Loading npm security reports…

@routerhub/agent-rules@1.5.116: AI-agent control-surface risk | LPM Firewall

registry / @routerhub/agent-rules / 1.5.116

@routerhub/agent-rules@1.5.116

Shared Copilot agent rules and guidelines for RouterHub projects

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time code mutates a consuming project's broad AI-agent control surfaces without an explicit user command. It also alters .npmrc to keep dependency lifecycle scripts enabled and uncached.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation executes postinstall.

Impact

Automatically controls instructions and skills loaded by Copilot/Claude-compatible agents in the consuming project.

Mechanism

postinstall-driven agent-rule injection and lifecycle-policy mutation

Policy narrative

During npm postinstall, the package resolves the consuming project root, modifies its .npmrc, and launches merge.js. That script writes instruction files consumed by multiple AI coding-agent platforms and copies packaged skills into .claude/skills. This is an unconsented install-time mutation of a foreign, broad AI-agent control surface.

Rationale

The behavior is explicit in source and occurs automatically during dependency installation, meeting the firewall block policy for foreign/broad AI-agent control-surface mutation.

Evidence

package.jsonpostinstall.jsmerge.jsAGENTS.base.md.npmrcAGENTS.mdCLAUDE.mdAGENTS.private.md.github/copilot-instructions.md.github/instructions/*.instructions.md.github/PULL_REQUEST_TEMPLATE.md

Source & flagged code

4 flagged

package.jsonView file

Lines 8-46json

8 },

9 "files": [

10 "AGENTS.base.md",

11 "rules/",

12 "skills/",

13 "merge.js",

14 "AGENTS.private.example.md",

15 "PULL_REQUEST_TEMPLATE.md",

16 "README.zh-CN.md",

17 "postinstall.js",

18 "package.json",

19 "CHANGELOG.md"

20 ],

21 "scripts": {

22 "build": "node --check merge.js && node --check postinstall.js",

23 "test:postinstall-init": "node tests/postinstall-init.test.js",

24 "merge": "node merge.js",

25 "sync": "node merge.js sync",

26 "init": "node merge.js init",

27 "watch": "node merge.js watch",

28 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 },

30 "repository": {

31 "type": "git",

32 "url": "https://github.com/routerhub/agentRules"

33 },

34 "keywords": [

35 "copilot",

36 "agent",

37 "rules",

38 "guidelines"

39 ],

40 "author": "RouterHub Team",

41 "license": "MIT",

42 "engines": {

43 "node": ">=16.0.0"

44 }

45}

46

postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.108 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.108 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 237cac60893b7f35 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @routerhub/agent-rules@1.5.108 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.108 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.jsView on unpkg