Loading npm security reports…

@tera-system/core@0.2.11: AI-agent control-surface risk | LPM Firewall

registry / @tera-system/core / 0.2.11

@tera-system/core@0.2.11

Tera System OpenCode Plugin أ¢â‚¬â€‌ governance core, 20 agents, 11 commands, distribution tools (personal edition)

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. A postinstall hook modifies the consumer workspace and creates an enabled OpenCode control surface. It installs agent instructions and commands, and writes a configuration that runs external MCP packages through npx.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Installing the npm package.

Impact

An install can alter an AI agent's available instructions, commands, and executable tool channels without an explicit setup command.

Mechanism

Automatic consumer-project mutation and enabled MCP command injection.

Policy narrative

npm invokes scripts/install.js during postinstall. The script resolves the consumer project from INIT_CWD, copies package-provided agents and commands into .opencode, and creates .opencode/opencode.json when absent. That configuration enables MCP entries whose commands use npx, creating executable external tool channels in the consumer's AI-agent environment. Although the installer avoids replacing a differing existing configuration, the automatic creation and broad control-surface mutation occur without an explicit user setup action.

Rationale

This is an unconsented postinstall mutation of a consumer AI-agent control surface, with enabled npx-backed tool commands. It meets the install-control-surface block policy despite the absence of observed secret theft.

Evidence

package.jsonscripts/install.jsopencode.tera.example.json.opencode/agents.opencode/commands.opencode/opencode.json.opencode/opencode.tera.example.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

10* - Never overwrites a file it does not own. L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`. L12: * - Only updates files it owns, always keeping a backup first. L13: * - Idempotent: re-running is safe; identical files are skipped. L14: * - Never touches an existing user `opencode.json`. L15: * ... L65: function copyFile(src, dest) { L66: fs.mkdirSync(path.dirname(dest), { recursive: true }); L67: fs.copyFileSync(src, dest); L68: } ... L70: function loadOwnership(target) { L71: const p = path.join(target, ".opencode", MANIFEST_NAME);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L10

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

•matchType = normalized_sha256 matchedPackage = @tera-system/core@0.2.6 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 9-43json

9 },

10 "files": [

11 "agents",

12 "commands",

13 "core",

14 "assets",

15 "tools",

16 "scripts",

17 "MANIFEST.json",

18 "opencode.tera.example.json",

19 "WELCOME.md",

20 "README.md",

21 "LICENSE.md",

22 "RELEASES.md"

23 ],

24 "bin": {

25 "tera-restore": "scripts/install.js",

26 "tera-core-restore": "scripts/install.js"

27 },

28 "scripts": {

29 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 },

31 "keywords": [

32 "opencode",

33 "plugin",

34 "tera",

35 "governance",

36 "agents",

37 "component"

38 ],

39 "publishConfig": {

40 "access": "public"

41 }

42}

43

scripts/install.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * @tera/core installer

4 * --------------------------------------------------------------

5 * NON-DESTRUCTIVE + OWNERSHIP-AWARE installer for the Tera System

6 * OpenCode Plugin component.

7 *

8 * Rules:

9 * - Never deletes anything.

10 * - Never overwrites a file it does not own.

11 * - Tracks ownership via `.opencode/tera-core.manifest.json`.

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

•matchType = normalized_sha256 matchedPackage = @tera-system/core@0.2.6 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg