@softize/opus@9.0.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@softize/opus@9.0.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/lib/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/lib/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/ui/docs/markdown.tsxView file

59) L60: const fn = new Function(...entries.map(([k]) => k), js) L61: const args = entries.map(([, v]) => v)

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/ui/docs/markdown.tsxView on unpkg · L59

bin/lib/db-migrate-runner.mjsView file

44L45: const mod = await import(pathToFileURL(path.resolve(configPath)).href) L46: const config = mod.default ?? mod

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/lib/db-migrate-runner.mjsView on unpkg · L44

bin/lib/init.mjsView file

1Install-time code directly mutates a foreign AI-agent control surface: L238: } else if (!twConfig) { L239: await fs.writeFile( L240: path.join(projectDir, "tailwind.config.js"), ... L318: if (!(await exists(markerPath)) || (await fs.readFile(markerPath, "utf8")) !== marker) { L319: await fs.writeFile(markerPath, marker); L320: (prev === null ? created : synced).push(MARKER); ... L323: // Remove somente o bloco legado que o próprio setup antigo declarava como gerenciado. L324: const claudePath = path.join(projectDir, "CLAUDE.md"); L325: if (await exists(claudePath)) { ... L328: if (next !== cur) { L329: await fs.writeFile(claudePath, next); L330: synced.push("CLAUDE.md (bloco legado removido)"); Write operation from bin/lib/init.mjs: L238: } else if (!twConfig) { L239: await fs.writeFile( L

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/lib/init.mjsView on unpkg · L1

bin/cli.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/cli.mjsView on unpkg

bin/lib/db.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@8.9.1 matchedPath = bin/lib/db.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:8.9.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/db.mjsView on unpkg

bin/lib/gen.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@8.9.1 matchedPath = bin/lib/gen.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:8.9.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/gen.mjsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 312-341json

312 "jsonwebtoken": "^9.0.2",

313 "kysely": "^0.27.0",

314 "node-cron": "^3.0.3",

315 "pg": "^8.13.0",

316 "pino": "^9.5.0",

317 "react": "^19.0.0",

318 "react-dom": "^19.0.0",

319 "react-hook-form": "^7.54.0",

320 "tsx": "^4.19.0",

321 "vite": "^6.0.0",

322 "vitest": "^2.1.0",

323 "zod": "^3.24.0"

324 },

325 "repository": {

326 "type": "git",

327 "url": "git+https://github.com/softize-dev/opus.git",

328 "directory": "packages/opus"

329 },

330 "homepage": "https://opus.softize.com.br",

331 "scripts": {

332 "postinstall": "node ./bin/lib/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L332

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L332

333 "typecheck": "tsc --noEmit",

334 "test": "vitest run",

335 "test:watch": "vitest",

336 "test:cov": "vitest run --coverage",

337 "registry:up": "npx -y verdaccio --config ~/.config/verdaccio/config.yaml",

338 "release": "bash ./scripts/release.sh",

339 "release:local": "bash ./scripts/release.sh --local"

340 }

341}

src/ui/docs/markdown.tsxView file

Lines 39-79tsx

39 scope,

40 previewClassName,

41}: {

42 code: string

43 scope: Record<string, unknown>

44 previewClassName?: string

45}): React.ReactElement {

46 const result = React.useMemo

bin/lib/db-migrate-runner.mjsView file

Lines 24-64javascript

24

25function emit(obj) {

26 process.stdout.write(`\n${JSON.stringify(obj)}\n`)

27}

28

bin/lib/init.mjsView file

Lines 1-21javascript

1/** opus setup: aplica o marcador per-app e os artefatos Opus rastreáveis no repo. */

2

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/lib/init.mjsView on unpkg · L1

3import { promises as fs } from "node:fs";

4import path from "node:path";

5

bin/cli.mjsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 13

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/cli.mjsView on unpkg

bin/lib/db.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@8.9.1 matchedPath = bin/lib/db.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:8.9.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/db.mjsView on unpkg

bin/lib/gen.mjsView file

•matchType = normalized_sha256 matchedPackage = @softize/opus@8.9.1 matchedPath = bin/lib/gen.mjs matchedIdentity = npm:QHNvZnRpemUvb3B1cw:8.9.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/gen.mjsView on unpkg