Loading npm security reports…

@su-record/vibe@3.2.61: AI-agent control-surface risk | LPM Firewall

registry / @su-record/vibe / 3.2.61

@su-record/vibe@3.2.61

AI Coding Framework for Claude Code — 7+ agents, 52 skills, multi-LLM orchestration

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically changes global AI-agent configuration and asset directories. It can remove existing Claude hooks and add package-controlled agent content across installed CLIs.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation, through the postinstall lifecycle hook.

Impact

The package changes broad agent control surfaces without an explicit user command, affecting future agent sessions.

Mechanism

Automatic mutation of global AI-agent configuration and extension files.

Policy narrative

On installation, package.json invokes the postinstall installer. The installer copies package hooks and AI-agent assets into global directories, updates global Claude, Codex, and Gemini control files, removes existing global Claude hooks, and writes settings defaults. These changes occur automatically rather than through an explicit setup command and can affect unrelated projects and future agent sessions.

Rationale

The postinstall lifecycle performs unconsented broad mutation of foreign AI-agent control surfaces. This meets the install-control-surface blocking policy despite no confirmed installer exfiltration.

Evidence

package.jsondist/cli/postinstall/main.jsdist/cli/postinstall/global-config.js~/.claude/settings.json~/.claude/agents~/.claude/skills~/.claude/CLAUDE.md~/.codex~/.vibe

Source & flagged code

26 flagged

package.jsonView file

Lines 19-59json

19 },

20 "bin": {

21 "vibe": "dist/cli/index.js"

22 },

23 "scripts": {

24 "build": "tsc -p tsconfig.build.json && chmod +x dist/cli/index.js",

25 "dev": "tsc --watch",

26 "gen:skill-docs": "tsx scripts/gen-skill-docs.ts",

27 "gen:skill-docs:check": "tsx scripts/gen-skill-docs.ts --check",

28 "sync:agent-models": "tsx scripts/sync-agent-models.ts",

29 "sync:agent-models:check": "tsx scripts/sync-agent-models.ts --check",

30 "validate:skill-invocation": "tsx scripts/validate-skill-invocation.ts",

31 "validate:counts": "tsx scripts/validate-counts.ts",

32 "lint": "oxlint",

33 "lint:ratchet": "tsx scripts/lint-ratchet.ts",

34 "verify:all": "pnpm lint && pnpm lint:ratchet && pnpm gen:skill-docs:check && pnpm sync:agent-models:check && pnpm validate:skill-invocation && pnpm validate:counts",

35 "test": "vitest run",

36 "test:watch": "vitest",

37 "test:coverage": "vitest run --coverage",

38 "prepublishOnly": "pnpm build",

39 "postinstall": "node -e \"import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(e=>process.stderr.write('\\u26a0\\ufe0f vibe postinstall skipped: '+((e&&e.message)||e)+'\\n Assets and hooks were not installed. Run: npx vibe upgrade\\n'))\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L39

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "release": "bash scripts/release.sh",

41 "sync:plugin-version": "npx tsx scripts/sync-plugin-version.ts",

42 "version": "npx tsx scripts/sync-plugin-version.ts && npm run build && npx tsx scripts/build-plugin.ts && git add .codex-plugin/plugin.json .claude-plugin/plugin.json plugins/",

43 "build:plugin": "npx tsx scripts/build-plugin.ts",

44 "gen:plugin-hooks": "npx tsx scripts/gen-plugin-hooks.ts",

45 "gen:plugin-hooks:check": "npx tsx scripts/gen-plugin-hooks.ts --check",

46 "validate:plugin-tree": "npx tsx scripts/build-plugin.ts && git diff --exit-code --stat HEAD -- plugins/",

47 "validate:mermaid": "npx tsx scripts/validate-mermaid.ts"

48 },

49 "keywords": [

50 "ai",

51 "core",

52 "coding",

53 "spec-driven",

54 "claude",

55 "agent",

56 "requirements",

57 "user-story",

58 "ultrawork",

59 "parallel-agents",

dist/infra/lib/TaskContext.jsView file

Lines 6-46javascript

6// ============================================================================

7// TaskContext (static registry)

