@metaphi-ai/hum@0.2.60

Hum: a self-improving coding agent for your terminal.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The postinstall performs conditional setup of this package’s own core, and the launcher selects Hum’s CLI. The inspected behavior is package-aligned setup; no concrete attack was identified.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall when the matching core version is not installed; otherwise, running the hum command starts the CLI.

Impact

No concrete malicious effect was established from the inspected source.

Mechanism

The installer provisions the Hum core and may invoke Astral’s uv installer if uv is missing. The launcher selects the package’s CLI or a ready newer Hum version.

AI rationale

The postinstall performs conditional setup of this package’s own core, and the launcher selects Hum’s CLI. The inspected behavior is package-aligned setup; no concrete attack was identified.

Evidence

package.jsonscripts/postinstall.jsdist/install.mjsbin/hum.js

Network endpoints1

astral.sh/uv

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook calls installCore only when the package’s matching core version is missing.
The installer sets up the Hum core and may install uv from Astral when uv is unavailable.
The CLI launcher imports the package’s own CLI entrypoint or a ready newer Hum version.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 3 file(s), 274 KB of source, external domains: api.nuget.org, astral.sh, github.com, hum.metaphi.ai, react.dev

Oversized source lightweight scan

dist/cli.mjs4.02 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVars

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/install.mjsView file

1// src/install.js L2: import { spawnSync } from "node:child_process"; L3: import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

1Cross-file remote execution chain: dist/install.mjs spawns dist/cli.mjs; helper contains network access plus dynamic code execution. L1: // src/install.js L2: import { spawnSync } from "node:child_process"; L3: import fs from "node:fs"; ... L5: import path from "node:path"; L6: var win = process.platform === "win32"; L7: var MINE = typeof HUM_VERSION === "string" ? HUM_VERSION : ""; ... L9: var NPM_FIX = npmFix("latest"); L10: var humHome = (env = process.env) => env.HUM_HOME || path.join(os.homedir(), ".hum"); L11: var versionsDir = (env = process.env) => path.join(humHome(env), "versions"); ... L47: const r = runImpl(corePython(env, version), ASK_VERSION); L48: return r && r.status === 0 ? String(r.stdout).trim() : null; L49: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/install.mjsView on unpkg · L1

dist/install.mjs#virtual:normalized:round1View file

95fs.mkdirSync(path.dirname(dir), { recursive: true }); L96: const r = runImpl("powershell", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script]); L97: try {

High

Shell

Package source references shell execution.

dist/install.mjs#virtual:normalized:round1View on unpkg · L95

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/install.mjs#virtual:normalized:round1View on unpkg

bin/hum.jsView file

25const own = JSON.parse(fs.readFileSync(path.join(here, '..', 'package.json'), 'utf8')).version; L26: const { chosenEntry } = await import(asUrl(path.join(here, '..', 'dist', 'install.mjs'))); L27: entry = chosenEntry(own) || entry;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hum.jsView on unpkg · L25

dist/cli.mjsView file

•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 4214104 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.mjsView on unpkg

•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 4214104 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/install.mjsView file

1// src/install.js L2: import { spawnSync } from "node:child_process"; L3: import fs from "node:fs";

High

Child Process

Package source references child process execution.

dist/install.mjsView on unpkg · L1

Findings

5 High6 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/install.mjs

HighShelldist/install.mjs#virtual:normalized:round1

HighCross File Remote Execution Contextdist/install.mjs

HighSemantic Analysis Limiteddist/install.mjs#virtual:normalized:round1

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/hum.js

MediumEnvironment Vars

MediumOversized Source Filedist/cli.mjs

MediumOversized Cli Entrypointdist/cli.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @metaphi-ai/hum@0.2.60.

See all versions of @metaphi-ai/hum for other recorded verdicts.

Review the evidence and your use of @metaphi-ai/hum@0.2.60 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 20:25:51.681Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.