Loading npm security reports…

@polymorphism-tech/morph-spec@8.11.0: AI-agent control-surface | LPM Firewall

registry / @polymorphism-tech/morph-spec / 8.11.0

@polymorphism-tech/morph-spec@8.11.0

MORPH-SPEC: NLH (Natural Language Harness) for spec-driven development with Claude Code

AI Security Review

scanned 18d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm installation mutates the user-wide Claude Code configuration and installs a command executed by every Claude Code session. It also changes the Windows PowerShell profile.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall

Impact

All Claude Code sessions may execute package-installed statusline code; Windows shells receive persistent PATH changes.

Mechanism

unconsented global AI-agent configuration and shell-profile mutation

Policy narrative

During npm postinstall, the package copies its statusline scripts into ~/.claude and replaces the global Claude Code statusLine setting to execute them for every session, without an explicit user command. On Windows it also appends PATH logic to PowerShell profiles. This is a broad foreign AI-agent control-surface mutation at install time.

Rationale

The install-time global Claude Code configuration write meets the blocking policy regardless of the statusline's presently benign behavior. No credential exfiltration was found in the inspected statusline source.

Evidence

package.jsonsrc/scripts/global-install.jssrc/utils/hooks-installer.jsframework/hooks/claude-code/statusline.shframework/hooks/claude-code/statusline.py~/.claude/statusline.sh~/.claude/statusline.py~/.claude/settings.json

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/scripts/global-install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

framework/hooks/claude-code/core/post-edit-typecheck.jsView file

16L17: import { execSync } from 'child_process'; L18: import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';

High

Child Process

Package source references child process execution.

framework/hooks/claude-code/core/post-edit-typecheck.jsView on unpkg · L16

7* L8: * Runs `npx tsc --noEmit` only for .ts/.tsx files, with a 3-second debounce L9: * so rapid sequential edits (e.g. multiple files in one task) don't each ... L16: L17: import { execSync } from 'child_process'; L18: import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

framework/hooks/claude-code/core/post-edit-typecheck.jsView on unpkg · L7

src/scripts/global-install.jsView file

14* Ensure the npm global bin directory is in the user's PATH on Windows. L15: * Adds it to the PowerShell $PROFILE so new terminals find `morph-spec`. L16: */

High

Shell

Package source references shell execution.

src/scripts/global-install.jsView on unpkg · L14

src/lib/installers/mcp-installer.jsView file

189*/ L190: const { execSync } = require('child_process'); L191: const { createInterface } = require('readline'); L192: L193: const STITCH_URL = 'https://stitch.googleapis.com/mcp'; L194: const PROJECT_ID = '${gcpProject}'; ... L197: const GCLOUD = process.platform === 'win32' L198: ? (process.env.LOCALAPPDATA || '') + '/Google/Cloud SDK/google-cloud-sdk/bin/gcloud.cmd' L199: : 'gcloud';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/lib/installers/mcp-installer.jsView on unpkg · L189

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = src/lib/installers/mcp-installer.js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/installers/mcp-installer.jsView on unpkg

src/utils/hooks-installer.jsView file

14import { homedir } from 'os'; L15: import { execSync } from 'child_process'; L16: ... L231: try { L232: settings = JSON.parse(await readFile(settingsPath, 'utf-8')); L233: } catch { ... L322: // JSON Schema for IDE auto-complete and validation L323: settings['$schema'] = 'https://json.schemastore.org/claude-code-settings.json'; L324: ... L365: function findPython() { L366: if (process.platform !== 'win32') { L367: for (const cmd of ['python3', 'python']) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/utils/hooks-installer.jsView on unpkg · L14

framework/hooks/claude-code/statusline.pyView file

•path = framework/hooks/claude-code/statusline.py kind = build_helper sizeBytes = 27508 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

framework/hooks/claude-code/statusline.pyView on unpkg

src/commands/dashboard/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = [redacted].js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/dashboard/dashboard.jsView on unpkg

framework/templates/project/validate.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = [redacted].js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

framework/templates/project/validate.jsView on unpkg

src/lib/validators/ui/ui-contrast-validator.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = src/lib/validators/ui/ui-contrast-validator.js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/validators/ui/ui-contrast-validator.jsView on unpkg

src/commands/project/doctor.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @polymorphism-tech/morph-spec@8.1.2 matchedIdentity = npm:[redacted]:8.1.2 similarity = 0.525 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/project/doctor.jsView on unpkg

