Loading npm security reports…

@nqlib/nqui@0.7.6: AI-agent control-surface risk | LPM Firewall

registry / @nqlib/nqui / 0.7.6

@nqlib/nqui@0.7.6

A React component library with enhanced UI components and developer tools

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package mutates the consuming project without consent. It adds a command chain to package.json and writes Cursor AI-agent rules.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install of @nqlib/nqui; skipped only when CI is true or 1.

Impact

A dependency installation silently changes a foreign project's AI-agent control surface and project command configuration.

Mechanism

postinstall writes consumer package metadata and Cursor rule configuration

Policy narrative

The npm postinstall hook executes during dependency installation. It rewrites the consumer project's package.json to add a setup command and creates a Cursor rule under .cursor/rules. The written rule instructs AI assistants to follow package-provided guidance. These writes occur without an explicit user command or consent gate, creating a foreign AI-agent control-surface mutation at install time.

Rationale

Concrete source shows unconsented postinstall mutation of a consuming project's package.json and Cursor rules. This meets the firewall block policy regardless of the absence of network exfiltration.

Evidence

package.jsonscripts/post-install.jsscripts/init-cursor.jsscripts/cursor-rule-nqui-components.mdcdocs/product/epics/EP-005-packaging-entries-publishing/stories/ST-043-postinstall-consent.md.cursor/rules/nqui-components.mdc

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/post-install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

README.mdView file

•Vite with `@tailwindcss/vite` often works without `@source`; add the block above when utilities from the package do not show up in CSS.

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView file

11import { readFileSync, writeFileSync, existsSync, lstatSync, realpathSync } from "fs"; L12: import { execSync } from "child_process"; L13: import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView on unpkg · L11

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.2 matchedPath = docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView on unpkg

scripts/post-install.jsView file

1Install-time AI-agent control hijack evidence: Install-time helper chain writes an AI-agent control surface: L9: L10: import { existsSync, readFileSync, writeFileSync } from 'fs'; L11: import { resolve } from 'path'; ... L56: L57: writeFileSync(packageJsonPath, JSON.stringify(pkg, null, 2) + '\n'); L58: return true; Referenced control path from scripts/init-cursor.js: L9: * SSOT for skills: packages/nqui/docs/nqui-skills/ L10: * This script writes .cursor/rules/nqui-components.mdc (static rule file) L11: * and delegates skill copying to download-skills.js (copies from SSOT). ... L13: L14: import { existsSync, mkdirSync, writeFileSync } from 'fs'; L15: import { resolve, dirname, relative } from 'path'; ... L28: L29: if (!existsSync(cursorDir)) mkdirSync(cursorDir, { recursive: true });

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/post-install.jsView on unpkg · L1

scripts/init-cursor.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: mport { resolve, dirname, relative } from 'path'; import { fileurltopath } from 'url'; import { full_peer_list } from './peer-deps.js'; import { buildcursorrule } from './sk[redacted]'; import { resolvetargetdir } from './resolve-target-dir.js'; import { downloadskills } from './download-skills.js'; const __dirname = dirname(fileurltopath(import.meta.url)); const cwd = process.cwd(); export function writecursorrule(targetcwd) { const cursordir = resolve(targetcwd, '.cursor'); const rulesdir = resolve(cursordir, 'rules'); if (!existssync(cursordir)) mkdirsync(cursordir, { recursive: true }); if (!existssync(rulesdir)) mkdirsync(rulesdir, { recursive: true }); writefilesync(resolve(rulesd

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/init-cursor.jsView on unpkg

scripts/install-peers.jsView file

6* L7: * Usage: npx @nqlib/nqui install-peers L8: */ ... L11: import { resolve } from 'path'; L12: import { execSync } from 'child_process'; L13: import { FULL_PEER_LIST } from './peer-deps.js';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/install-peers.jsView on unpkg · L6

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.2 matchedPath = scripts/install-peers.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install-peers.jsView on unpkg

scripts/publish-npmjs.jsView file

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.2 matchedPath = scripts/publish-npmjs.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/publish-npmjs.jsView on unpkg

scripts/verify-build.jsView file

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.2 matchedPath = scripts/verify-build.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/verify-build.jsView on unpkg

Source & flagged code

10 flagged

package.jsonView file

Lines 77-117json

77 "type": "git",

78 "url": "git+https://github.com/nqlib/nqui.git"

