@metaphi-ai/hum@0.2.40
Hum: a self-improving coding agent for your terminal.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe postinstall hook can execute a network-fetched uv installer when uv is missing, creating install-time execution risk. The inspected behavior is tied to setup of the package's version-matched CLI core, so it supports a warning rather than a confirmed attack.
Static reason
One or more suspicious static signals were detected.
Trigger
npm runs the package postinstall hook when installing it, and the core is absent or mismatched.
Impact
This gives install-time network-fetched code an execution path on the installing machine; the inspected code does not establish a separate malicious payload or attack.
Mechanism
The hook calls installCore; if uv is unavailable, the installer pipes a downloaded shell or PowerShell installer into execution, then installs the version-matched hum-cli core.
AI rationale
The postinstall hook can execute a network-fetched uv installer when uv is missing, creating install-time execution risk. The inspected behavior is tied to setup of the package's version-matched CLI core, so it supports a warning rather than a confirmed attack.
Evidence
package.jsonscripts/postinstall.jsdist/install.mjs
Network endpoints2
astral.sh/uv/install.shastral.sh/uv/install.ps1
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall hook that invokes installCore when the matching core version is absent.
- The installer can fetch and run the uv installer script from astral.sh when uv is unavailable.
- The installer then creates a Python environment and installs a version-matched hum-cli package.
Evidence against
- The installation behavior is tied to the package's CLI and versioned core setup.
- The nested npm fetch targets the same package version and uses --ignore-scripts.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
NoLicense
Oversized source lightweight scan
dist/cli.mjs
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/hum.jsView file
25const own = JSON.parse(fs.readFileSync(path.join(here, '..', 'package.json'), 'utf8')).version;
L26: const { chosenEntry } = await import(asUrl(path.join(here, '..', 'dist', 'install.mjs')));
L27: entry = chosenEntry(own) || entry;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/hum.jsView on unpkg · L25Findings
1 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirebin/hum.js
MediumEnvironment Vars
MediumOversized Source Filedist/cli.mjs
MediumOversized Cli Entrypointdist/cli.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @metaphi-ai/hum@0.2.40.
See all versions of @metaphi-ai/hum for other recorded verdicts.
- Review the evidence and your use of @metaphi-ai/hum@0.2.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.