registry / @onescience/onecode / 1.14.50-202607011517

@onescience/onecode@1.14.50-202607011517

OneScience AI coding agent for the terminal.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The package performs unauthenticated install-time native binary delivery from a raw IP endpoint. The downloaded binary is extracted and wired into the package CLI without an integrity check.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install postinstall lifecycle, then onecode CLI execution

Impact

Remote endpoint or MITM can supply the executable later invoked by users as onecode.

Mechanism

install-time remote binary download and execution wrapper

Attack narrative

On install, postinstall.mjs downloads a platform tgz from a hardcoded IP over HTTPS while disabling certificate validation, extracts it with tar, places it under package-local node_modules, and links/copies the binary to bin/.onecode. The public bin/onecode wrapper then spawns that installed binary for user commands.

AI rationale

This is concrete install-time remote executable staging from an unauthenticated endpoint with no observed integrity verification. Although the behavior is package-aligned for a native CLI and not an AI-agent control hijack, the delivery path is unsafe enough to block.

Evidence

package.jsonpostinstall.mjsbin/onecode.postinstall-worknode_modules/onecode-<platform>-<arch>bin/.onecode

Network endpoints1

218.90.133.98:4443/onecode_tgz

@onescience/onecode@1.14.50-202607011517

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code