8// ============================================================================

9export class TaskContext {

10 static registry = new Map();

dist/infra/lib/PythonParser.jsView file

Lines 1-28javascript

1// Python code parser utility for v1.3

2// Uses Python's ast module via child_process

3import { exec } from 'child_process';

4import { promisify } from 'util';

5import { writeFile, unlink } from 'fs/promises';

dist/tools/convention/applyQualityRules.jsView file

Lines 1-41javascript

1// Convention management tool - completely independent

2// Code Quality Standards

3const QUALITY_RULES = {

4 NAMING: {

5 variables: 'nouns (userList, userData)',

6 functions: 'verb+noun (fetchData, updateUser)',

7 events: 'handle prefix (handleClick, handleSubmit)'

dist/infra/lib/MemoryManager.jsView file

Lines 13-53javascript

13 storage;

14 graph;

15 memorySearch;

16 observations;

17 sessionRAG;

18 ragRetriever;

19 reflections;

20 // Map of projectPath -> MemoryManager instance (for project-based memory)

21 static instances = new Map

dist/cli/commands/codex-proxy.jsView file

Lines 14-54javascript

14 'codex-cli': 'Codex CLI (ChatGPT Pro)',

15 'apikey': 'API Key',

16 'env': 'CODEX_PROXY_API_KEY',

17};

18// ─── 실행 ────────────────────────────────────────────────────

19export function

dist/infra/lib/codex-proxy.jsView file

Lines 892-932javascript

892 // Sonnet → codex 코딩 모델 (spark 제외, 정확도 우선)

893 const codexModel = models.find(m => m.includes('codex') && !m.includes('mini'

hooks/scripts/llm-orchestrate.jsView file

33Source sends the broad process environment to a literal external destination. L33: import crypto from 'crypto'; L34: import { execSync, spawn } from 'child_process'; L35: ... L46: // 낮춰 부모 dispatcher timeout 안에 단일 시도로 끝낸다. (B-2: hard-kill/무음실패 방지) L47: const MAX_RETRIES = Number(process.env.VIBE_LLM_MAX_RETRIES) || 3; L48: // WHY 2000ms initial delay: LLM rate-limit windows are typically 1-5s; ... L215: function spawnCli(cmd, args, options) { L216: // Windows: .cmd shim은 spawn 직접 실행 불가 → cmd.exe /c 로 실행 L217: if (IS_WINDOWS) { ... L251: }); L252: proc.stdin.end(fullPrompt); L253:

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

hooks/scripts/llm-orchestrate.jsView on unpkg · L33

dist/cli/commands/plugin.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'fs'; import os from 'os'; import path from 'path'; import { log } from '../utils.js'; import { getcoreconfigdir } from '../setup/globalinstaller.js'; import { convertagenttoclaude } from '../postinstall/claude-agents.js'; const plugin_entries = [ '.codex-plugin', '.claude-plugin', 'dist', 'vibe', 'languages', 'agents', 'skills', 'hooks', 'claude.md', 'readme.md', 'license', ]; const skip = new set(['node_modules', '__tests__']); function plugintreedir(

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli/commands/plugin.jsView on unpkg

dist/cli/commands/telegram.jsView file

101try { L102: child_process.execSync('npm install playwright', { L103: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/telegram.jsView on unpkg · L101

vibe/setup.shView file

•path = vibe/setup.sh kind = build_helper sizeBytes = 837 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vibe/setup.shView on unpkg

dist/tools/spec/traceabilityMatrix.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tools/spec/traceabilityMatrix.js#virtual:normalized:round1View on unpkg

dist/cli/utils/cli-detector.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/cli/utils/cli-detector.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/utils/cli-detector.jsView on unpkg

hooks/scripts/auto-format.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = hooks/scripts/auto-format.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/auto-format.jsView on unpkg

dist/cli/commands/init.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/cli/commands/init.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/init.jsView on unpkg

dist/cli/commands/update.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/cli/commands/update.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/update.jsView on unpkg

dist/cli/commands/upgrade.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/cli/commands/upgrade.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/upgrade.jsView on unpkg

