Loading npm security reports…

@rfdtech/components@2.3.0: AI-agent control-surface risk | LPM Firewall

registry / @rfdtech/components / 2.3.0

@rfdtech/components@2.3.0

Shared React component library for Clet projects

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An npm postinstall silently runs AI-tool setup in the consuming project. It writes project AI instructions/configuration and a user-wide Codex MCP configuration when detected.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install of @rfdtech/components

Impact

Adds a package-controlled MCP server and instructions to detected AI tools without an explicit setup command.

Mechanism

postinstall launches a setup CLI that mutates AI-agent configuration surfaces

Policy narrative

Installing the dependency executes its postinstall, which launches `rfdui setup` in the consuming project. Setup writes AI skill documents even without a detected tool, then modifies configurations for detected Claude, Cursor, Codex, and OpenCode installations. The Codex path is user-wide (`~/.codex/config.toml`), so an npm dependency install mutates a foreign, broad AI-agent control surface and registers its MCP server without explicit user setup.

Rationale

This is concrete, unconsented postinstall mutation of project and user-wide AI-agent control surfaces. It meets the firewall block policy despite no observed exfiltration or remote payload download.

Evidence

package.jsonscripts/postinstall.mjsdist/mcp/installers/setup.jsdist/mcp/installers/claude.jsdist/mcp/installers/cursor.jsdist/mcp/installers/codex.jsdist/mcp/installers/opencode.js.ai/SKILL.md.ai/image-to-components.md

Source & flagged code

4 flagged

package.jsonView file

Lines 36-76json

36 "import": {

37 "types": "./dist/next-index.d.ts",

38 "default": "./dist/next.js"

39 },

40 "require": {

41 "types": "./dist/next-index.d.ts",

42 "default": "./dist/next.cjs"

43 }

44 }

45 },

46 "files": [

47 "dist",

48 "scripts/postinstall.mjs"

49 ],

50 "bin": {

51 "components-mcp": "dist/mcp/index.js",

52 "rfdui": "dist/mcp/cli.js"

53 },

54 "scripts": {

55 "prepare": "npm run generate:tokens && node scripts/install-hooks.mjs",

56 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L56

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L56

57 "generate:tokens": "node scripts/generate-theme-tokens.mjs",

58 "build": "npm run generate:tokens && BUILD_TARGET=default npx vite build && BUILD_TARGET=next npx vite build && mv dist/next-index.css dist/next.css && node -e \"var fs=require('fs');['dist/next.js','dist/next.cjs'].forEach(f=>fs.writeFileSync(f,fs.readFileSync(f,'utf8').replace('./next-index.css','./next.css')))\" && tsc -p tsconfig.build.json && cp src/next.d.ts dist/next.d.ts && (cd mcp && npx tsc -p tsconfig.json) && node mcp/scripts/prepare-dist.mjs",

59 "build:mcp": "(cd mcp && npx tsc -p tsconfig.json) && node mcp/scripts/prepare-dist.mjs",

60 "dev": "vite -c vite.demo.config.ts",

61 "demo": "vite build -c vite.demo.config.ts",

62 "test": "vitest run",

63 "test:watch": "vitest",

64 "test:types": "vitest --typecheck run",

65 "lint": "eslint .",

66 "lint:css": "stylelint 'src/**/*.css' --max-warnings 0",

67 "lint:css:fix": "stylelint 'src/**/*.css' --fix",

68 "typecheck": "tsc --noEmit",

69 "prepublishOnly": "npm run generate:tokens && npm run lint:css && npm run lint && npm run typecheck && npm run test && npm run test:types && npm run build"

70 },

71 "peerDependencies": {

72 "@hookform/resolvers": ">=3.0.0",

73 "@radix-ui/react-alert-dialog": "^1.1.0",

74 "@radix-ui/react-checkbox": "^1.3.0",

75 "@radix-ui/react-dialog": "^1.1.0",

76 "@radix-ui/react-popover": "^1.1.0",

dist/next.cjsView file

1"use strict";require('./next.css');var dm=Object.create;var Oo=Object.defineProperty;var um=Object.getOwnPropertyDescriptor;var hm=Object.getOwnPropertyNames;var fm=Object.getProto... L2: react-router-dom: import from '@rfdtech/components'

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/next.cjsView on unpkg · L1

scripts/postinstall.mjsView file

Lines 5-41javascript

5// `npx rfdui setup` step required. Set RFDUI_SKIP_SETUP to skip (e.g. in CI).

6import { existsSync } from "node:fs";

7import { spawnSync } from "node:child_process";

8import path from "node:path";

9import { fileURLToPath } from