@spuentesp/lain-mcp@0.5.0

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

npm installation on a non-CI host with any supported agent configuration directory

The downloaded binary can alter foreign AI-agent/MCP configuration without an explicit user command.

remote binary download followed by automatic multi-agent `init --agent auto -y`

Installing the package runs its postinstall hook. The hook fetches a native executable from GitHub without a checksum or signature, creates a launcher, detects several unrelated AI-agent configuration roots, and automatically runs the downloaded executable with `init --agent auto -y`. This can modify a user's existing agent control surfaces during dependency installation without a user-issued setup command.

The lifecycle hook performs an unconsented postinstall mutation path across foreign AI-agent control surfaces, delegated to an unverified downloaded executable. That meets the firewall block boundary regardless of the package-aligned release host.