Loading npm security reports…

@softize/opus@12.2.1: AI-agent control-surface risk | LPM Firewall

registry / @softize/opus / 12.2.1

@softize/opus@12.2.1

End-to-end action protocol for TypeScript. Single package with subpath exports (core + adapters).

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall mutates the consuming repository's AI-agent control surfaces without an explicit user command. It installs agent skills, a Claude Stop hook, instructions, and Git-hook configuration.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm install of @softize/opus

Impact

Persists package-controlled instructions and commands in Claude/agent configuration and repository hooks.

Mechanism

postinstall-driven consumer-project AI-agent and Git-hook materialization

Policy narrative

On npm installation, postinstall locates the consumer project and invokes setup. That setup materializes package-controlled skills into both agent directories, adds a command-bearing Claude Stop hook, updates AGENTS.md and CLAUDE.md, and configures Git hooks. These are persistent AI-agent control-surface mutations activated without an explicit setup command.

Rationale

The lifecycle hook performs unconsented, broad consumer-project AI-agent and hook configuration. This meets the firewall's install-time AI-agent control-surface block boundary despite collision checks and lack of exfiltration.

Evidence

bin/lib/postinstall.mjsbin/lib/init.mjsbin/lib/materialize.mjsregistry/hooks/opus-check-on-stop.mjspackage.jsonopus.jsonbase.json.agents/skills/.claude/skills/.claude/hooks/opus-check-on-stop.mjs

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/lib/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/lib/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/ui/docs/markdown.tsxView file

59) L60: const fn = new Function(...entries.map(([k]) => k), js) L61: const args = entries.map(([, v]) => v)

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/ui/docs/markdown.tsxView on unpkg · L59

bin/lib/db-migrate-runner.mjsView file

47const configPath = resolveDbConfigPath(projectRoot, requestedConfigPath).path L48: const mod = await import(pathToFileURL(path.resolve(configPath)).href) L49: const config = mod.default ?? mod

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/lib/db-migrate-runner.mjsView on unpkg · L47

bin/cli.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/cli.mjsView on unpkg

bin/lib/db.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/db.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/db.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 47f2452b53614a66 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/db.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 shingleOverlap = 37 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/lib/db.mjsView on unpkg

bin/lib/gen.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/gen.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/gen.mjsView on unpkg

bin/lib/init.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/init.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/init.mjsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 331-361json

331 "jsonwebtoken": "^9.0.2",

332 "kysely": "^0.27.0",

333 "node-cron": "^3.0.3",

334 "pg": "^8.13.0",

335 "pino": "^9.5.0",

336 "react": "^19.0.0",

337 "react-dom": "^19.0.0",

338 "react-hook-form": "^7.54.0",

339 "tsx": "^4.19.0",

340 "vite": "^6.0.0",

341 "vitest": "^2.1.0",

342 "zod": "^3.24.0"

343 },

344 "repository": {

345 "type": "git",

346 "url": "git+https://github.com/softize-dev/opus.git",

347 "directory": "packages/opus"

348 },

349 "homepage": "https://opus.softize.com.br",

350 "scripts": {

351 "postinstall": "node ./bin/lib/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L351

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L351

352 "copy:check": "node ./bin/cli.mjs copy --check",

353 "typecheck": "tsc --noEmit",

354 "test": "vitest run",

355 "test:watch": "vitest",

356 "test:cov": "vitest run --coverage",

357 "registry:up": "npx -y verdaccio --config ~/.config/verdaccio/config.yaml",

358 "release": "bash ./scripts/release.sh",

359 "release:local": "bash ./scripts/release.sh --local"

360 }

361}

src/ui/docs/markdown.tsxView file

Lines 39-79tsx

39 scope,

40 previewClassName,

41}: {

42 code: string

43 scope: Record<string, unknown>

44 previewClassName?: string

45}): React.ReactElement {

46 const result = React.useMemo

bin/lib/db-migrate-runner.mjsView file

Lines 27-67javascript

27 process.stdout.write(`\n${JSON.stringify(obj)}\n`)

28}

29

30function collectEntities(domain, out

bin/cli.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/cli.mjsView on unpkg

bin/lib/db.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/db.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/db.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 47f2452b53614a66 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/db.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 shingleOverlap = 37 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/lib/db.mjsView on unpkg

bin/lib/gen.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/gen.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/gen.mjsView on unpkg

bin/lib/init.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@12.2.0 matchedPath = bin/lib/init.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:12.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/init.mjsView on unpkg