registry / AI-agent control-surface risk / @nqlib/nqui

@nqlib/nqui

A React component library with enhanced UI components and developer tools

This report shows the evidence for @nqlib/nqui@0.7.7. 3 of 7 known versions are blocked or flagged. The newest version, 0.8.0, is flagged. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The confirmed postinstall mutation of the host project's Cursor rules meets the blocking policy for an unconsented foreign AI-agent control-surface write. Other reviewed scripts do not mitigate that install-time behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install, pnpm install, or yarn install

Impact

Changes AI-agent behavior for the consumer project without install-time consent.

Mechanism

postinstall writes a Cursor rule into the host project

Policy narrative

The manifest runs post-install.js automatically during dependency installation. That script resolves the consumer project root, including when invoked from node_modules, and writes nqui-components.mdc under .cursor/rules. This is an unconsented install-time mutation of a foreign AI-agent control surface; no network exfiltration is needed for the policy-triggering behavior.

AI rationale

Evidence

package.jsonscripts/post-install.jsscripts/init-cursor.jsscripts/resolve-target-dir.js.cursor/rules/nqui-components.mdc

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

Install lifecycle runs scripts/post-install.js.
Postinstall automatically writes a Cursor rule into the consumer project.
Target resolution selects the host project when running from node_modules.

Evidence against

No credential harvesting, exfiltration, or runtime network endpoint found in the install path.
Claude skill installation is an explicit CLI action, not the lifecycle hook.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 80 file(s), 1.46 MB of source, external domains: bazza.dev, radix-ui.com, registry.npmjs.com, www.npmjs.com, www.w3.org

Source & flagged code

11 flagged

package.jsonView file

•scripts.postinstall = node scripts/post-install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

README.mdView file

•Vite with `@tailwindcss/vite` often works without `@source`; add the block above when utilities from the package do not show up in CSS.

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView file

11import { readFileSync, writeFileSync, existsSync, lstatSync, realpathSync } from "fs"; L12: import { execSync } from "child_process"; L13: import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView on unpkg · L11

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.6 matchedPath = docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView on unpkg

scripts/post-install.jsView file

1Install-time AI-agent control hijack evidence: Install-time helper chain writes an AI-agent control surface: L9: L10: import { existsSync, readFileSync, writeFileSync } from 'fs'; L11: import { resolve } from 'path'; ... L56: L57: writeFileSync(packageJsonPath, JSON.stringify(pkg, null, 2) + '\n'); L58: return true; Referenced control path from scripts/init-cursor.js: L9: * SSOT for skills: packages/nqui/docs/nqui-skills/ L10: * This script writes .cursor/rules/nqui-components.mdc (static rule file) L11: * and delegates skill copying to download-skills.js (copies from SSOT). ... L13: L14: import { existsSync, mkdirSync, writeFileSync } from 'fs'; L15: import { resolve, dirname, relative } from 'path'; ... L28: L29: if (!existsSync(cursorDir)) mkdirSync(cursorDir, { recursive: true });

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/post-install.jsView on unpkg · L1

scripts/init-cursor.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: mport { resolve, dirname, relative } from 'path'; import { fileurltopath } from 'url'; import { full_peer_list } from './peer-deps.js'; import { buildcursorrule } from './sk[redacted]'; import { resolvetargetdir } from './resolve-target-dir.js'; import { downloadskills } from './download-skills.js'; const __dirname = dirname(fileurltopath(import.meta.url)); const cwd = process.cwd(); export function writecursorrule(targetcwd) { const cursordir = resolve(targetcwd, '.cursor'); const rulesdir = resolve(cursordir, 'rules'); if (!existssync(cursordir)) mkdirsync(cursordir, { recursive: true }); if (!existssync(rulesdir)) mkdirsync(rulesdir, { recursive: true }); writefilesync(resolve(rulesd

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/init-cursor.jsView on unpkg

scripts/install-claude-skills.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. #!/usr/bin/env node import { cpsync, existssync, mkdirsync, readdirsync, readfilesync, statsync, writefilesync } from 'fs'; import { homedir } from 'os'; import { join } from 'path'; import { getpackageroot } from './getpackageroot.js'; const root = getpackageroot(); const skills_source = join(root, 'docs', 'nqui-skills'); const components_source = join(root, 'docs', '

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/install-claude-skills.jsView on unpkg

scripts/install-peers.jsView file

6* L7: * Usage: npx @nqlib/nqui install-peers L8: */ ... L11: import { resolve } from 'path'; L12: import { execSync } from 'child_process'; L13: import { FULL_PEER_LIST } from './peer-deps.js';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/install-peers.jsView on unpkg · L6

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.6 matchedPath = scripts/install-peers.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install-peers.jsView on unpkg

scripts/publish-npmjs.jsView file

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.6 matchedPath = scripts/publish-npmjs.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/publish-npmjs.jsView on unpkg

scripts/verify-build.jsView file

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.6 matchedPath = scripts/verify-build.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/verify-build.jsView on unpkg

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/post-install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

README.mdView file

•Vite with `@tailwindcss/vite` often works without `@source`; add the block above when utilities from the package do not show up in CSS.

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView file

11import { readFileSync, writeFileSync, existsSync, lstatSync, realpathSync } from "fs"; L12: import { execSync } from "child_process"; L13: import { fileURLToPath } from "url";

Findings

1 Critical11 High2 Medium5 Low

CriticalAi Agent Control Hijackscripts/post-install.js

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

HighChild Processdocs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.js

HighShell

HighExternal Ai Agent Control Surface Mutationscripts/init-cursor.js

HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/install-claude-skills.js

HighRuntime Package Installscripts/install-peers.js

HighKnown Malware Source Similarityscripts/publish-npmjs.js

HighKnown Malware Source Similaritydocs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.js

High

Affected versions and remediation

This report applies to @nqlib/nqui@0.7.7.

The versions list below shows the verdict for each recorded version.

Avoid installing @nqlib/nqui@0.7.7. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-15 22:22:23.139Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

0.8.0latestSuspicious—WarnUnder ReviewAug 17, 2026, 4:00 AM 0.7.10Suspicious—WarnUnder ReviewAug 17, 2026, 1:49 AM 0.7.9Suspicious—WarnUnder ReviewAug 17, 2026, 12:58 AM 0.7.8Suspicious—WarnUnder ReviewAug 16, 2026, 11:22 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other AI-agent control-surface risk packages

Runtime surface

Behavioral surface

Related packages

Other AI-agent control-surface risk packages

Source & flagged code