registry / @ploomescrm/ui / 3.9.1
@ploomescrm/ui@3.9.1
Biblioteca de componentes React do Design System da Ploomes: componentes acessíveis, tematizáveis e prontos para produção, com tokens de design embutidos e suporte a dark mode e whitelabel em tempo de execução.
AI Security Review
scanned 4d ago · by lpm-firewall-aiSource confirms an unprompted postinstall mutation of the consumer's Claude configuration to install first-party extensions. The inspected extension content is product guidance, so the evidence supports a warning for lifecycle extension setup rather than a confirmed broader attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package as a dependency runs its postinstall hook.
Impact
The installed guidance becomes available to the consumer's Claude agent without a separate setup command.
Mechanism
The hook copies package-owned extensions into .claude directories and adds a generated import to .claude/CLAUDE.md.
AI rationale
Source confirms an unprompted postinstall mutation of the consumer's Claude configuration to install first-party extensions. The inspected extension content is product guidance, so the evidence supports a warning for lifecycle extension setup rather than a confirmed broader attack.
Evidence
package.jsonscripts/setup.mjsai-extensions/CLAUDE.mdai-extensions/skills/setup-ploomes-ui/SKILL.md.claude/skills/.claude/CLAUDE.md
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs scripts/setup.mjs automatically after installation.
- The setup script targets the consumer project and copies package-owned extensions into its .claude directories.
- The script also writes a generated import into the consumer's .claude/CLAUDE.md.
- The installed extensions provide Ploomes UI setup and component guidance.
Evidence against
- The inspected extension content is scoped to using this package's design system.
Behavioral surface
EnvironmentVarsFilesystem
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/setup.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg78"postinstall": "node scripts/setup.mjs",
"build": "tsdown",
"dev": "tsdown --watch",
"lint": "eslint src --max-warnings 0",
"type-check": "tsc --noEmit",
"test"
Medium
Ai Review Evidence
The package runs scripts/setup.mjs automatically after installation.
package.jsonView on unpkg · L78scripts/setup.mjsView file
9* Mirrors each category from <src>/ flattened into the root of the consumer's
L10: * `.claude/<category>/`, prefixing each item with the lib name (skills are only
L11: * discovered at `.claude/skills/<skill>/SKILL.md` directly). The wipe removes
L12: * only the items carrying this prefix, leaving the project's own content intact.
L13: * If `<src>/CLAUDE.md` exists, injects a demarcated `@import` into the consumer's
L14: * `.claude/CLAUDE.md`.
L15: *
L16: * ai-extensions/skills/foo/SKILL.md -> .claude/skills/<PREFIX>-foo/SKILL.md
L17: *
...
L19: * During DS-monorepo dev the package lives in packages/ui (outside node_modules),
L20: * so the script is inert and the repo's `.claude/` stays intact.
L21: */
Findings
1 Critical2 High4 Medium5 Low
CriticalAi Agent Control Hijackscripts/setup.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/theme.css
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidencescripts/setup.mjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @ploomescrm/ui@3.9.1.
See all versions of @ploomescrm/ui for other recorded verdicts.
- Review the evidence and your use of @ploomescrm/ui@3.9.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.