": "@metaphi-ai/hum",

3 "version": "0.1.53",

4 "description": "Hum: a self-improving coding agent for your terminal.",

5 "license": "UNLICENSED",

6 "type": "module",

7 "bin": { "hum": "bin/hum.js" },

8 "files": ["bin", "dist", "scripts"],

9 "scripts": { "postinstall": "node scripts/postinstall.js" },

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "engines": { "node": ">=18" },

11 "repository": { "type": "git", "url": "git+https://github.com/metaphi-labs/hum-cli.git" }

12}

13

dist/install.mjsView file

Lines 1-21javascript

1// src/install.js

2import { spawnSync } from "node:child_process";

3import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

4import os from "node:os";

bin/hum.jsView file

Lines 1-10javascript

1#!/usr/bin/env node

2// `hum` from npm: the Ink front-end, which starts Hum's engine (Python, installed by postinstall

3// via uv) and talks to it over localhost. Everything the person sees is here; everything the

4// session records is in the engine.

5import { fileURLToPath, pathToFileURL } from 'node:url';

6import path from 'node:path';

7const

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2398: cwdFunction = isBrowser ? () => { L2399: throw new Error("`process.cwd()` only works in Node.js, not the browser."); L2400: } : process2.cwd; ... L2502: } L2503: const imageBuffer = Buffer.from(data); L2504: return wrapOsc(returnValue + `;size=${imageBuffer.byteLength}:` + imageBuffer.toString("base64") + BEL);

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

83456import fs4 from "node:fs"; L83457: import net from "node:net"; L83458: import os5 from "node:os"; ... L83460: import crypto from "node:crypto"; L83461: import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process"; L83462: function uvToolDirs() { L83463: const dirs = []; L83464: if (process.env.UV_TOOL_DIR) dirs.push(process.env.UV_TOOL_DIR); L83465: if (win3) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L83456

32611if (filePath && origin?.line && fs.existsSync(filePath)) { L32612: const sourceCode = fs.readFileSync(filePath, "utf8"); L32613: excerpt = dist_default3(sourceCode, origin.line); ... L65850: /* metaparameters */ L65851: "alias audit before loglevel noop require subscribe tag owner ensure group mode name|0 changes context force incl lens load_path onlyif provider returns root show_diff type_check e... L65852: ), ... L83192: // src/install.js L83193: import { spawnSync } from "node:child_process"; L83194: import fs2 from "node:fs";

Lines 68-108javascript

68 return true;

69}

70function installEngine(version, { env = process.env, say = (m) => console.log(`hum: ${m}`), runImpl = run, now = Date.now() } = {}) {

71 const home = humHome(env);

72 const dir = engineDir(env);

73 const python = enginePython(env);

74 const localBin = path.join(os.homedir(), ".local", "bin");

75 const uvNames = ["uv", path.join(localBin, win ? "uv.exe" : "uv")];

76 const uv = () => uvNames.find((u) => {

77 const r = runImpl(u, ["--version"]);

78 return r && r.status === 0;

79 });

80 const spec = env.HUM_ENGINE_SPEC || `hum-cli==${version}`;

81 const outcome = (ok, error = null, got = version) => {

82 writeInstallState({ version: got, wanted: version, ok, error, at: now }, env);

83 return { ok, version: got, error };

84 };

85 try {

86 let u = uv();

87 if (!u) {

88 say("installing uv (it creates the Python environment for the part of hum that does the work) \u2026");

89 const r = win ? runImpl("powershell", ["-ExecutionPolicy", "ByPass", "-c", "irm https://astral.sh/uv/install.ps1 | iex"], { stdio: "inherit" }) : runImpl("sh", ["-c", "curl -LsSf https://astral.sh/uv/install.sh | sh"], { stdio: "inherit"

90 u = r && r.status === 0 ? uv() : null;

High

Shell

Package source references shell execution.

dist/install.mjsView on unpkg · L88

91 if (!u) return outcome(false, `could not install uv; install it from https://astral.sh/uv and run: ${npmFix(version)}`);

92 }

93 say(`installing ${env.HUM_ENGINE_SPEC ? spec : `hum ${version}`} into ${dir} \u2026`);

94 fs.mkdirSync(home, { recursive: true });

95 try {

96 fs.unlinkSync(stampPath(env));

97 } catch {

98 }

99 const trusted = trustedPython(env, runImpl);

100 const makeVenv = (clear) => (runImpl(u, ["venv", "--quiet", "--python", trusted || "3.12", ...clear ? ["--clear"] : [], dir], { stdio: "inherit" }) || {}).status

101 const pipIn = () => (runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status === 0;

102 if (!fs.existsSync(python) && !makeVenv(fs.existsSync(dir))) return outcome(false, "uv venv failed");

103 if (!pipIn()) return outcome(false, `uv pip install ${spec} failed`);

104 let got = importedVersion(env, runImpl);

105 if (!got) return outcome(false, "hum did not import after the install");

106 if (got !== version && !env.HUM_ENGINE_SPEC) return outcome(false, `installed ${got}, wanted ${version}`, got);

107 let blocked = sslBlocked(env, runImpl);

108 if (blocked && trusted) {