registry / @pellux/goodvibes-tui / 1.0.0

@pellux/goodvibes-tui@1.0.0

Terminal-native GoodVibes product for coding, operations, automation, knowledge, channels, and daemon-backed control-plane workflows.

AI Security Review

scanned 8d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package has install-time behavior that downloads package binaries and installs bundled GoodVibes skills/agents into a GoodVibes home namespace. This is an agent-extension lifecycle risk, but not confirmed malicious control hijack because it stays in the package-owned namespace.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm/bun install lifecycle postinstall

Impact

Installs executable package artifacts and package-owned agent content without an explicit prompt during install.

Mechanism

postinstall binary download plus first-party GoodVibes skill/agent deployment

Policy narrative

On install, the postinstall script may fetch release binaries from the package's GitHub releases, verify them against the downloaded checksum listing, place them in vendor/, and copy bundled GoodVibes skills, agents, and GOODVIBES.md into ~/.goodvibes. That creates agent-facing content during lifecycle install, but the files are scoped to the GoodVibes product namespace and are not foreign Claude/Codex/Cursor/MCP control-surface mutations.

Rationale

Static inspection confirms lifecycle agent-extension setup and binary download, but the behavior is package-aligned and confined to GoodVibes paths with checksum verification and no confirmed exfiltration or foreign agent hijack. Per policy this fits warn-only first-party agent_extension_lifecycle_risk, not a publish block.

Evidence

package.jsonscripts/check-bun.shscripts/postinstall.jsvendor/SHA256SUMS.txtvendor/goodvibes-<platform>vendor/goodvibes-daemon-<platform>~/.goodvibes/tui/skills/*~/.goodvibes/tui/agents/*~/.goodvibes/GOODVIBES.md

Network endpoints3

github.com/mgd34msu/goodvibes-tui/releases/download/v1.0.0/SHA256SUMS.txtgithub.com/mgd34msu/goodvibes-tui/releases/download/v1.0.0/goodvibes-<platform>github.com/mgd34msu/goodvibes-tui/releases/download/v1.0.0/goodvibes-daemon-<platform>

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

package.json defines install hooks: preinstall runs scripts/check-bun.sh and postinstall runs bun scripts/postinstall.js.
scripts/postinstall.js runs during install and copies bundled .goodvibes/skills, .goodvibes/agents, and .goodvibes/GOODVIBES.md into ~/.goodvibes.
scripts/postinstall.js downloads release binaries from GitHub release URLs by default and writes them under package vendor/.
Lifecycle deployment is unprompted, but the destination is the package-owned ~/.goodvibes namespace rather than another agent's control surface.

Evidence against

scripts/check-bun.sh only validates Bun availability and exits with user-facing install text.
Downloaded binaries are package-aligned release artifacts and SHA256SUMS.txt is fetched and checked before installing vendor binaries.
postinstall skips existing home skill/agent files instead of overwriting them.
No evidence found in inspected lifecycle files of credential harvesting, broad home/project agent config mutation, shell startup persistence, or exfiltration.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 483 file(s), 4.37 MB of source, external domains: 127.0.0.1, 192.168.0.85, api.github.com, astral.sh, bluebubbles.local, bun.sh, cloud.debian.org, daemon.example.com, deno.land, discord.com, example.com, github.com, goodvibes-batch-worker.account.workers.dev, homeassistant.local, imessage-bridge.local, install.duckdb.org, matrix.example.com, mattermost.example.com, ntfy.sh, signal-bridge.local, slack.com, smba.trafficmanager.net

Source & flagged code

16 flagged

package.jsonView file

Lines 27-68json

27 "dev": "bun run src/main.ts",

28 "daemon": "bun run src/daemon/cli.ts",

29 "dev:watch": "bun --watch src/main.ts",

30 "prebuild": "bun run scripts/prebuild.ts",

31 "build": "bun build src/main.ts --compile --outfile dist/goodvibes",

32 "build:linux-x64": "bun build src/main.ts --compile --target=bun-linux-x64 --outfile dist/goodvibes-linux-x64",

33 "build:linux-arm64": "bun build src/main.ts --compile --target=bun-linux-arm64 --outfile dist/goodvibes-linux-arm64",

34 "build:macos-x64": "bun build src/main.ts --compile --target=bun-darwin-x64 --outfile dist/goodvibes-macos-x64",

35 "build:macos-arm64": "bun build src/main.ts --compile --target=bun-darwin-arm64 --outfile dist/goodvibes-macos-arm64",

36 "build:daemon:linux-x64": "bun run scripts/build.ts --target daemon-linux-x64",

37 "build:daemon:linux-arm64": "bun run scripts/build.ts --target daemon-linux-arm64",

38 "build:daemon:macos-x64": "bun run scripts/build.ts --target daemon-macos-x64",

39 "build:daemon:macos-arm64": "bun run scripts/build.ts --target daemon-macos-arm64",

