registry / @ornexus/neocortex / 4.60.48

@ornexus/neocortex@4.60.48

Neocortex v4.60.48 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The package performs automatic global-install setup of a first-party AI-agent extension, which warrants a warning under the lifecycle policy. The evidence does not support a malware block.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package globally through npm.

Impact

The package can add or update its own AI-agent extension without an interactive consent prompt during global installation. No confirmed attack beyond that configuration capability was established.

Mechanism

The postinstall handler runs install.sh with automatic confirmation; the installer defaults to Claude Code and creates the Neocortex agent destination.

AI rationale

The package performs automatic global-install setup of a first-party AI-agent extension, which warrants a warning under the lifecycle policy. The evidence does not support a malware block.

Evidence

package.jsonpostinstall.jsinstall.sh$HOME/.claude/agents/neocortex$HOME/.neocortex/config.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The package declares an automatic postinstall lifecycle script.
On global installation, the lifecycle handler runs the installer.
The Unix lifecycle invocation automatically supplies yes and quiet flags.
The installer defaults to the Claude Code target and creates a Neocortex directory under the user's Claude agents directory.

Evidence against

The automatic invocation supplies a flag that skips project-directory creation.
The observed target is a package-named subdirectory rather than a broad overwrite of agent configuration.
No credential collection, data export, remote payload execution, or self-dependency was established in the inspected paths.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscation

Source & flagged code

24 flagged

package.jsonView file

Lines 82-122json

82 "!packages/client/dist/**/*.js.map",

83 "!packages/client/dist/**/*.d.ts.map",

84 "targets-stubs/",

85 "dist/sbom.cdx.json"

86 ],

87 "scripts": {

88 "test": "node scripts/test-root.mjs",

89 "build": "npm run build -w packages/shared && npm run build -w packages/client && node scripts/strip-source-map-comments.js && node scripts/minify-client-dist.mjs && node scripts/verify-compiled-invoke-signature.cjs",

90 "build:clean": "rm -rf packages/shared/dist packages/client/dist && npm run build",

91 "build:client": "npm run build -w packages/client",

92 "build:shared": "npm run build -w packages/shared",

93 "build:server": "npm run build -w packages/server",

94 "command-registry:generate": "npm run build:shared && node scripts/generate-command-registry.mjs",

95 "command-registry:check": "npm run build:shared && node scripts/generate-command-registry.mjs --check",

96 "public-projections:generate": "npm run build:shared && node scripts/generate-command-registry.mjs && npm run build:shared && npm run build:server && node scripts/generate-public-catalog-projections.mjs",

97 "public-projections:check": "npm run build:shared && node scripts/generate-command-registry.mjs --check && npm run build:server && node scripts/generate-public-catalog-projections.mjs --check",

98 "command-registry:migrate-project": "node scripts/migrate-command-registry-project-id.mjs",

99 "command-registry:migrate-claim-scope": "node scripts/migrate-epic-claim-scope.mjs",

100 "test:p205-registry": "vitest run tests/p205-registry",

101 "test:installed-migration": "node scripts/test-installed-migration-smoke.mjs",

102 "postinstall": "node postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L102

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L102

103 "sync": "node sync-version.js",

104 "validate": "node scripts/validate-pre-publish.js",

105 "validate:pre-publish": "node scripts/validate-pre-publish.js",

106 "validate:client-artifacts": "node scripts/validate-client-artifacts.mjs",

107 "validate:bash": "bash scripts/validate-pre-publish.sh",

108 "admin:dev": "cd admin && npm run dev",

109 "admin:build": "cd admin && npm run build",

110 "admin:test": "cd admin && npm run test",

111 "admin:lint": "cd admin && npm run lint",

112 "portal:dev": "cd portal && npm run dev",

113 "portal:build": "cd portal && npm run build",

114 "portal:test": "cd portal && npm run test",

115 "storybook": "storybook dev -p 6006",

116 "storybook:build": "storybook build --output-dir storybook-static",

117 "storybook:smoke": "node scripts/storybook-smoke-a11y-check.js",

118 "remotion:studio": "remotion studio remotion/index.ts --public-dir=landing/public",

119 "remotion:typecheck": "tsc --noEmit -p remotion/tsconfig.json",

120 "remotion:render:release": "node scripts/render-release-reel.mjs video",

121 "remotion:still:release": "node scripts/render-release-reel.mjs still",

122 "remotion:still:release:safe-zone": "node scripts/render-release-reel.mjs safe-zone",

postinstall.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

3/**

4 * Neocortex - Postinstall Hook

5 *

6 * For global installs: auto-runs the installer in quiet/auto mode.

7 * For local installs: prints usage message.

8 *

9 * NEVER fails npm install -- always exits 0.

10 *

11 * Epic 62 - GAP 6

12 */

install.jsView file

Lines 124-164javascript

124 }

125 return filtered;

126}

127

128function isAutoYes() {

129 return args.includes('-y') || args.includes('--yes'

targets-stubs/lib/managed-config-merge.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/*

3 * Dependency-free managed profile/config merge helper for published installs.

4 * P201.08: additive ownership, SHA-256 evidence, atomic apply and safe rollback.

5 */

7const crypto = require('node:crypto');

8const

packages/client/dist/commands/invoke.jsView file

Lines 1-21javascript

1import{createHash as be,randomUUID as qe}from"node:crypto";import{execFileSync as Le}from"node:child_process";import{existsSync as Oe,readFileSync as _e,renameSync as br,unlinkSync as Or,writeFileSync as

packages/client/dist/config/secure-config.jsView file

Lines 1-13javascript

1import{existsSync as u,readFileSync as R,writeFileSync as S,mkdirSync as L,chmodSync as y}from"node:fs";import{execSync as d}from"node:child_process";import{join as l}from

targets-stubs/cursor/install-cursor.shView file

•path = targets-stubs/cursor/install-cursor.sh kind = build_helper sizeBytes = 2077 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

targets-stubs/cursor/install-cursor.shView on unpkg

packages/client/dist/runner/scheduler.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

packages/client/dist/runner/scheduler.js#virtual:normalized:round1View on unpkg

packages/client/dist/runner/headless/continuous-story-workspace.jsView file

•matchType = normalized_sha256 matchedPackage = @ornexus/neocortex@4.60.26 matchedPath = [redacted]-story-workspace.js matchedIdentity = npm:QG9ybmV4dXMvbmVvY29ydGV4:4.60.26 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High