79 },

80 "keywords": [

81 "ui",

82 "components",

83 "react",

84 "typescript",

85 "nextjs",

86 "vite",

87 "tailwind",

88 "shadcn",

89 "radix-ui"

90 ],

91 "author": "",

92 "license": "MIT",

93 "engines": {

94 "node": ">=20"

95 },

96 "scripts": {

97 "postinstall": "node scripts/post-install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L97

98 "dev": "node scripts/dev-catalog-pointer.js",

99 "sync:skills": "node scripts/sync-consumer-skills.mjs",

100 "skill:validate": "node scripts/validate-skills.mjs",

101 "product:lint": "node scripts/lint-product-docs.mjs",

102 "build": "npm run sync:skills && npm run build:lib",

103 "build:lib": "vite build --mode library && npm run build:types && npm run build:styles && npm run verify:build && npm run copy:css",

104 "build:types": "tsc -p tsconfig.lib.json",

105 "build:styles": "node scripts/build-styles.js",

106 "verify:build": "node scripts/verify-build.js",

107 "copy:css": "cp src/components/debug/debug.css dist/nqui.css",

108 "build:app": "node scripts/dev-catalog-pointer.js",

109 "build:all": "npm run build:lib",

110 "prepublishOnly": "npm run verify:publish",

111 "verify:publish": "node scripts/verify-publish.mjs",

112 "publish:github": "npm publish --registry=https://npm.pkg.github.com",

113 "publish:npm": "node scripts/publish-npmjs.js",

114 "publish:both": "npm run publish:github && npm run publish:npm",

115 "lint": "eslint src scripts --max-warnings 0",

116 "preview": "vite preview",

117 "init-debug-css": "node scripts/init-debug-css.js",

README.mdView file

•Vite with `@tailwindcss/vite` often works without `@source`; add the block above when utilities from the package do not show up in CSS.

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

docs/nqui-skills/nqui-local-published-toggle/scripts/toggle-nqui.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * Toggle between local (npm link) and published @nqlib/nqui.

4 *

5 * CUSTOMIZE before copying to consumer project:

6 * - PROJECT_NAME: Used in log messages (e.g. "client-saas", "my-app")

7 * - PUBLISHED_VERSION: Semver for published mode (e.g. "^0.5.0")

8 * - USE_LEGACY_PEER_DEPS: true if consumer uses --legacy-peer-deps

9 * - NQUI_DIR: nqui repository root (monorepo with packages/nqui, or standalone nqui repo)

10

scripts/post-install.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2

3/**

4 * Post-install: print next steps for nqui setup.

5 * Runs after npm/pnpm/yarn install. Also invokable via: npx nqui-setup

6 *

7 * Auto-injects Cursor rules so consumers don't need to remember init-cursor.

8 */

9

10import { existsSync, readFileSync, writeFileSync } from 'fs';

scripts/init-cursor.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: mport { resolve, dirname, relative } from 'path'; import { fileurltopath } from 'url'; import { full_peer_list } from './peer-deps.js'; import { buildcursorrule } from './sk[redacted]'; import { resolvetargetdir } from './resolve-target-dir.js'; import { downloadskills } from './download-skills.js'; const __dirname = dirname(fileurltopath(import.meta.url)); const cwd = process.cwd(); export function writecursorrule(targetcwd) { const cursordir = resolve(targetcwd, '.cursor'); const rulesdir = resolve(cursordir, 'rules'); if (!existssync(cursordir)) mkdirsync(cursordir, { recursive: true }); if (!existssync(rulesdir)) mkdirsync(rulesdir, { recursive: true }); writefilesync(resolve(rulesd

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/init-cursor.jsView on unpkg

scripts/install-peers.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2

3/**

4 * Installs @nqlib/nqui + all required and optional peer dependencies.

5 * Use when you want full library support (Sortable, Carousel, DataTable, etc.).

6 *

7 * Usage: npx @nqlib/nqui install-peers

8 */

9

10import { existsSync } from 'fs';

scripts/publish-npmjs.jsView file

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.2 matchedPath = scripts/publish-npmjs.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/publish-npmjs.jsView on unpkg

scripts/verify-build.jsView file

•matchType = normalized_sha256 matchedPackage = @nqlib/nqui@0.7.2 matchedPath = scripts/verify-build.js matchedIdentity = npm:QG5xbGliL25xdWk:0.7.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/verify-build.jsView on unpkg