Loading npm security reports…

@ooples/token-optimizer-mcp@5.6.1: AI-agent control-surface risk | LPM Firewall

registry / @ooples/token-optimizer-mcp / 5.6.1

@ooples/token-optimizer-mcp@5.6.1

Intelligent context window optimization for Claude Code - store content externally via caching and compression, freeing up your context window for what matters

AI Security Review

scanned 5d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Global npm installation invokes a lifecycle installer that mutates multiple AI-agent control surfaces. It installs always-running hooks, registers an MCP server, and can bypass the current project's Claude trust dialog.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install -g @ooples/token-optimizer-mcp

Impact

Unconsented persistent execution in Claude Code and registration in other installed AI clients.

Mechanism

postinstall-driven cross-client hook, MCP, and trust configuration mutation

Policy narrative

On global install, postinstall launches the platform installer without a separate user command. The installer copies persistent hook code, wires Claude Code lifecycle hooks, registers its MCP server across detected third-party AI clients, and marks the current Claude project trusted. Those hooks run on future agent events; the Stop hook also supports transcript-derived remote harvesting when separately enabled.

Rationale

This is a concrete unconsented npm lifecycle mutation of broad foreign AI-agent control surfaces, including a workspace-trust bypass. The guarded harvest endpoint does not mitigate the install-time control-surface behavior.

Evidence

package.jsonscripts/postinstall.cjsinstall-hooks.shinstall-hooks.ps1scripts/wire-hooks.mjsplugin/hooks/hooks.jsonplugin/hooks/lib/harvest.mjs~/.claude-global/hooks/token-optimizer

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

hooks-core/skeleton.mjsView file

29L30: import { execFileSync } from 'node:child_process'; L31: import { dirname } from 'node:path';

High

Child Process

Package source references child process execution.

hooks-core/skeleton.mjsView on unpkg · L29

dist/tools/build-systems/run-node-bin.jsView file

9* through batch files -- Node now REFUSES to spawn any `.cmd` or `.bat` unless L10: * `shell: true`, and throws EINVAL instead. Measured on this machine: every one L11: * of smart_build, smart_install, smart_lint, smart_test and smart_typecheck

High

Shell

Package source references shell execution.

dist/tools/build-systems/run-node-bin.jsView on unpkg · L9

dist/tools/code-analysis/smart-security.jsView file

162}, L163: // eval() usage L164: {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tools/code-analysis/smart-security.jsView on unpkg · L162

dist/tools/intelligence/wiki-write.jsView file

70const [wiki, harvestWrite, curate] = await Promise.all([ L71: import(coreUrl('wiki.mjs')), L72: import(coreUrl('harvest-write.mjs')),

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/intelligence/wiki-write.jsView on unpkg · L70

dist/tools/configuration/smart-env.jsView file

98savedTokens: 0, L99: metadata: { error: errorMessage }, L100: }); ... L131: if (!path.isAbsolute(filePath)) { L132: filePath = path.join(process.cwd(), filePath); L133: } ... L188: async analyzeEnvironment(parsed, content, options, filePath, fileHash) { L189: const environment = options.environment || this.detectEnvironment(parsed); L190: // Count variable types ... L351: }, L352: { pattern: /private|credential|auth/i, severity: 'high' }, L353: ];

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tools/configuration/smart-env.jsView on unpkg · L98

scripts/verify-wiki-ui.mjsView file

123L124: const server = spawn(process.execPath, [join(ROOT, 'dist', 'server', 'web-server.js')], L125: { cwd: ROOT, stdio: 'ignore', windowsHide: true, env: { ...process.env, PORT: String(PORT) } }); L126: ... L134: // was already listening. Without this the run can pass against a stale build. L135: const status = await (await fetch(`${BASE}/api/wiki/status`)).json(); L136: if (status.dir !== GRAPH) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/verify-wiki-ui.mjsView on unpkg · L123

plugin/hooks/lib/restore.mjsView file

3contains invisible/control Unicode U+FEFF (zero width no-break space) <U+FEFF>/**

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

plugin/hooks/lib/restore.mjsView on unpkg · L3

install-hooks.ps1View file

•path = install-hooks.ps1 kind = build_helper sizeBytes = 21337 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install-hooks.ps1View on unpkg

dist/analysis/project-analyzer.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/analysis/project-analyzer.jsView on unpkg

dist/server/daemon.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.4.2 matchedPath = dist/server/daemon.js matchedIdentity = npm:[redacted]:5.4.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server/daemon.jsView on unpkg

cli-wrapper.mjsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.4.2 matchedPath = cli-wrapper.mjs matchedIdentity = npm:[redacted]:5.4.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli-wrapper.mjsView on unpkg

dist/tools/build-systems/smart-docker.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.4.2 matchedPath = dist/tools/build-systems/smart-docker.js matchedIdentity = npm:[redacted]:5.4.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/build-systems/smart-docker.jsView on unpkg

dist/tools/build-systems/smart-network.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.4.2 matchedPath = dist/tools/build-systems/smart-network.js matchedIdentity = npm:[redacted]:5.4.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/build-systems/smart-network.jsView on unpkg

dist/tools/code-analysis/smart-imports.jsView file

•matchType = normalized_sha256 matchedPackage = @ooples/token-optimizer-mcp@5.4.2 matchedPath = dist/tools/code-analysis/smart-imports.js matchedIdentity = npm:[redacted]:5.4.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/code-analysis/smart-imports.jsView on unpkg