@onescience/onecode@1.14.50-202607011517

One or more suspicious static signals were detected.

npm install postinstall lifecycle, then onecode CLI execution

Remote endpoint or MITM can supply the executable later invoked by users as onecode.

install-time remote binary download and execution wrapper

On install, postinstall.mjs downloads a platform tgz from a hardcoded IP over HTTPS while disabling certificate validation, extracts it with tar, places it under package-local node_modules, and links/copies the binary to bin/.onecode. The public bin/onecode wrapper then spawns that installed binary for user commands.

This is concrete install-time remote executable staging from an unauthenticated endpoint with no observed integrity verification. Although the behavior is package-aligned for a native CLI and not an AI-agent control hijack, the delivery path is unsafe enough to block.