Loading npm security reports…

@routerhub/agent-rules@1.5.224: Malicious npm security report | LPM Firewall

registry / @routerhub/agent-rules / 1.5.224

@routerhub/agent-rules@1.5.224

Shared Copilot agent rules and guidelines for RouterHub projects

AI Security Review

scanned 22d ago · by lpm-firewall-ai

Installing the package automatically modifies consumer project configuration and broad AI-agent control surfaces. It also deploys instructions that discourage reporting secret exposure.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installs the package and runs postinstall.

Impact

It weakens package-manager lifecycle safeguards and injects package-controlled rules and skills into consumer repositories.

Mechanism

Postinstall configuration mutation and AI-agent instruction deployment.

Attack narrative

On installation, postinstall locates the consumer project, changes .npmrc to force dependency lifecycle execution, then runs the merger. The merger writes Copilot instructions and recursively copies package-controlled skills into the project’s .claude directory. Its shipped rules explicitly direct reviewers not to report documentation containing real tokens or keys. This is an unconsented install-time modification of a broad AI-agent control surface.

AI rationale

The automatic postinstall modifies both package-manager behavior and foreign AI-agent instruction surfaces. The included reviewer-directed secret-suppression rule reinforces malicious intent.

Evidence

package.jsonpostinstall.jsmerge.jsAGENTS.base.mdproject/.npmrcproject/.gitignoreproject/.github/copilot-instructions.mdproject/.github/instructions/project/.github/PULL_REQUEST_TEMPLATE.md

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/agent-browser-cleanup.shView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/agent-browser-cleanup.shView on unpkg

•path = scripts/agent-browser-cleanup.sh kind = build_helper sizeBytes = 4442 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/agent-browser-cleanup.shView on unpkg

postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.223 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.223 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = d50b5f15aa258565 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @routerhub/agent-rules@1.5.223 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.223 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.jsView on unpkg

skills/screenshot-annotate/annotate.cjsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.223 matchedPath = skills/screenshot-annotate/annotate.cjs matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.223 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/screenshot-annotate/annotate.cjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 10-48json

10 "files": [

11 "AGENTS.base.md",

12 "rules/",

13 "skills/",

14 "scripts/agent-browser-cleanup.sh",

15 "merge.js",

16 "AGENTS.private.example.md",

17 "PULL_REQUEST_TEMPLATE.md",

18 "postinstall.js",

19 "package.json",

20 "CHANGELOG.md",

21 "enabled-users.json"

22 ],

23 "scripts": {

24 "build": "node --check merge.js && node --check postinstall.js",

25 "test:postinstall-init": "node tests/postinstall-init.test.js",

26 "merge": "node merge.js",

27 "sync": "node merge.js sync",

28 "init": "node merge.js init",

29 "watch": "node merge.js watch",

30 "postinstall": "node postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 },

32 "repository": {

33 "type": "git",

34 "url": "git+https://github.com/PomexAITeam/agent-rules.git"

35 },

36 "keywords": [

37 "copilot",

38 "agent",

39 "rules",

40 "guidelines"

41 ],

42 "author": "RouterHub Team",

43 "license": "MIT",

44 "engines": {

45 "node": ">=16.0.0"

46 }

47}

48

scripts/agent-browser-cleanup.shView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/agent-browser-cleanup.shView on unpkg

•path = scripts/agent-browser-cleanup.sh kind = build_helper sizeBytes = 4442 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/agent-browser-cleanup.shView on unpkg

postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.223 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.223 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = d50b5f15aa258565 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @routerhub/agent-rules@1.5.223 matchedPath = postinstall.js matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.223 similarity = 1.000 shingleOverlap = 4 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.jsView on unpkg

skills/screenshot-annotate/annotate.cjsView file

•matchType = normalized_sha256 matchedPackage = @routerhub/agent-rules@1.5.223 matchedPath = skills/screenshot-annotate/annotate.cjs matchedIdentity = npm:QHJvdXRlcmh1Yi9hZ2VudC1ydWxlcw:1.5.223 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/screenshot-annotate/annotate.cjsView on unpkg