Source & flagged code

12 flagged

package.jsonView file

Lines 39-79json

39 "engines": {

40 "node": ">=22.0.0"

41 },

42 "scripts": {

43 "start": "node bin/morph-spec.js",

44 "generate": "node scripts/generate-refs.js",

45 "generate:check": "node scripts/generate-refs.js --check",

46 "generate-standards": "node scripts/generate-standards-registry.js",

47 "generate-standards:check": "node scripts/generate-standards-registry.js --check",

48 "validate": "node scripts/validate-framework.js",

49 "freshness": "node scripts/check-freshness.js",

50 "verify": "npm run generate:check && npm run generate-standards:check && npm run validate && npm run freshness && npm test",

51 "test": "node scripts/run-tests.mjs",

52 "test:coverage": "c8 --reporter=text --reporter=html --reporter=lcov node scripts/run-tests.mjs",

53 "test:coverage:summary": "c8 --reporter=text-summary node scripts/run-tests.mjs",

54 "docs": "jsdoc -c jsdoc.json",

55 "docs:watch": "jsdoc -c jsdoc.json --watch",

56 "docs:serve": "npx http-server docs/api -p 8080 -o",

57 "release": "node scripts/release.js",

58 "prepublishOnly": "node scripts/prepublish-check.js",

59 "postinstall": "node src/scripts/global-install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

60 },

61 "dependencies": {

62 "chalk": "^5.3.0",

63 "commander": "^12.0.0",

64 "fs-extra": "^11.2.0",

65 "glob": "^13.0.6",

66 "handlebars": "^4.7.8",

67 "inquirer": "^9.2.0",

68 "minimatch": "^9.0.5",

69 "ora": "^8.0.0"

70 },

71 "repository": {

72 "type": "git",

73 "url": "git+https://github.com/lucasPolymorphism/morph-spec-framework.git"

74 },

75 "author": "Polymorphism Tech <contact@polymorphism.com.br>",

76 "license": "SEE LICENSE IN LICENSE",

77 "homepage": "https://polymorphism.com.br/morph-spec",

78 "bugs": {

79 "email": "support@polymorphism.com.br"

framework/hooks/claude-code/core/post-edit-typecheck.jsView file

Lines 1-36javascript

1#!/usr/bin/env node

2

3/**

4 * PostToolUse Hook: TypeScript typecheck with debounce

5 *

6 * Event: PostToolUse | Matcher: Write|Edit

7 *

8 * Runs `npx tsc --noEmit` only for .ts/.tsx files, with a 3-second debounce

9 * so rapid sequential edits (e.g. multiple files in one task) don't each

10 * trigger a full typecheck. Silent on success — only injects on error.

src/scripts/global-install.jsView file

Lines 1-34javascript

1// src/scripts/global-install.js

2import { join, dirname } from 'path';

3import { fileURLToPath } from 'url';

4import { homedir, platform } from 'os';

5import { mkdir, readFile, writeFile } from

src/lib/installers/mcp-installer.jsView file

Lines 169-209javascript

169 } catch {

170 results.push({ name, repo: companion.repo, success: false });

171 }

172 }

173

174 return results;

175}

176

177/**

src/utils/hooks-installer.jsView file

Lines 1-34javascript

1/**

2 * Claude Code Hooks Installer (v2)

3 *

4 * Registry-based installer for all MORPH-SPEC Claude Code hooks.

5 * Declarative MORPH_HOOKS array defines all hooks.

6 * Idempotent merge into .claude/settings.local.json.

7 *

8 * Called by `morph-spec init` and `morph-spec update`.

9 */

10

11import { join, dirname }

framework/hooks/claude-code/statusline.pyView file

•path = framework/hooks/claude-code/statusline.py kind = build_helper sizeBytes = 27508 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

framework/hooks/claude-code/statusline.pyView on unpkg

src/commands/dashboard/dashboard.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = [redacted].js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/commands/dashboard/dashboard.jsView on unpkg

framework/templates/project/validate.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = [redacted].js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

framework/templates/project/validate.jsView on unpkg

src/lib/validators/ui/ui-contrast-validator.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@7.8.0 matchedPath = src/lib/validators/ui/ui-contrast-validator.js matchedIdentity = npm:[redacted]:7.8.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/lib/validators/ui/ui-contrast-validator.jsView on unpkg

src/commands/project/doctor.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @polymorphism-tech/morph-spec@8.1.2 matchedIdentity = npm:[redacted]:8.1.2 similarity = 0.525 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/project/doctor.jsView on unpkg