Loading npm security reports…

@ornexus/neocortex@4.60.23: Malicious npm security report (Block) | LPM Firewall

registry / @ornexus/neocortex / 4.60.23

@ornexus/neocortex@4.60.23

Neocortex v4.60.23 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code

AI Security Review

scanned 5h ago · by lpm-firewall-ai

A global npm install automatically runs a quiet installer that changes the user's Claude Code control surface. It deletes selected agent-related files and registers third-party MCP servers, including one configured with available AI-provider credentials.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package globally through npm.

Impact

The install can remove user files, broaden Claude Code's tool and network access, and pass AI-provider credentials to a third-party MCP process.

Mechanism

Automatic postinstall execution mutates user-scoped AI-agent configuration and installs third-party MCP integrations.

Attack narrative

The npm postinstall hook detects a global installation and automatically starts the Unix installer with automatic and quiet flags. The installer defaults to Claude Code, deletes selected files under user AI-agent directories, and registers several third-party MCP servers at Claude user scope. When OpenAI or Anthropic credentials are present, it passes them to the browser-use MCP command. This is an unconsented lifecycle mutation of a broad AI-agent control surface.

Rationale

This package combines an automatic npm lifecycle hook with silent deletion and broad third-party Claude MCP registration. The observed credential forwarding increases the impact beyond ordinary package-owned setup.

Evidence

package.jsonpostinstall.jsinstall.sh$HOME/.claude/agents/.git$HOME/.claude/.claude$HOME/.cursorrules$HOME/.instructions.md$HOME/.codex/neocortex

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

13L14: const { spawn } = require('child_process'); L15: const path = require('path');

High

Child Process

Package source references child process execution.

postinstall.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = postinstall.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

install.jsView file

101/** L102: * Declarative flag mapping: Unix CLI flags -> PowerShell parameters. L103: * To add a new flag, just add an entry here. No switch/case to update.

High

Shell

Package source references shell execution.

install.jsView on unpkg · L101

414L415: const { execSync } = require('child_process'); L416: try { L417: // Run npm install -g silently, capture output L418: execSync('npm install -g @ornexus/neocortex@latest', {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

install.jsView on unpkg · L414

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = install.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

install.jsView on unpkg

targets-stubs/lib/managed-config-merge.jsView file

6L7: const crypto = require('node:crypto'); L8: const fs = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

targets-stubs/lib/managed-config-merge.jsView on unpkg · L6

packages/client/dist/config/secure-config.jsView file

1import{existsSync as u,readFileSync as R,writeFileSync as S,mkdirSync as L,chmodSync as y}from"node:fs";import{execSync as d}from"node:child_process";import{join as l}from"node:pat... L2: [!] Warning: connected to local server (`+t+`). L3: To use production, run: neocortex activate YOUR-LICENSE-KEY L4: Get yours at https://neocortex.sh/portal/login L5: `))}function w(r){const t=r.match(/^(https?:\/\/)([^/]+)(.*)$/i);if(!t)return null;const[,e,o,n=""]=t;return o.toLowerCase()!==C?null:`${e}api.neocortex.sh${n}`}function G(r={}){tr... L6: [!] Machine fingerprint changed (was: ${e.machineId.slice(0,12)}..., now: ${c.slice(0,12)}...).

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

packages/client/dist/config/secure-config.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = [redacted]-config.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/config/secure-config.jsView on unpkg

targets-stubs/cursor/install-cursor.shView file

•path = targets-stubs/cursor/install-cursor.sh kind = build_helper sizeBytes = 1964 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

targets-stubs/cursor/install-cursor.shView on unpkg

packages/client/dist/runner/scheduler.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = [redacted].js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/runner/scheduler.jsView on unpkg

install.shView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = install.sh matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

install.shView on unpkg

Source & flagged code

13 flagged

package.jsonView file

Lines 69-109json

69 "packages/shared/dist/generated/invocation-schema.generated.js",

70 "packages/shared/dist/yoloop/wave-decision-receipt.js",

71 "!packages/client/dist/**/*.js.map",

72 "!packages/client/dist/**/*.d.ts.map",

73 "targets-stubs/",

74 "dist/sbom.cdx.json"

75 ],

76 "scripts": {

77 "test": "node scripts/test-root.mjs",

78 "build": "npm run build -w packages/shared && npm run build -w packages/client && node scripts/strip-source-map-comments.js && node scripts/minify-client-dist.mjs && node scripts/verify-compiled-invoke-signature.cjs",

79 "build:clean": "rm -rf packages/shared/dist packages/client/dist && npm run build",

80 "build:client": "npm run build -w packages/client",

81 "build:shared": "npm run build -w packages/shared",

82 "build:server": "npm run build -w packages/server",

83 "command-registry:generate": "npm run build:shared && node scripts/generate-command-registry.mjs",

84 "command-registry:check": "npm run build:shared && node scripts/generate-command-registry.mjs --check",

