Loading npm security reports…

@nemus-cli/nemus@0.15.0: AI-agent control-surface risk | LPM Firewall

registry / @nemus-cli/nemus / 0.15.0

@nemus-cli/nemus@0.15.0

Nemus — a CLI for managing multi-repository workspaces. Create, sync, and operate across dozens of repos with a single command, and wire them up to your favorite coding agent.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically invokes an upgrade routine that modifies detected AI-agent integrations. It can add a Claude command hook and elevate workspace permissions into global Claude settings.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall during package installation or upgrade

Impact

A package install can persist a command hook and broaden Claude permissions without an explicit MCP setup command.

Mechanism

automatic AI-agent hook, skill, extension, and global-permission mutation

Policy narrative

npm invokes scripts/postinstall.js automatically. That script runs dist/mcp/install.js upgrade, which detects installed agents and installs hooks, skills, and extensions. For Claude, the upgrade can add a Stop hook to the global settings file. The hook runs a bundled permission-sync script, and the package code merges project-level allow entries into the user's global Claude permissions. These are persistent control-surface changes activated by installation rather than an explicit agent-integration command.

Rationale

The automatic postinstall chain alters foreign AI-agent configuration and permission state. This is concrete unconsented install-time control-surface mutation.

Evidence

package.jsonscripts/postinstall.jsdist/mcp/install.jssrc/utils/permission-sync.tssync-permissions.sh~/.claude/settings.json~/.claude/skills~/.pi/agent/skills~/.pi/agent/extensions

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/workspace.jsView file

2L3: const path = require('path'); L4: const command = process.argv[2];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/workspace.jsView on unpkg · L2

src/utils/bug-report.tsView file

11L12: import { execFileSync } from 'child_process'; L13: import * as os from 'os'; ... L22: */ L23: export const BUG_REPORT_REPO = process.env.NEMUS_BUG_REPORT_REPO || 'me-public/nemus'; L24: ... L58: L59: const home = os.homedir(); L60: if (home) { ... L132: try { L133: const raw = JSON.parse(fs.readFileSync(LAST_ERROR_FILE, 'utf-8')); L134: // Validate required fields so a malformed/old file can't crash the reporter.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/utils/bug-report.tsView on unpkg · L11

uninstall.shView file

•path = uninstall.sh kind = build_helper sizeBytes = 5610 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

uninstall.shView on unpkg

dist/cli/ai-prompt.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/ai-prompt.js#virtual:normalized:round1View on unpkg

dist/utils/branch-operations.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/branch-operations.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/branch-operations.jsView on unpkg

dist/utils/claude-integration.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/claude-integration.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/claude-integration.jsView on unpkg

dist/utils/ghq-integration.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/ghq-integration.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/ghq-integration.jsView on unpkg

dist/utils/health-checks.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/health-checks.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/health-checks.jsView on unpkg

scripts/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = scripts/postinstall.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

dist/mcp/install.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/mcp/install.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mcp/install.jsView on unpkg

dist/utils/bug-report.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/bug-report.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/bug-report.jsView on unpkg

dist/utils/editor.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/editor.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/editor.jsView on unpkg

dist/utils/agent-config.jsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = dist/utils/agent-config.js matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/utils/agent-config.jsView on unpkg

src/mcp/install.tsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = src/mcp/install.ts matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/mcp/install.tsView on unpkg

src/utils/agent-config.test.tsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = src/utils/agent-config.test.ts matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/utils/agent-config.test.tsView on unpkg

src/utils/branch-operations.tsView file

•matchType = normalized_sha256 matchedPackage = @nemus-cli/nemus@0.9.0 matchedPath = src/utils/branch-operations.ts matchedIdentity = npm:QG5lbXVzLWNsaS9uZW11cw:0.9.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/utils/branch-operations.tsView on unpkg