registry / Malware / @relyon/store-kit / 0.1.21

@relyon/store-kit@0.1.21

Relyon Core: run npx @relyon/store-kit init in your store project, then read the relyon-setup skill and finish with npx @relyon/store-kit doctor. Get found and bought by AI shopping agents, with checkout on your own domain.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

The packaged AGENTS.md attempts to steer agent behavior away from inspecting the shipped implementation, matching the review-manipulation rule. The postinstall is notice-only, and the entrypoint contains exports rather than import-time actions.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An agent reads the package's AGENTS.md while inspecting or working with the package.

Impact

This can suppress inspection of the shipped implementation and steer the agent away from an independent review.

Mechanism

The instructions tell the agent not to read dist files and direct it to run the package initializer first.

Attack narrative

The packaged AGENTS.md tells agents to avoid reading dist files, which contain the package's shipped implementation. This is review manipulation; the postinstall itself only prints setup guidance, and no separate runtime attack was identified.

AI rationale

Evidence

AGENTS.md

Decision evidence

public snapshot

AI called this Malicious at 86.0% confidence as Malware with low false-positive risk.

Evidence for block

The packaged AGENTS.md directs agents not to read dist files, where this package's shipped implementation resides.
The postinstall invokes a script that only prints setup guidance; it does not read project or environment data.
The library entrypoint consists of module exports.

Evidence against

The postinstall notice is best-effort and does not access project or environment data.
The optional agent stop hooks are disabled by default and are installed only through an explicit init option.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 85 file(s), 940 KB of source, external domains: base.google.com, chatgpt.com, core.getrelyon.com, github.com, schema.org, shop.example.com, ucp.dev, www.sitemaps.org, www.w3.org

Source & flagged code

5 flagged

package.jsonView file

•scripts.postinstall = node -e "try { require('./scripts/install-notice.cjs') } catch {}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "try { require('./scripts/install-notice.cjs') } catch {}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/doctor-merchant.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Findings

1 Critical4 High3 Medium4 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limiteddist/doctor-merchant.js#virtual:normalized:round1

HighAi Review EvidenceAGENTS.md

HighSuspicious Lifecycle Evidencescripts/install-notice.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @relyon/store-kit@0.1.21.

See all versions of @relyon/store-kit for other recorded verdicts.

Avoid installing @relyon/store-kit@0.1.21. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-30 20:30:08.685Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Malware / @relyon/store-kit / 0.1.21

@relyon/store-kit@0.1.21

AI Security Review

scanned 5d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.

Trigger

An agent reads the package's AGENTS.md while inspecting or working with the package.

Impact

This can suppress inspection of the shipped implementation and steer the agent away from an independent review.

Mechanism

The instructions tell the agent not to read dist files and direct it to run the package initializer first.

Attack narrative

AI rationale

Evidence

AGENTS.md

Decision evidence

public snapshot

AI called this Malicious at 86.0% confidence as Malware with low false-positive risk.

Evidence for block

The packaged AGENTS.md directs agents not to read dist files, where this package's shipped implementation resides.
The postinstall invokes a script that only prints setup guidance; it does not read project or environment data.
The library entrypoint consists of module exports.

Evidence against

The postinstall notice is best-effort and does not access project or environment data.
The optional agent stop hooks are disabled by default and are installed only through an explicit init option.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 85 file(s), 940 KB of source, external domains: base.google.com, chatgpt.com, core.getrelyon.com, github.com, schema.org, shop.example.com, ucp.dev, www.sitemaps.org, www.w3.org

Source & flagged code

5 flagged

package.jsonView file

•scripts.postinstall = node -e "try { require('./scripts/install-notice.cjs') } catch {}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "try { require('./scripts/install-notice.cjs') } catch {}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/doctor-merchant.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Findings

1 Critical4 High3 Medium4 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limiteddist/doctor-merchant.js#virtual:normalized:round1

HighAi Review EvidenceAGENTS.md

HighSuspicious Lifecycle Evidencescripts/install-notice.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @relyon/store-kit@0.1.21.

See all versions of @relyon/store-kit for other recorded verdicts.

Avoid installing @relyon/store-kit@0.1.21. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-30 20:30:08.685Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

Other malware packages

Behavioral surface

Related packages

Other malware packages