Loading npm security reports…

@pure-ds/core@0.7.81: AI-agent control-surface risk | LPM Firewall

registry / @pure-ds/core / 0.7.81

@pure-ds/core@0.7.81

Why develop a Design System when you can generate one?

AI Security Review

scanned 12d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall modifies the consuming project’s VS Code, Cursor, Copilot, and Cursor-rule AI control surfaces. It registers a local MCP server and supplies instructions that direct agents to use it.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing @pure-ds/core as a dependency with lifecycle scripts enabled.

Impact

Future IDE/AI-agent sessions in the consumer project can automatically discover and follow package-controlled MCP and instruction content.

Mechanism

Unconsented postinstall AI-agent configuration and instruction injection.

Policy narrative

On dependency installation, postinstall locates the consumer project and writes MCP registration files for VS Code and Cursor, then copies AI-agent instructions into Copilot and Cursor control files. These mutations occur without an explicit setup command and make future agent sessions load package-controlled configuration.

Rationale

This is concrete unconsented postinstall mutation of foreign/broad AI-agent control surfaces, which meets the blocking policy. Lack of observed network exfiltration does not remove the install-time control-surface risk.

Evidence

package.jsonpackages/pds-cli/bin/postinstall.mjspackages/pds-cli/lib/setup-mcp-config.jspackages/pds-cli/bin/pds-mcp-server.jspackages/pds-cli/lib/pds-mcp-core.js.github/copilot-instructions.md.cursorrulesconsumerRoot/.vscode/mcp.json

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node packages/pds-cli/bin/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node packages/pds-cli/bin/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

packages/pds-cli/bin/pds-bootstrap.jsView file

5import path from 'path'; L6: import { spawn } from 'child_process'; L7: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

packages/pds-cli/bin/pds-bootstrap.jsView on unpkg · L5

172stdio: 'inherit', L173: shell: true L174: });

High

Shell

Package source references shell execution.

packages/pds-cli/bin/pds-bootstrap.jsView on unpkg · L172

public/assets/js/pds-auto-definer.jsView file

23const href = spec instanceof URL ? spec.href : new URL(spec, base).href; L24: const mod = await import(href); L25: const Named = mod?.default ?? mod?.[toPascal(tag)];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

public/assets/js/pds-auto-definer.jsView on unpkg · L23

packages/pds-cli/bin/postinstall.mjsView file

234// Create .github directory if it doesn't exist L235: await mkdir(targetDir, { recursive: true }); L236: ... L254: L255: // Also copy .cursorrules for Cursor IDE users L256: try { L257: const cursorSource = path.join(repoRoot, '.cursorrules'); L258: const cursorTarget = path.join(consumerRoot, '.cursorrules'); L259: ... L263: if (!existingCursor.includes('Pure Design System (PDS)')) { L264: console.log('📋 Existing .cursorrules found (not PDS), skipping...'); L265: return;

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

packages/pds-cli/bin/postinstall.mjsView on unpkg · L234

packages/pds-cli/bin/generate-manifest.jsView file

261try { L262: execSync(`npx cem analyze --config ${configPath}`, { L263: cwd: repoRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

packages/pds-cli/bin/generate-manifest.jsView on unpkg · L261

Source & flagged code

7 flagged

package.jsonView file

Lines 76-116json

76 "src/js/pds.js",

77 "src/js/pds-singleton.js",

78 "src/js/common/",

79 "src/js/pds-live-manager/",

80 "src/js/pds-core/",

81 "custom-elements.json",

82 "custom-elements-manifest.config.js",

83 "pds.html-data.json",

84 "pds.css-data.json",

85 "LOCALIZATION.md",

86 "readme.md",

87 "INTELLISENSE.md",

88 "CSS-INTELLISENSE-LIMITATION.md",

89 "CSS-INTELLISENSE-QUICK-REF.md"

90 ],

91 "scripts": {

92 "dev": "node esbuild-dev.js",

93 "prebuild": "npm run types",

94 "build": "node esbuild-build.js",

95 "types": "tsc -p tsconfig.json && node scripts/sync-types.mjs",

96 "postinstall": "node packages/pds-cli/bin/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L96

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L96

97 "prepds:build": "npm run types",

98 "pds:build": "node packages/pds-cli/bin/pds-static.js",

99 "pds:build-icons": "node packages/pds-cli/bin/pds-build-icons.js",

100 "pds:bootstrap": "node packages/pds-cli/bin/pds-bootstrap.js",

101 "pds:manifest": "node packages/pds-cli/bin/generate-manifest.js",

102 "pds:css-data": "node packages/pds-cli/bin/generate-css-data.js",

103 "pds:import": "node packages/pds-cli/bin/pds-import.js",

104 "pds:dx": "node packages/pds-cli/bin/pds-dx.js",

105 "pds:mcp:server": "node packages/pds-cli/bin/pds-mcp-server.js",

106 "pds:mcp:health": "node packages/pds-cli/bin/pds-mcp-health.js",

107 "pds:mcp:eval": "node packages/pds-cli/bin/pds-mcp-eval.js",

108 "storybook:generate": "cd packages/pds-storybook && npm run generate-stories",

109 "storybook:dev": "cd packages/pds-storybook && npm run storybook:dev",

110 "storybook:build": "cd packages/pds-storybook && npm run storybook:build"

111 },

112 "author": "Marc van Neerven",

113 "license": "ISC",

114 "engines": {

115 "node": ">=18"

116 },

packages/pds-cli/bin/pds-bootstrap.jsView file

Lines 1-25javascript

1#!/usr/bin/env node

2

3import { readFile, writeFile, mkdir, access, rename, rm, copyFile, readdir } from 'fs/promises';

4import { existsSync } from 'fs';

5import path from 'path';

6import

public/assets/js/pds-auto-definer.jsView file

Lines 3-43javascript

3 let opts = {};

4 if (args.length && typeof args[args.length - 1] === "object") {

5 opts =

packages/pds-cli/bin/postinstall.mjsView file

Lines 214-254javascript

214 }

215

216 const defaultConfig = buildStarterPdsConfig();

217

218 await writeFile(configPath, defaultConfig, 'utf8');

219 console.

packages/pds-cli/bin/generate-manifest.jsView file

Lines 241-281javascript

241 const runningFromPostinstall = process.env.PDS_POSTINSTALL === '1';

242

243 if (!analyzerInstalled || runningFromPostinstall) {

244 if (