Loading npm security reports…

@ornexus/neocortex@4.60.19: AI-agent control-surface risk | LPM Firewall

registry / @ornexus/neocortex / 4.60.19

@ornexus/neocortex@4.60.19

Neocortex v4.60.19 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. A global npm install automatically changes the user's Claude Code agent environment. It selects Claude Code by default, installs MCP integrations, and removes specified artifacts under the Claude directory.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package globally through npm.

Impact

This mutates a foreign AI-agent control surface without an explicit installer command or interactive approval.

Mechanism

The postinstall hook runs the shell installer unattended with automatic confirmation. The installer defaults to Claude Code, performs cleanup, and configures user-scope MCP integrations.

Policy narrative

The npm postinstall hook runs during global installation and launches an unattended installer. That installer selects Claude Code by default, cleans paths in the user's Claude configuration, and configures MCP integrations, including a user-scope remote endpoint. This is unconsented lifecycle-time mutation of a broad AI-agent control surface.

AI rationale

The package performs concrete, automatic npm lifecycle changes to a foreign AI-agent configuration and MCP control surface. This meets the install-control-surface blocking rule.

Evidence

package.jsonpostinstall.jsinstall.sh

Network endpoints1

mcp.figma.com/mcp

Decision evidence

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

13L14: const { spawn } = require('child_process'); L15: const path = require('path');

High

Child Process

Package source references child process execution.

postinstall.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.26 matchedPath = postinstall.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

install.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @ornexus/neocortex@4.60.38 matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.38 similarity = 0.642 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

install.jsView on unpkg

101/** L102: * Declarative flag mapping: Unix CLI flags -> PowerShell parameters. L103: * To add a new flag, just add an entry here. No switch/case to update.

High

Shell

Package source references shell execution.

install.jsView on unpkg · L101

414L415: const { execSync } = require('child_process'); L416: try { L417: // Run npm install -g silently, capture output L418: execSync('npm install -g @ornexus/neocortex@latest', {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

install.jsView on unpkg · L414

targets-stubs/lib/managed-config-merge.jsView file

6L7: const crypto = require('node:crypto'); L8: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

targets-stubs/lib/managed-config-merge.jsView on unpkg · L6

packages/client/dist/config/secure-config.jsView file

1import{existsSync as u,readFileSync as R,writeFileSync as S,mkdirSync as L,chmodSync as y}from"node:fs";import{execSync as d}from"node:child_process";import{join as l}from"node:pat... L2: [!] Warning: connected to local server (`+t+`). L3: To use production, run: neocortex activate YOUR-LICENSE-KEY L4: Get yours at https://neocortex.sh/portal/login L5: `))}function w(r){const t=r.match(/^(https?:\/\/)([^/]+)(.*)$/i);if(!t)return null;const[,e,o,n=""]=t;return o.toLowerCase()!==C?null:`${e}api.neocortex.sh${n}`}function G(r={}){tr... L6: [!] Machine fingerprint changed (was: ${e.machineId.slice(0,12)}..., now: ${c.slice(0,12)}...).

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

packages/client/dist/config/secure-config.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.26 matchedPath = [redacted]-config.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/config/secure-config.jsView on unpkg

targets-stubs/cursor/install-cursor.shView file

•path = targets-stubs/cursor/install-cursor.sh kind = build_helper sizeBytes = 1964 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

targets-stubs/cursor/install-cursor.shView on unpkg

packages/client/dist/runner/scheduler.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.26 matchedPath = [redacted].js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/runner/scheduler.jsView on unpkg

install.shView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.23 matchedPath = install.sh matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.23 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

install.shView on unpkg

packages/client/dist/runner/headless/types.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.23 matchedPath = [redacted].js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.23 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/runner/headless/types.jsView on unpkg

packages/client/dist/tier/tier-aware-client.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.23 matchedPath = packages/client/dist/tier/tier-aware-client.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.23 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/tier/tier-aware-client.jsView on unpkg

packages/shared/dist/nx-invoke-signature.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.26 matchedPath = packages/shared/dist/nx-invoke-signature.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/shared/dist/nx-invoke-signature.jsView on unpkg

packages/shared/dist/strict-readonly.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.26 matchedPath = packages/shared/dist/strict-readonly.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/shared/dist/strict-readonly.jsView on unpkg

Lines 394-434javascript

394 env: process.env,

395 });

396 child.on('error', (err) => {

397 console.error(`Failed to delegate to neocortex-client: ${err.message}`);

398 process.exit(1);

399 });

400 child.on('exit', (code) => process.exit(code ?? 1));

401 return; // Do not continue with install wizard

402 }

403

404 // ── Update command (Epic P86 - Story P86.07) ─────────────────────────

405 // Handled directly (not delegated to neocortex-client) because update

406 // needs npm which is in the installer's scope, not the client's.

407 if (firstArg === 'update') {

408 const currentVersion = VERSION;

409 console.log('');

410 console.log(color.cyan(' Neocortex Update'));

411 console.log(color.dim(` Current version: v${currentVersion}`));

412 console.log('');

413 console.log(color.dim(' Updating to latest version...'));

414

415 const { execSync } = require('child_process');

416 try {

417 // Run npm install -g silently, capture output

418 execSync('npm install -g @ornexus/neocortex@latest', {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

install.jsView on unpkg · L414

419 stdio: ['pipe', 'pipe', 'pipe'],

420 timeout: 120000, // 2 min timeout

421 });

422

423 // Read new version

424 let newVersion = currentVersion;

425 try {

426 const newPkg = JSON.parse(fs.readFileSync(path.join(SCRIPT_DIR, 'package.json'), 'utf8'));

427 newVersion = newPkg.version;

428 } catch {

429 // Fallback: query npm for installed version

430 try {

431 const lsOutput = execSync('npm ls -g @ornexus/neocortex --depth=0 --json 2>/dev/null', {

432 encoding: 'utf-8', timeout: 10000,

433 });

434 const match = lsOutput.match(/"version":\s*"([^"]+)"/);