40 "smoke:daemon": "bun run scripts/post-build-smoke.ts",

41 "smoke:tui": "bun run scripts/smoke-tui-binary.ts",

42 "build:windows": "bun build src/main.ts --compile --target=bun-windows-x64 --outfile dist/goodvibes-windows.exe",

43 "build:all-shell": "bun run build:linux-x64 && bun run build:linux-arm64 && bun run build:macos-x64 && bun run build:macos-arm64 && bun run build:windows",

44 "test": "bun run scripts/run-tests.ts",

45 "test:coverage": "bun run scripts/coverage-gate.ts",

46 "version": "bun run scripts/prebuild.ts",

47 "preinstall": "sh scripts/check-bun.sh",

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L47

48 "postinstall": "bun scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 "postbuild": "bun scripts/postinstall.js --no-download",

50 "release": "bun run scripts/release.ts",

51 "release:dry": "bun run scripts/release.ts --dry-run",

52 "publish:package": "bun run scripts/publish-package.ts",

53 "publish:dry-run": "bun run scripts/publish-package.ts --dry-run",

54 "publish:dry-run:github": "GOODVIBES_PUBLIC_PACKAGE_NAME=@mgd34msu/goodvibes-tui GOODVIBES_PUBLISH_REGISTRY=https://npm.pkg.github.com bun run scripts/publish-package.ts --dry-run",

55 "publish:check": "bun run scripts/publish-check.ts",

56 "package:install-check": "bun run scripts/package-install-check.ts",

57 "build:prod": "bun run scripts/build.ts",

58 "build:all": "bun run scripts/build.ts --all",

59 "perf:check": "bun run scripts/perf-check.ts",

60 "perf:baseline": "GOODVIBES_PERF_SAVE_BASELINE=1 bun run scripts/perf-check.ts",

61 "architecture:check": "bun run scripts/check-architecture.ts",

62 "audit:home": "bun run scripts/audit-goodvibes-home.ts",

63 "foundation:artifacts": "bun run scripts/export-foundation-artifacts.ts",

64 "verification:ledger": "bun run scripts/verification-ledger.ts",

65 "verification:live": "bun run scripts/verify-live.ts",

66 "eval:gate": "bun run scripts/eval-gate.ts",

67 "eval:gate:verbose": "bun run scripts/eval-gate.ts --verbose",

68 "eval:baseline": "bun run scripts/eval-gate.ts --save-baseline"

src/panels/builtin/session.tsView file

Lines 15-55typescript

15} from '@pellux/goodvibes-sdk/platform/pairing';

16import { copyToClipboard } from '../../utils/clipboard.ts';

18function getLocalNetworkIp(): string {

19 const nets = networkInterfaces();

20 for (

bin/launcher-support.jsView file

Lines 1-22javascript

1import { accessSync, chmodSync, constants, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';

2import { createHash } from 'node:crypto';

3import { spawnSync } from 'node:child_process';

4import { join } from 'node:path';

High

Child Process

Package source references child process execution.

bin/launcher-support.jsView on unpkg · L2

src/input/commands/hooks-runtime.tsView file

Lines 100-140typescript

100 const path = args[1];

101 if (!path) {

102 ctx.print('Usage: /hooks inspect <path>');

103 return;

104 }

105 const inspection

src/verification/live-verifier.tsView file

Lines 69-109typescript

69 }

70 } catch {

71 return undefined;

72 }

73 return undefined;

74}

76function resolveDaemonBaseUrl(homeDir: string,

src/runtime/sandbox-public-gaps.tsView file

Lines 1-22typescript

1import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';

2import { dirname, resolve } from 'node:path';

3import { spawnSync } from 'node:child_process';

4import {

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

src/runtime/sandbox-public-gaps.tsView on unpkg · L2

5 detectSandboxHostStatus,

scripts/check-bun.shView file

•path = scripts/check-bun.sh kind = build_helper sizeBytes = 461 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-bun.shView on unpkg

src/input/commands/platform-sandbox-qemu.tsView file

•matchType = normalized_sha256 matchedPackage = @pellux/goodvibes-tui@0.29.0 matchedPath = src/input/commands/platform-sandbox-qemu.ts matchedIdentity = npm:QHBlbGx1eC9nb29kdmliZXMtdHVp:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/input/commands/platform-sandbox-qemu.tsView on unpkg

src/cli/completions/generate.tsView file

•matchType = normalized_sha256 matchedPackage = @pellux/goodvibes-tui@0.29.0 matchedPath = src/cli/completions/generate.ts matchedIdentity = npm:QHBlbGx1eC9nb29kdmliZXMtdHVp:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/completions/generate.tsView on unpkg

src/cli/help.tsView file

•matchType = normalized_sha256 matchedPackage = @pellux/goodvibes-tui@0.29.0 matchedPath = src/cli/help.ts matchedIdentity = npm:QHBlbGx1eC9nb29kdmliZXMtdHVp:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/help.tsView on unpkg

src/runtime/sandbox-qemu-templates.tsView file

•matchType = normalized_sha256 matchedPackage = @pellux/goodvibes-tui@0.29.0 matchedPath = src/runtime/sandbox-qemu-templates.ts matchedIdentity = npm:QHBlbGx1eC9nb29kdmliZXMtdHVp:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/sandbox-qemu-templates.tsView on unpkg

src/runtime/onboarding/apply.tsView file

91patternName = generic_password severity = medium line = 91 matchedText = if (line...th);

