registry / @ornexus/neocortex / 4.60.52
@ornexus/neocortex@4.60.52
Neocortex v4.60.52 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package performs first-party agent extension setup from its global install hook without an interactive confirmation. The inspected source supports a lifecycle risk warning, but not a finding of malicious behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package globally through npm.
Impact
This can add or update the package's agent extension in the user's global configuration without an interactive confirmation in the hook. No further attack behavior was established.
Mechanism
The postinstall hook runs the installer with automatic and quiet flags; the installer defaults to Claude Code and copies Neocortex agent files to its destination.
AI rationale
The package performs first-party agent extension setup from its global install hook without an interactive confirmation. The inspected source supports a lifecycle risk warning, but not a finding of malicious behavior.
Evidence
package.jsonpostinstall.jsinstall.sh
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs postinstall.js as an install lifecycle hook.
- postinstall.js runs the installer only for global installs; its Unix path passes automatic, quiet, project-skipping flags.
- install.sh defaults to the Claude Code target when none is specified and copies Neocortex agent stub files into the destination.
- A separate explicit activation path refreshes Neocortex agent wrappers and metadata.
- The inspected source shows first-party agent setup, not a confirmed credential theft or other attack.
Evidence against
- Local installs take the usage-message path, and the automatic global installer skips project setup.
- The files show Neocortex-owned agent wrappers and do not establish malicious payload delivery or credential transfer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
24 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgpostinstall.jsView file
13L14: const { spawn } = require('child_process');
L15: const path = require('path');
High
Findings
21 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processpostinstall.js
HighShellinstall.js
HighSame File Env Network Executionpackages/client/dist/commands/invoke.js
HighCommand Output Exfiltrationpackages/client/dist/commands/invoke.js
HighSandbox Evasion Gated Capabilitypackages/client/dist/config/secure-config.js
HighTrigger Reachable Command Output Exfiltrationpackages/client/dist/commands/invoke.js
HighRuntime Package Installinstall.js
HighSemantic Analysis Limitedpackages/client/dist/runner/scheduler.js#virtual:normalized:round1
HighKnown Malware Source Similarityinstall.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @ornexus/neocortex@4.60.52.
See all versions of @ornexus/neocortex for other recorded verdicts.
- Review the evidence and your use of @ornexus/neocortex@4.60.52 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.