registry  /  @star-setup/star-setup  /  0.4.7

@star-setup/star-setup@0.4.7

Lightweight CLI to clone, configure, and wire single or multi-repo ecosystems

AI Security Review

scanned 10h ago · by lpm-firewall-ai

The package is a binary installer wrapper. Install-time code downloads an opaque platform-specific release artifact and extracts it into the package directory without integrity verification, creating supply-chain risk but no confirmed malicious behavior in the JavaScript source.

Static reason
One or more suspicious static signals were detected.
Trigger
npm install postinstall; star-setup CLI invocation
Impact
Opaque downloaded binary may execute later as the star-setup CLI; source package itself shows no exfiltration or control-surface hijack.
Mechanism
platform binary download and extraction wrapper
Attack narrative
On install, package.json runs install.js, which resolves the current OS/architecture in binary.js and builds a GitHub release URL. binary-install.js downloads that archive, removes/recreates node_modules/.bin_real, extracts the archive there, and run-star-setup.js later spawns the installed binary with user arguments. The reviewed JavaScript does not harvest secrets, contact unrelated endpoints, or mutate AI-agent/user control surfaces.
Rationale
Static source inspection supports a warning because install-time delivery of an opaque native artifact without checksum verification is risky. The behavior is package-aligned and lacks concrete malicious source evidence, so it should not be publish-blocked.
Evidence
package.jsoninstall.jsbinary.jsbinary-install.jsrun-star-setup.jsnode_modules/.bin_realtemporary archive under os.tmpdir()
Network endpoints1
github.com/star-setup/core/releases/download/v0.4.7

Decision evidence

public snapshot
AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • package.json defines postinstall: node ./install.js
  • install.js calls install(false) during npm lifecycle
  • binary-install.js downloads a platform archive with axios and extracts it via tar/unzip/powershell
  • No checksum/signature verification found for downloaded GitHub release artifact
Evidence against
  • Download URL is package-aligned: github.com/star-setup/core release v0.4.7
  • run-star-setup.js only invokes the installed star-setup binary on explicit CLI use
  • No source evidence of credential/env harvesting, AI-agent control-surface writes, persistence, or exfiltration
  • Writes are scoped to package installDirectory node_modules/.bin_real and temporary archive extraction
Behavioral surface
Source
ChildProcessFilesystemNetwork
Supply chain
UrlStrings
Manifest
NoLicense
scanned 4 file(s), 10.0 KB of source, external domains: example.com

Source & flagged code

2 flagged · loading source
package.jsonView file
•scripts.postinstall = node ./install.js
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = node ./install.js
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High2 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License