@metaphi-ai/hum@0.1.61: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@metaphi-ai/hum@0.1.61: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/install.mjsView file

1// src/install.js L2: import { spawnSync } from "node:child_process"; L3: import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

88say("installing uv (it creates the Python environment for the part of hum that does the work) \u2026"); L89: const r = win ? runImpl("powershell", ["-ExecutionPolicy", "ByPass", "-c", "irm https://astral.sh/uv/install.ps1 | iex"], { stdio: "inherit" }) : runImpl("sh", ["-c", "curl -LsSf h... L90: u = r && r.status === 0 ? uv() : null;

High

Shell

Package source references shell execution.

dist/install.mjsView on unpkg · L88

•matchType = normalized_sha256 matchedPackage = @metaphi-ai/hum@0.1.67 matchedPath = dist/install.mjs matchedIdentity = npm:QG1ldGFwaGktYWkvaHVt:0.1.67 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/install.mjsView on unpkg

bin/hum.jsView file

8// a URL, not a path: on Windows `C:\…` is not something the ESM loader will import L9: await import(pathToFileURL(path.join(here, '..', 'dist', 'cli.mjs')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hum.jsView on unpkg · L8

dist/cli.mjsView file

317"use strict"; L318: if (process.env.NODE_ENV !== "production") { L319: (function() { ... L545: isMounted: ["isMounted", "Instead, make sure to clean up subscriptions and pending requests in componentWillUnmount to prevent memory leaks."], L546: replaceState: ["replaceState", "Refactor your code to use setState instead (see https://github.com/facebook/react/issues/3236)."] L547: }; ... L2398: cwdFunction = isBrowser ? () => { L2399: throw new Error("`process.cwd()` only works in Node.js, not the browser."); L2400: } : process2.cwd; ... L2502: } L2503: const imageBuffer = Buffer.from(data); L2504: return wrapOsc(returnValue + `;size=${imageBuffer.byteLength}:` + imageBuffer.toString("base64") + BEL);

Critical

Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/cli.mjsView on unpkg · L317

•matchType = previous_version_dangerous_delta matchedPackage = @metaphi-ai/hum@0.2.4 matchedIdentity = npm:QG1ldGFwaGktYWkvaHVt:0.2.4 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.mjsView on unpkg

83486skipVersion = (version, env3 = process.env) => writeState({ ...readState(env3), skipped: version }, env3); L83487: skipped = (version, env3 = process.env) => !!version && readState(env3).skipped === version; L83488: UPDATE_CHOICES = [ ... L83497: import fs4 from "node:fs"; L83498: import net from "node:net"; L83499: import os5 from "node:os"; ... L83501: import crypto from "node:crypto"; L83502: import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process"; L83503: function uvToolDirs() {

Lines 68-108javascript

68 return true;

69}

70function installEngine(version, { env = process.env, say = (m) => console.log(`hum: ${m}`), runImpl = run, now = Date.now() } = {}) {

71 const home = humHome(env);

72 const dir = engineDir(env);

73 const python = enginePython(env);

74 const localBin = path.join(os.homedir(), ".local", "bin");

75 const uvNames = ["uv", path.join(localBin, win ? "uv.exe" : "uv")];

76 const uv = () => uvNames.find((u) => {

77 const r = runImpl(u, ["--version"]);

78 return r && r.status === 0;

79 });

80 const spec = env.HUM_ENGINE_SPEC || `hum-cli==${version}`;

81 const outcome = (ok, error = null, got = version) => {

82 writeInstallState({ version: got, wanted: version, ok, error, at: now }, env);

83 return { ok, version: got, error };

84 };

85 try {

86 let u = uv();

87 if (!u) {

88 say("installing uv (it creates the Python environment for the part of hum that does the work) \u2026");

89 const r = win ? runImpl("powershell", ["-ExecutionPolicy", "ByPass", "-c", "irm https://astral.sh/uv/install.ps1 | iex"], { stdio: "inherit" }) : runImpl("sh", ["-c", "curl -LsSf https://astral.sh/uv/install.sh | sh"], { stdio: "inherit"

90 u = r && r.status === 0 ? uv() : null;

High

Shell

Package source references shell execution.

dist/install.mjsView on unpkg · L88

91 if (!u) return outcome(false, `could not install uv; install it from https://astral.sh/uv and run: ${npmFix(version)}`);

92 }

93 say(`installing ${env.HUM_ENGINE_SPEC ? spec : `hum ${version}`} into ${dir} \u2026`);

94 fs.mkdirSync(home, { recursive: true });

95 try {

96 fs.unlinkSync(stampPath(env));

97 } catch {

98 }

99 const trusted = trustedPython(env, runImpl);

100 const makeVenv = (clear) => (runImpl(u, ["venv", "--quiet", "--python", trusted || "3.12", ...clear ? ["--clear"] : [], dir], { stdio: "inherit" }) || {}).status

101 const pipIn = () => (runImpl(u, ["pip", "install", "--quiet", "--python", python, spec], { stdio: "inherit" }) || {}).status === 0;

102 if (!fs.existsSync(python) && !makeVenv(fs.existsSync(dir))) return outcome(false, "uv venv failed");

103 if (!pipIn()) return outcome(false, `uv pip install ${spec} failed`);

104 let got = importedVersion(env, runImpl);

105 if (!got) return outcome(false, "hum did not import after the install");

106 if (got !== version && !env.HUM_ENGINE_SPEC) return outcome(false, `installed ${got}, wanted ${version}`, got);

107 let blocked = sslBlocked(env, runImpl);

108 if (blocked && trusted) {