dist/cli/llm/gpt-commands.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/cli/llm/gpt-commands.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/llm/gpt-commands.jsView on unpkg

dist/cli/setup/LanguageDetector.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/cli/setup/LanguageDetector.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/setup/LanguageDetector.jsView on unpkg

hooks/scripts/codex-detect.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = hooks/scripts/codex-detect.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/codex-detect.jsView on unpkg

hooks/scripts/codex-review-gate.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = hooks/scripts/codex-review-gate.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/codex-review-gate.jsView on unpkg

hooks/scripts/context-save.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = hooks/scripts/context-save.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/context-save.jsView on unpkg

hooks/scripts/figma-extract.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = hooks/scripts/figma-extract.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/figma-extract.jsView on unpkg

Source & flagged code

26 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(e=>process.stderr.write('\u26a0\ufe0f vibe postinstall skipped: '+((e&&e.message)||e)+'\n Assets and ho...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/infra/lib/TaskContext.jsView file

26} L27: static fork(parentContext, forkOpts) { L28: const data = {

High

Child Process

Package source references child process execution.

dist/infra/lib/TaskContext.jsView on unpkg · L26

dist/infra/lib/PythonParser.jsView file

8import os from 'os'; L9: const execAsync = promisify(exec); L10: // Determine Python command based on platform

High

Shell

Package source references shell execution.

dist/infra/lib/PythonParser.jsView on unpkg · L8

dist/tools/convention/applyQualityRules.jsView file

21react: ['dangerouslySetInnerHTML', 'props drilling (3+ levels)'], L22: javascript: ['var usage', '== instead of ===', 'eval() usage'], L23: css: ['!important abuse', 'inline style abuse']

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/tools/convention/applyQualityRules.jsView on unpkg · L21

dist/infra/lib/MemoryManager.jsView file

33try { L34: const fs = require('fs'); L35: if (fs.existsSync(cwdClaudePath)) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/infra/lib/MemoryManager.jsView on unpkg · L33

dist/cli/commands/codex-proxy.jsView file

34Trigger-reachable persistence chain: manifest.main -> dist/cli/index.js -> dist/cli/commands/codex-proxy.js L34: log(` 인증: ${auth ? AUTH_LABELS[auth.source] || auth.source : '미설정'}`); L35: log(` Target: ${settings.targetUrl || 'https://api.openai.com'}`); L36: log(` 명령어: ${settings.alias || 'vibe codex'}\n`); ... L76: // 2. 환경변수 L77: if (process.env.OPENAI_API_KEY) { L78: return { provider: 'openai', label: 'OpenAI (OPENAI_API_KEY)', key: process.env.OPENAI_API_KEY }; ... L143: function readCodexModelsCache() { L144: const codexHome = process.env.CODEX_HOME || path.join(os.homedir(), '.codex'); L145: const cachePath = path.join(codexHome, 'models_cache.json'); L146: try { L147: const data = JSON.parse(fs.readFileSync(cachePath, 'utf-8')); L148: return (data.models || []).map(m =

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/cli/commands/codex-proxy.jsView on unpkg · L34

34log(` 인증: ${auth ? AUTH_LABELS[auth.source] || auth.source : '미설정'}`); L35: log(` Target: ${settings.targetUrl || 'https://api.openai.com'}`); L36: log(` 명령어: ${settings.alias || 'vibe codex'}\n`); ... L76: // 2. 환경변수 L77: if (process.env.OPENAI_API_KEY) { L78: return { provider: 'openai', label: 'OpenAI (OPENAI_API_KEY)', key: process.env.OPENAI_API_KEY }; ... L143: function readCodexModelsCache() { L144: const codexHome = process.env.CODEX_HOME || path.join(os.homedir(), '.codex'); L145: const cachePath = path.join(codexHome, 'models_cache.json'); L146: try { L147: const data = JSON.parse(fs.readFileSync(cachePath, 'utf-8')); L148: return (data.models || []).map(m => m.slug).filter(Boolean);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/commands/codex-proxy.jsView on unpkg · L34