Medium

Secret Pattern

Hardcoded password in src/runtime/onboarding/apply.ts

src/runtime/onboarding/apply.tsView on unpkg · L91

src/daemon/cli.tsView file

73patternName = generic_password severity = medium line = 73 matchedText = return l...m();

Medium

Secret Pattern

Hardcoded password in src/daemon/cli.ts

src/daemon/cli.tsView on unpkg · L73

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = bun scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = sh scripts/check-bun.sh

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = bun scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/panels/builtin/session.tsView file

35patternName = generic_password severity = medium line = 35 matchedText = return l...m();

Medium

Secret Pattern

Package contains a possible secret pattern.

src/panels/builtin/session.tsView on unpkg · L35

bin/launcher-support.jsView file

2import { createHash } from 'node:crypto'; L3: import { spawnSync } from 'node:child_process'; L4: import { join } from 'node:path';

High

Child Process

Package source references child process execution.

bin/launcher-support.jsView on unpkg · L2

•matchType = normalized_sha256 matchedPackage = @pellux/goodvibes-tui@0.29.0 matchedPath = bin/launcher-support.js matchedIdentity = npm:QHBlbGx1eC9nb29kdmliZXMtdHVp:0.29.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/launcher-support.jsView on unpkg

src/input/commands/hooks-runtime.tsView file

120} L121: await workbench.import(path, strategy); L122: ctx.print(`Imported managed hooks from ${path} using ${strategy} strategy.`);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/input/commands/hooks-runtime.tsView on unpkg · L120

src/verification/live-verifier.tsView file

89} L90: return `http://127.0.0.1:${port}`; L91: } ... L94: return new Promise((resolveCommand) => { L95: const child = spawn(command, args, { L96: cwd, L97: env: { ...process.env, NO_COLOR: '1' }, L98: stdio: ['ignore', 'pipe', 'pipe'],

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/verification/live-verifier.tsView on unpkg · L89

src/runtime/sandbox-public-gaps.tsView file

2import { dirname, resolve } from 'node:path'; L3: import { spawnSync } from 'node:child_process'; L4: import { ... L191: backend: 'local', L192: command: process.env.SHELL || 'bash', L193: args: ['-lc', `echo "goodvibes sandbox ${profile.id}: ${label}"`], ... L207: readonly status: number | null; L208: readonly stdout: string; L209: readonly stderr: string; ... L367: const authorizedKeys = publicKey L368: ? ` ssh_authorized_keys:\n - ${publicKey}\n` L369: : ' # Generate keys/goodvibes_qemu_ed25519.pub before rebuilding nocloud.iso.\n';

Critical

Persistence Backdoor

Source writes persistence or remote-access backdoor material.

src/runtime/sandbox-public-gaps.tsView on unpkg · L2

scripts/check-bun.shView file

•path = scripts/check-bun.sh kind = build_helper sizeBytes = 461 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-bun.shView on unpkg

src/input/commands/platform-sandbox-qemu.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/input/commands/platform-sandbox-qemu.tsView on unpkg

src/cli/completions/generate.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/completions/generate.tsView on unpkg

src/cli/help.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/help.tsView on unpkg

src/runtime/sandbox-qemu-templates.tsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/sandbox-qemu-templates.tsView on unpkg

src/runtime/onboarding/apply.tsView file

91patternName = generic_password severity = medium line = 91 matchedText = if (line...th);

Medium

Secret Pattern

Hardcoded password in src/runtime/onboarding/apply.ts

src/runtime/onboarding/apply.tsView on unpkg · L91

src/daemon/cli.tsView file

73patternName = generic_password severity = medium line = 73 matchedText = return l...m();

Medium

Secret Pattern

Hardcoded password in src/daemon/cli.ts

src/daemon/cli.tsView on unpkg · L73

Findings

1 Critical9 High10 Medium4 Low

CriticalPersistence Backdoorsrc/runtime/sandbox-public-gaps.ts

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/launcher-support.js

HighShell

HighSame File Env Network Executionsrc/verification/live-verifier.ts

HighKnown Malware Source Similaritybin/launcher-support.js

HighKnown Malware Source Similaritysrc/input/commands/platform-sandbox-qemu.ts

HighKnown Malware Source Similaritysrc/cli/completions/generate.ts

HighKnown Malware Source Similaritysrc/cli/help.ts

HighKnown Malware Source Similaritysrc/runtime/sandbox-qemu-templates.ts

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSecret Patternsrc/panels/builtin/session.ts

MediumDynamic Requiresrc/input/commands/hooks-runtime.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/check-bun.sh

MediumStructural Risk Force Deep Review

MediumSecret Patternsrc/runtime/onboarding/apply.ts

MediumSecret Patternsrc/daemon/cli.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings