registry / @polymorphism-tech/morph-spec / 9.7.0

@polymorphism-tech/morph-spec@9.7.0

MORPH-SPEC: NLH (Natural Language Harness) for spec-driven development with Claude Code

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The postinstall hook installs and activates a package-provided statusline through global Claude Code configuration without a separate setup action. This warrants a warning for agent extension lifecycle risk, but the inspected behavior does not establish malicious attack behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package with lifecycle scripts enabled.

Impact

The package’s statusline is configured to run during Claude Code use.

Mechanism

The postinstall script copies statusline files into the global Claude directory and sets a statusLine command in settings.json.

AI rationale

Evidence

package.jsonsrc/scripts/global-install.jssrc/utils/hooks-installer.js~/.claude/statusline.sh~/.claude/statusline.py~/.claude/settings.json

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package runs a postinstall script that calls the global installer.
The installer adds the package’s statusline scripts to the user’s global Claude directory and configures Claude to run the statusline command.
The global settings update changes the statusLine entry; the source describes the merge as limited to that entry.

Evidence against

The installed statusline is part of the package’s Claude Code integration; the inspected source does not establish credential collection, exfiltration, or another concrete attack.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 282 file(s), 1.74 MB of source, external domains: cli.github.com, cloud.google.com, json.schemastore.org, raw.githubusercontent.com, registry.npmjs.org, stitch.googleapis.com, www.python.org

Source & flagged code

20 flagged

package.jsonView file

Lines 39-79json

39 "node": ">=22.0.0"

40 },

41 "scripts": {

42 "start": "node bin/morph-spec.js",

43 "generate": "node scripts/generate-refs.js && node scripts/generate-ai-pin-props.js && node scripts/api-probe/probe.mjs --generate",

44 "generate:check": "node scripts/generate-refs.js --check && node scripts/generate-ai-pin-props.js --check && node scripts/api-probe/probe.mjs --check",

45 "generate-standards": "node scripts/generate-standards-registry.js",

46 "generate-standards:check": "node scripts/generate-standards-registry.js --check",

47 "validate": "node scripts/validate-framework.js",

48 "freshness": "node scripts/check-freshness.js",

49 "verify": "npm run generate:check && npm run generate-standards:check && npm run validate && npm run freshness && npm test",

50 "test": "node scripts/run-tests.mjs",

51 "test:changed": "node scripts/test-changed.mjs",

52 "test:coverage": "c8 --reporter=text --reporter=html --reporter=lcov node scripts/run-tests.mjs",

53 "test:coverage:summary": "c8 --reporter=text-summary node scripts/run-tests.mjs",

54 "docs": "jsdoc -c jsdoc.json",

55 "docs:watch": "jsdoc -c jsdoc.json --watch",

56 "docs:serve": "npx http-server docs/api -p 8080 -o",

57 "release": "node scripts/release.js",

58 "prepublishOnly": "node scripts/prepublish-check.js",

59 "postinstall": "node src/scripts/global-install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

60 "publish:web": "node scripts/publish-web.mjs"

61 },

62 "dependencies": {

63 "chalk": "^5.3.0",

64 "commander": "^12.0.0",

65 "fs-extra": "^11.2.0",

66 "glob": "^13.0.6",

67 "handlebars": "^4.7.8",

68 "inquirer": "^9.2.0",

69 "minimatch": "^9.0.5",

70 "ora": "^8.0.0"

71 },

72 "repository": {

73 "type": "git",

74 "url": "git+https://github.com/lucasPolymorphism/morph-spec-framework.git"

75 },

76 "author": "Polymorphism Tech <contact@polymorphism.com.br>",

77 "license": "SEE LICENSE IN LICENSE",

78 "homepage": "https://polymorphism.com.br/morph-spec",

79 "bugs": {

bin/morph-spec.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

3import { program } from 'commander';

4import chalk from 'chalk';

5import { fileURLToPath } from 'url';

6import { dirname, join }

framework/hooks/claude-code/core/validate-completion.jsView file

Lines 21-61javascript

21 const { missing } = inspectReport(sliceReportPath(featurePath, slice.id), { covers: slice.covers });

22 if (missing.length) {

23 const hints = missing.

src/utils/hooks-installer.jsView file

Lines 1-24javascript

1import { join, dirname } from 'path';

2import { readFile } from 'fs/promises';

3import { existsSync, chmodSync, readdirSync } from 'fs';

4import { homedir } from 'os'

src/scripts/global-install.jsView file

Lines 23-63javascript

23 if (!npmGlobalDir || !existsSync(npmGlobalDir)) return;

25 const psProfile = join(homedir(), 'Documents',

framework/hooks/claude-code/statusline.pyView file

•path = framework/hooks/claude-code/statusline.py kind = build_helper sizeBytes = 27345 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

framework/hooks/claude-code/statusline.pyView on unpkg

framework/hooks/claude-code/core/worktree-context.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

framework/hooks/claude-code/core/worktree-context.js#virtual:normalized:round1View on unpkg

src/lib/installers/mcp-installer.jsView file

•matchType = normalized_sha256 matchedPackage = @polymorphism-tech/morph-spec@9.0.0 matchedPath = src/lib/installers/mcp-installer.js matchedIdentity = npm:[redacted]:9.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High