Loading npm security reports…

@tera-system/core@0.2.6: Malicious npm security report (Block) | LPM Firewall

registry / @tera-system/core / 0.2.6

@tera-system/core@0.2.6

Tera System OpenCode Plugin أ¢â‚¬â€‌ governance core, 20 agents, 11 commands, distribution tools (personal edition)

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Installing the package automatically mutates the consumer workspace's OpenCode control surface. It drops agents, commands, a configuration file, and enabled MCP command definitions without an explicit setup command.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation runs postinstall in the consumer project.

Impact

A package installation can alter an AI agent's available instructions and local tool execution configuration in the consumer workspace.

Mechanism

Automatic installation-time creation of OpenCode configuration and agent extension files.

Attack narrative

The postinstall hook resolves the consumer workspace from INIT_CWD and writes package content into .opencode/agents and .opencode/commands. On a first install it also creates .opencode/opencode.json, whose configuration enables MCP commands launched with npx. This is an unconsented install-time mutation of a foreign AI-agent control surface, so it can change the agent capabilities and instructions available in the consumer project.

Rationale

Direct source inspection confirms an automatic postinstall hook that writes a broad OpenCode agent control surface into the consuming project. This meets the install-hook abuse blocking policy even though the inspected installer shows no direct exfiltration.

Evidence

package.jsonscripts/install.jsopencode.tera.example.json.opencode/agents/.opencode/commands/.opencode/opencode.json.opencode/tera-core.manifest.json

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

10* - Never overwrites a file it does not own. L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`. L12: * - Only updates files it owns, always keeping a backup first. L13: * - Idempotent: re-running is safe; identical files are skipped. L14: * - Never touches an existing user `opencode.json`. L15: * ... L65: function copyFile(src, dest) { L66: fs.mkdirSync(path.dirname(dest), { recursive: true }); L67: fs.copyFileSync(src, dest); L68: } ... L70: function loadOwnership(target) { L71: const p = path.join(target, ".opencode", MANIFEST_NAME);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L10

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

•matchType = normalized_sha256 matchedPackage = @tera-system/core@0.2.5 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fe8a0294685fdce5 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @tera-system/core@0.2.5 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.5 similarity = 1.000 shingleOverlap = 7 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/build.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @tera-system/core@0.1.5 matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.1.5 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/build.mjsView on unpkg

Source & flagged code

10 flagged

package.jsonView file

Lines 9-44json

9 },

10 "files": [

11 "agents",

12 "commands",

13 "core",

14 "assets",

15 "tools",

16 "scripts",

17 "MANIFEST.json",

18 "opencode.tera.example.json",

19 "WELCOME.md",

20 "README.md",

21 "LICENSE.md",

22 "RELEASES.md"

23 ],

24 "bin": {

25 "tera-restore": "scripts/install.js",

26 "tera-core-restore": "scripts/install.js"

27 },

28 "scripts": {

29 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 },

31 "keywords": [

32 "opencode",

33 "plugin",

34 "tera",

35 "governance",

36 "agents",

37 "component"

38 ],

39 "publishConfig": {

40 "access": "public"

41 }

42}

43

44

scripts/install.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * @tera/core installer

4 * --------------------------------------------------------------

5 * NON-DESTRUCTIVE + OWNERSHIP-AWARE installer for the Tera System

6 * OpenCode Plugin component.

7 *

8 * Rules:

9 * - Never deletes anything.

10 * - Never overwrites a file it does not own.

11 * - Tracks ownership via `.opencode/tera-core.manifest.json`.

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

•matchType = normalized_sha256 matchedPackage = @tera-system/core@0.2.5 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fe8a0294685fdce5 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @tera-system/core@0.2.5 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.5 similarity = 1.000 shingleOverlap = 7 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/build.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @tera-system/core@0.1.5 matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.1.5 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/build.mjsView on unpkg