registry / AI-agent control-surface risk / @series-inc/rundot-game-sdk

@series-inc/rundot-game-sdk

RUN.game SDK

This report shows the evidence for @series-inc/rundot-game-sdk@5.22.0. 1 of 3 known versions is blocked or flagged. The newest version, 5.29.0, is flagged. See all versions.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms a concrete, unconsented postinstall mutation of broad AI-agent control files, sourced from a remote mutable archive. This meets the blocking policy.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Alters agent instructions and creates agent config files in the installing project; future agent sessions may consume attacker-controlled remote content.

Mechanism

remote docs download followed by recursive AI instruction-file injection

Policy narrative

The postinstall hook downloads a ZIP from a version branch or mutable main branch, extracts it into the consumer project, reads agents-index.txt, then recursively injects that content into every AGENTS.md and CLAUDE.md it finds. If none exist, it creates AGENTS.md, CLAUDE.md, and GEMINI.md. This executes without an explicit user setup command and modifies broad third-party AI-agent instruction surfaces.

AI rationale

Source inspection confirms a concrete, unconsented postinstall mutation of broad AI-agent control files, sourced from a remote mutable archive. This meets the blocking policy.

Evidence

package.jsonscripts/postinstall.mjsAGENTS.mdCLAUDE.mdGEMINI.md.gitignore.rundot/cli_hooks.json.rundot-docs.docs-temp.zip.docs-temp-extract

Network endpoints2

github.com/series-ai/venus-sdk-docs/archive/refs/heads/v5.22.0.zipgithub.com/series-ai/venus-sdk-docs/archive/refs/heads/main.zip

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 99.0% confidence with low false-positive risk.

Evidence for policy risk

package.json runs scripts/postinstall.mjs at install.
scripts/postinstall.mjs downloads remote docs, falling back to unpinned main.zip.
Postinstall recursively finds and rewrites all project AGENTS.md and CLAUDE.md files.
It creates root AGENTS.md, CLAUDE.md, and GEMINI.md when none exist.
It hides downloaded content via .gitignore and configures .rundot/cli_hooks.json.

Evidence against

No credential harvesting or shell-process execution was found in the inspected install script.
Runtime dynamic imports/fetches are SDK/Vite functionality and do not negate the install-time control-surface mutation.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

9 flagged

package.jsonView file

Lines 36-76json

36 "types": "./dist/index.d.ts",

37 "import": "./dist/index.js",

38 "default": "./dist/index.js"

39 },

40 "./mp-server": {

41 "types": "./dist/mp-server/index.d.ts",

42 "import": "./dist/mp-server/index.js",

43 "default": "./dist/mp-server/index.js"

44 },

45 "./host-http": {

46 "types": "./dist/host-http.d.ts",

47 "import": "./dist/host-http.js",

48 "default": "./dist/host-http.js"

49 }

50 },

51 "files": [

52 "dist",

53 "scripts/postinstall.mjs"

54 ],

55 "scripts": {

56 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L56

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L56

57 "typecheck": "tsc --noEmit --watch --preserveWatchOutput",

58 "build": "npm run build:sdk && npm run build:vite && npm run build:mp-server",

59 "build:mp-server": "tsup --config tsup.mp-server.config.ts",

60 "build:sdk": "tsup --config tsup.config.ts",

61 "build:vite": "tsup --config tsup.vite.config.ts",

62 "generate:embedded-three-exports": "node scripts/generate-embedded-three-exports.mjs",

63 "pack": "npm pack",

64 "test": "jest",

65 "build:test-app": "npm run build --prefix tests/test-app",

66 "dev": "tsup --watch",

67 "generate:embedded-react-exports": "node scripts/generate-embedded-react-exports.mjs",

68 "generate:embedded-inkjs-exports": "node scripts/generate-embedded-inkjs-exports.mjs",

69 "generate:embedded-zustand-exports": "node scripts/generate-embedded-zustand-exports.mjs"

70 },

71 "license": "MIT",

72 "keywords": [

73 "RUN.game",

74 "sdk",

75 "api",

76 "h5",

dist/vite/index.jsView file

Lines 3685-3737javascript

3685 children: sandboxToolbarStyle_default,

3686 injectTo: "head"

3687 };

3688 const scriptTag = {

3689 tag: "script",

3690 attrs: {

dist/chunk-2WRAWLP3.jsView file

Lines 1-12javascript

1// raw-loader:/home/runner/work/venus/venus/packages/sdk/src/webview/webviewLibraryShim.js

2var webviewLibraryShim_default = "/**\n * RUN.game Embedded Libraries WebView Shim\n *\n * This code is injected into H5 game WebViews BEFORE the game's main script runs.\n * It bootstraps the embedded libraries system by:\n * 1. Reading window.__rundotGameLibrariesConfig (set by the Vite plugin)\n * 2. Loading libraries via RPC (mobile) or CDN (web)\n * 3. Registering libraries in window.__rundotGameLibraryExports\n * 4. Allowing the game's virtual modules to access them

dist/sandbox/index.jsView file

Lines 1395-1435javascript

1395 const empty = document.createElement("div");

1396 empty.textContent = "No items available.";

1397 empty.style.cssText = "padding: 24px; text-align: center; color: #666;";

1398 list.appendChild

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/vite/index.jsView file

3705patternName = google_api_key severity = high line = 3705 matchedText = apiKey: ...qQ",

High

High Secret

Package contains a high-severity secret pattern.

dist/vite/index.jsView on unpkg · L3705

Findings

6 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretdist/vite/index.js

HighSecret Patterndist/vite/index.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/sandbox/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/chunk-2WRAWLP3.js

LowFilesystem

Low

Affected versions and remediation

This report applies to @series-inc/rundot-game-sdk@5.22.0.

The versions list below shows the verdict for each recorded version.

Avoid installing @series-inc/rundot-game-sdk@5.22.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-07-29 18:52:14.124Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

3 known versions

5.29.0latestSuspiciousAI-agent capability abuseWarnPublishedSep 28, 2026, 6:49 PM 5.28.1SuspiciousAI-agent capability abuseWarnPublishedSep 4, 2026, 5:38 PM 5.22.0shownMaliciousSoft block: AI-agent control surfaceBlockPublishedJun 24, 2026, 9:21 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @series-inc

Other AI-agent control-surface risk packages

Behavioral surface

Related packages

More from @series-inc

Other AI-agent control-surface risk packages

Source & flagged code