dist/infra/lib/codex-proxy.jsView file

912const settings = getProxySettings(); L913: const defaultModel = model || process.env.CODEX_PROXY_MODEL || resolveDefaultModel(settings.model); L914: const modelSlots = resolveModelSlots(defaultModel); ... L921: console.log(`Codex Proxy :${port} | ${authLabel} | opus=${modelSlots.opus} sonnet=${modelSlots.sonnet} haiku=${modelSlots.haiku}`); L922: const child = spawn('claude', ['--dangerously-sk[redacted]', ...claudeArgs], { L923: stdio: 'inherit', ... L925: ...process.env, L926: ANTHROPIC_BASE_URL: `http://localhost:${port}`, L927: ANTHROPIC_AUTH_TOKEN: 'codex-proxy',

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/infra/lib/codex-proxy.jsView on unpkg · L912

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.60 matchedPath = dist/infra/lib/codex-proxy.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.60 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/infra/lib/codex-proxy.jsView on unpkg

hooks/scripts/llm-orchestrate.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

hooks/scripts/llm-orchestrate.jsView on unpkg · L33

dist/cli/commands/plugin.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli/commands/plugin.jsView on unpkg

dist/cli/commands/telegram.jsView file

101try { L102: child_process.execSync('npm install playwright', { L103: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/telegram.jsView on unpkg · L101

vibe/setup.shView file

•path = vibe/setup.sh kind = build_helper sizeBytes = 837 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vibe/setup.shView on unpkg

dist/tools/spec/traceabilityMatrix.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tools/spec/traceabilityMatrix.js#virtual:normalized:round1View on unpkg

dist/cli/utils/cli-detector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/utils/cli-detector.jsView on unpkg

hooks/scripts/auto-format.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/auto-format.jsView on unpkg

dist/cli/commands/init.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/init.jsView on unpkg

dist/cli/commands/update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/update.jsView on unpkg

dist/cli/commands/upgrade.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/upgrade.jsView on unpkg

dist/cli/llm/gpt-commands.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/llm/gpt-commands.jsView on unpkg

dist/cli/setup/LanguageDetector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/setup/LanguageDetector.jsView on unpkg

hooks/scripts/codex-detect.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/codex-detect.jsView on unpkg

hooks/scripts/codex-review-gate.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/codex-review-gate.jsView on unpkg

hooks/scripts/context-save.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/context-save.jsView on unpkg

hooks/scripts/figma-extract.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/figma-extract.jsView on unpkg

Source & flagged code

26 flagged

package.jsonView file

Lines 19-59json

19 },

20 "bin": {

21 "vibe": "dist/cli/index.js"

22 },

23 "scripts": {

24 "build": "tsc -p tsconfig.build.json && chmod +x dist/cli/index.js",

25 "dev": "tsc --watch",

26 "gen:skill-docs": "tsx scripts/gen-skill-docs.ts",

27 "gen:skill-docs:check": "tsx scripts/gen-skill-docs.ts --check",

28 "sync:agent-models": "tsx scripts/sync-agent-models.ts",

29 "sync:agent-models:check": "tsx scripts/sync-agent-models.ts --check",

30 "validate:skill-invocation": "tsx scripts/validate-skill-invocation.ts",

31 "validate:counts": "tsx scripts/validate-counts.ts",

32 "lint": "oxlint",

33 "lint:ratchet": "tsx scripts/lint-ratchet.ts",

34 "verify:all": "pnpm lint && pnpm lint:ratchet && pnpm gen:skill-docs:check && pnpm sync:agent-models:check && pnpm validate:skill-invocation && pnpm validate:counts",

35 "test": "vitest run",

36 "test:watch": "vitest",

37 "test:coverage": "vitest run --coverage",

38 "prepublishOnly": "pnpm build",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L39

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "release": "bash scripts/release.sh",

41 "sync:plugin-version": "npx tsx scripts/sync-plugin-version.ts",

42 "version": "npx tsx scripts/sync-plugin-version.ts && npm run build && npx tsx scripts/build-plugin.ts && git add .codex-plugin/plugin.json .claude-plugin/plugin.json plugins/",