85 "command-registry:migrate-project": "node scripts/migrate-command-registry-project-id.mjs",

86 "command-registry:migrate-claim-scope": "node scripts/migrate-epic-claim-scope.mjs",

87 "test:p205-registry": "vitest run tests/p205-registry",

88 "test:installed-migration": "node scripts/test-installed-migration-smoke.mjs",

89 "postinstall": "node postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L89

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L89

90 "sync": "node sync-version.js",

91 "validate": "node scripts/validate-pre-publish.js",

92 "validate:pre-publish": "node scripts/validate-pre-publish.js",

93 "validate:client-artifacts": "node scripts/validate-client-artifacts.mjs",

94 "validate:bash": "bash scripts/validate-pre-publish.sh",

95 "admin:dev": "cd admin && npm run dev",

96 "admin:build": "cd admin && npm run build",

97 "admin:test": "cd admin && npm run test",

98 "admin:lint": "cd admin && npm run lint",

99 "portal:dev": "cd portal && npm run dev",

100 "portal:build": "cd portal && npm run build",

101 "portal:test": "cd portal && npm run test",

102 "storybook": "storybook dev -p 6006",

103 "storybook:build": "storybook build --output-dir storybook-static",

104 "storybook:smoke": "node scripts/storybook-smoke-a11y-check.js",

105 "remotion:studio": "remotion studio remotion/index.ts --public-dir=landing/public",

106 "remotion:typecheck": "tsc --noEmit -p remotion/tsconfig.json",

107 "remotion:render:release": "node scripts/render-release-reel.mjs video",

108 "remotion:still:release": "node scripts/render-release-reel.mjs still",

109 "remotion:still:release:safe-zone": "node scripts/render-release-reel.mjs safe-zone",

postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2

3/**

4 * Neocortex - Postinstall Hook

5 *

6 * For global installs: auto-runs the installer in quiet/auto mode.

7 * For local installs: prints usage message.

8 *

9 * NEVER fails npm install -- always exits 0.

10 *

11 * Epic 62 - GAP 6

12 */

install.jsView file

Lines 81-121javascript

81 }

82 return null;

83}

84

85function isAutoYes() {

86 return args.includes('-y') || args.includes(

targets-stubs/lib/managed-config-merge.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/*

3 * Dependency-free managed profile/config merge helper for published installs.

4 * P201.08: additive ownership, SHA-256 evidence, atomic apply and safe rollback.

5 */

6

7const crypto = require('node:crypto');

8const

packages/client/dist/config/secure-config.jsView file

Lines 1-13javascript

1import{existsSync as u,readFileSync as R,writeFileSync as S,mkdirSync as L,chmodSync as y}from"node:fs";import{execSync as d}from"node:child_process";import{join as l}from

targets-stubs/cursor/install-cursor.shView file

•path = targets-stubs/cursor/install-cursor.sh kind = build_helper sizeBytes = 1964 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

targets-stubs/cursor/install-cursor.shView on unpkg

packages/client/dist/runner/scheduler.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = [redacted].js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/client/dist/runner/scheduler.jsView on unpkg

install.shView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.22 matchedPath = install.sh matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.22 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

install.shView on unpkg

Lines 394-434javascript

394 env: process.env,

395 });

396 child.on('error', (err) => {

397 console.error(`Failed to delegate to neocortex-client: ${err.message}`);

398 process.exit(1);

399 });

400 child.on('exit', (code) => process.exit(code ?? 1));

401 return; // Do not continue with install wizard

402 }

403

404 // ── Update command (Epic P86 - Story P86.07) ─────────────────────────

405 // Handled directly (not delegated to neocortex-client) because update

406 // needs npm which is in the installer's scope, not the client's.

407 if (firstArg === 'update') {

408 const currentVersion = VERSION;

409 console.log('');

410 console.log(color.cyan(' Neocortex Update'));

411 console.log(color.dim(` Current version: v${currentVersion}`));

412 console.log('');

413 console.log(color.dim(' Updating to latest version...'));

414

415 const { execSync } = require('child_process');

416 try {

417 // Run npm install -g silently, capture output

418 execSync('npm install -g @ornexus/neocortex@latest', {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

install.jsView on unpkg · L414

419 stdio: ['pipe', 'pipe', 'pipe'],

420 timeout: 120000, // 2 min timeout

421 });

422

423 // Read new version

424 let newVersion = currentVersion;

425 try {

426 const newPkg = JSON.parse(fs.readFileSync(path.join(SCRIPT_DIR, 'package.json'), 'utf8'));

427 newVersion = newPkg.version;

428 } catch {

429 // Fallback: query npm for installed version

430 try {

431 const lsOutput = execSync('npm ls -g @ornexus/neocortex --depth=0 --json 2>/dev/null', {

432 encoding: 'utf-8', timeout: 10000,

433 });

434 const match = lsOutput.match(/"version":\s*"([^"]+)"/);