Loading npm security reports…

@ooples/token-optimizer-mcp@5.4.2: AI-agent control-surface risk | LPM Firewall

registry / @ooples/token-optimizer-mcp / 5.4.2

@ooples/token-optimizer-mcp@5.4.2

Intelligent context window optimization for Claude Code - store content externally via caching and compression, freeing up your context window for what matters

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Global npm installation automatically installs persistent Claude Code hooks and mutates AI-agent configuration. It also attempts workspace-trust and MCP-server configuration across detected tools.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm global install invokes postinstall

Impact

Unconsented persistent interception of Claude Code tool/session events and modification of foreign AI-agent control surfaces.

Mechanism

Postinstall-launched cross-agent hook/configuration mutation

Policy narrative

During a global npm install, postinstall launches a platform installer. The installer copies hook modules, wires them into Claude Code SessionStart/PreToolUse/PreCompact events, accepts workspace trust, and configures MCP entries for several AI tools without a separate user command or confirmation. This is an unconsented install-time mutation of broad, foreign AI-agent control surfaces.

Rationale

The lifecycle behavior meets the block boundary: postinstall automatically mutates persistent Claude Code and other AI-tool control/configuration surfaces. Opt-in harvest networking does not negate the install-time control-surface takeover.

Evidence

package.jsonscripts/postinstall.cjsinstall-hooks.shinstall-hooks.ps1scripts/wire-hooks.mjshooks-core/wire.mjsplugin/hooks/hooks.json$HOME/.claude-global/hooks/token-optimizer$HOME/.claude/settings.json

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

hooks-core/skeleton.mjsView file

29L30: import { execFileSync } from 'node:child_process'; L31: import { dirname } from 'node:path';

High

Child Process

Package source references child process execution.

hooks-core/skeleton.mjsView on unpkg · L29

dist/tools/build-systems/run-node-bin.jsView file

9* through batch files -- Node now REFUSES to spawn any `.cmd` or `.bat` unless L10: * `shell: true`, and throws EINVAL instead. Measured on this machine: every one L11: * of smart_build, smart_install, smart_lint, smart_test and smart_typecheck

High

Shell

Package source references shell execution.

dist/tools/build-systems/run-node-bin.jsView on unpkg · L9

dist/tools/code-analysis/smart-security.jsView file

162}, L163: // eval() usage L164: {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tools/code-analysis/smart-security.jsView on unpkg · L162

dist/tools/intelligence/wiki-write.jsView file

70const [wiki, harvestWrite, curate] = await Promise.all([ L71: import(coreUrl('wiki.mjs')), L72: import(coreUrl('harvest-write.mjs')),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/intelligence/wiki-write.jsView on unpkg · L70

dist/tools/configuration/smart-env.jsView file

98savedTokens: 0, L99: metadata: { error: errorMessage }, L100: }); ... L131: if (!path.isAbsolute(filePath)) { L132: filePath = path.join(process.cwd(), filePath); L133: } ... L188: async analyzeEnvironment(parsed, content, options, filePath, fileHash) { L189: const environment = options.environment || this.detectEnvironment(parsed); L190: // Count variable types ... L351: }, L352: { pattern: /private|credential|auth/i, severity: 'high' }, L353: ];

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tools/configuration/smart-env.jsView on unpkg · L98

scripts/verify-wiki-ui.mjsView file

123L124: const server = spawn(process.execPath, [join(ROOT, 'dist', 'server', 'web-server.js')], L125: { cwd: ROOT, stdio: 'ignore', windowsHide: true, env: { ...process.env, PORT: String(PORT) } }); L126: ... L134: // was already listening. Without this the run can pass against a stale build. L135: const status = await (await fetch(`${BASE}/api/wiki/status`)).json(); L136: if (status.dir !== GRAPH) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/verify-wiki-ui.mjsView on unpkg · L123

install-hooks.ps1View file

•path = install-hooks.ps1 kind = build_helper sizeBytes = 21337 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install-hooks.ps1View on unpkg

dist/server/daemon.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.3.6 matchedPath = dist/server/daemon.js matchedIdentity = npm:[redacted]:5.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/daemon.jsView on unpkg

cli-wrapper.mjsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.3.6 matchedPath = cli-wrapper.mjs matchedIdentity = npm:[redacted]:5.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli-wrapper.mjsView on unpkg

dist/tools/build-systems/smart-docker.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.3.6 matchedPath = dist/tools/build-systems/smart-docker.js matchedIdentity = npm:[redacted]:5.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/build-systems/smart-docker.jsView on unpkg

dist/tools/build-systems/smart-network.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.3.6 matchedPath = dist/tools/build-systems/smart-network.js matchedIdentity = npm:[redacted]:5.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/build-systems/smart-network.jsView on unpkg

dist/tools/code-analysis/smart-imports.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.3.6 matchedPath = dist/tools/code-analysis/smart-imports.js matchedIdentity = npm:[redacted]:5.3.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/code-analysis/smart-imports.jsView on unpkg