registry / @rubytech/create-maxy-code / 0.1.469
@rubytech/create-maxy-code@0.1.469
Install Maxy — AI for Productive People
AI Security Review
scanned 3mo ago · by lpm-firewall-aiFirst-party, user-invoked product installer with no install hooks, package-aligned endpoints, and no exfiltration; the scanner's malicious verdict reflects dual-use provisioning primitives. Real risk (agent permission bypass, system mutation) is scoped to the product's own config and consented, so warn rather than block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
User explicitly invokes the create-maxy-code bin (npm create / npx); no automatic install-time execution
Impact
Broad but consented system provisioning and agent permission relaxation scoped to the product's own brand config
Mechanism
First-party product installer: vendor curl|sh, systemd units, and Claude bypassPermissions seeding into product's own config dir
AI rationale
First-party, user-invoked product installer with no install hooks, package-aligned endpoints, and no exfiltration; the scanner's malicious verdict reflects dual-use provisioning primitives. Real risk (agent permission bypass, system mutation) is scoped to the product's own config and consented, so warn rather than block.
Evidence
package.jsondist/index.jspayload/platform/config/brand.json~/.{brand}/.claude
Network endpoints8
admin.maxy.botdl.google.comdeb.nodesource.comdebian.neo4j.comollama.aiastral.shregistry.npmjs.orggithub.com
Decision evidence
public snapshotAI called this Suspicious at 80.0% confidence as Dangerous Capability with high false-positive risk.
Evidence for warning
- dist/index.js seeds Claude bypassPermissions mode (permissions-seed.js) into agent config on install
- curl|sh of upstream installers: nodesource, neo4j, ollama.ai, astral.sh (dist/index.js:1135,1594,2183,2214)
- Installs systemd units, cloudflared tunnel, file immutability (install-immutability.js), broad system mutation
- spawnSync curl/host DNS + env access + shell execution in one file (dist/index.js:141-151)
Evidence against
- No preinstall/postinstall/install hook; only author-side prepublishOnly in package.json
- dist/index.js runs only as bin on explicit user command (npm create maxy-code)
- bypassPermissions scoped to product's own ~/.{brand}/.claude dir, not user default (dist/index.js:62,1241)
- Network endpoints package-aligned: admin.maxy.bot backend + known vendors
- No credential/env exfiltration or remote code fetch-and-eval to attacker host
- First-party product installer; behavior matches declared 'Install Maxy' purpose
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
26 flagged · loading sourcepayload/platform/scripts/smoke-boot-services.shView file
335patternName = generic_password
severity = medium
line = 335
matchedText = local ne...:-}"
Medium
Secret Pattern
Package contains a possible secret pattern.
payload/platform/scripts/smoke-boot-services.shView on unpkg · L335dist/index.jsView file
141for (const host of ["registry.npmjs.org", "github.com"]) {
L142: const dns = spawnSync("host", ["-W", "5", host], { encoding: "utf-8", stdio: "pipe", timeout: 10_000 });
L143: logFile(`DNS ${host}: ${dns.status === 0 ? "OK" : "FAIL"} — ${(dns.stdout || dns.stderr || "").trim().split("\n")[0]}`);
...
L148: "--connect-timeout", "10",
L149: "https://registry.npmjs.org/",
L150: ], { encoding: "utf-8", stdio: "pipe", timeout: 15_000 });
...
L155: function captureNpmDebugLog() {
L156: const logsDir = resolve(process.env.HOME ?? "/root", ".npm/_logs");
L157: if (!existsSync(logsDir))
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L141Findings
3 Critical12 High15 Medium10 Low
CriticalSame File Env Network Executiondist/index.js
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighCross File Remote Execution Contextpayload/platform/plugins/voice-mirror/mcp/scripts/smoke.mjs
HighRuntime Package Installdist/index.js
HighShips High Entropy Blobpayload/server/public/brand/Archive.zip
HighPayload In Excluded Dirpayload/platform/plugins/prompt-optimiser/skills/prompt-optimiser/__tests__/restatement-ladder.test.sh
High
Affected versions and remediation
This report applies to @rubytech/create-maxy-code@0.1.469.
See all versions of @rubytech/create-maxy-code for other recorded verdicts.
- Review the evidence and your use of @rubytech/create-maxy-code@0.1.469 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.