43 "build:plugin": "npx tsx scripts/build-plugin.ts",

44 "gen:plugin-hooks": "npx tsx scripts/gen-plugin-hooks.ts",

45 "gen:plugin-hooks:check": "npx tsx scripts/gen-plugin-hooks.ts --check",

46 "validate:plugin-tree": "npx tsx scripts/build-plugin.ts && git diff --exit-code --stat HEAD -- plugins/",

47 "validate:mermaid": "npx tsx scripts/validate-mermaid.ts"

48 },

49 "keywords": [

50 "ai",

51 "core",

52 "coding",

53 "spec-driven",

54 "claude",

55 "agent",

56 "requirements",

57 "user-story",

58 "ultrawork",

59 "parallel-agents",

dist/infra/lib/TaskContext.jsView file

Lines 6-46javascript

6// ============================================================================

7// TaskContext (static registry)

8// ============================================================================

9export class TaskContext {

10 static registry = new Map();

dist/infra/lib/PythonParser.jsView file

Lines 1-28javascript

1// Python code parser utility for v1.3

2// Uses Python's ast module via child_process

3import { exec } from 'child_process';

4import { promisify } from 'util';

5import { writeFile, unlink } from 'fs/promises';

dist/tools/convention/applyQualityRules.jsView file

Lines 1-41javascript

1// Convention management tool - completely independent

2// Code Quality Standards

3const QUALITY_RULES = {

4 NAMING: {

5 variables: 'nouns (userList, userData)',

6 functions: 'verb+noun (fetchData, updateUser)',

7 events: 'handle prefix (handleClick, handleSubmit)'

dist/infra/lib/MemoryManager.jsView file

Lines 13-53javascript

13 storage;

14 graph;

15 memorySearch;

16 observations;

17 sessionRAG;

18 ragRetriever;

19 reflections;

20 // Map of projectPath -> MemoryManager instance (for project-based memory)

21 static instances = new Map

dist/cli/commands/codex-proxy.jsView file

Lines 14-54javascript

14 'codex-cli': 'Codex CLI (ChatGPT Pro)',

15 'apikey': 'API Key',

16 'env': 'CODEX_PROXY_API_KEY',

17};

18// ─── 실행 ────────────────────────────────────────────────────

19export function

dist/infra/lib/codex-proxy.jsView file

Lines 892-932javascript

892 // Sonnet → codex 코딩 모델 (spark 제외, 정확도 우선)

893 const codexModel = models.find(m => m.includes('codex') && !m.includes('mini'

hooks/scripts/llm-orchestrate.jsView file

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

hooks/scripts/llm-orchestrate.jsView on unpkg · L33

dist/cli/commands/plugin.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli/commands/plugin.jsView on unpkg

dist/cli/commands/telegram.jsView file

101try { L102: child_process.execSync('npm install playwright', { L103: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/telegram.jsView on unpkg · L101

vibe/setup.shView file

•path = vibe/setup.sh kind = build_helper sizeBytes = 837 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vibe/setup.shView on unpkg

dist/tools/spec/traceabilityMatrix.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tools/spec/traceabilityMatrix.js#virtual:normalized:round1View on unpkg

dist/cli/utils/cli-detector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/utils/cli-detector.jsView on unpkg

hooks/scripts/auto-format.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/auto-format.jsView on unpkg

dist/cli/commands/init.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/init.jsView on unpkg

dist/cli/commands/update.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/update.jsView on unpkg

dist/cli/commands/upgrade.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/commands/upgrade.jsView on unpkg

dist/cli/llm/gpt-commands.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/llm/gpt-commands.jsView on unpkg

dist/cli/setup/LanguageDetector.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/setup/LanguageDetector.jsView on unpkg

hooks/scripts/codex-detect.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/codex-detect.jsView on unpkg

hooks/scripts/codex-review-gate.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/codex-review-gate.jsView on unpkg

hooks/scripts/context-save.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/context-save.jsView on unpkg

hooks/scripts/figma-extract.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/figma-extract.jsView on unpkg

@su-record/vibe@3.2.61

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code