registry / @tera-system/core / 0.2.9

@tera-system/core@0.2.9

INTERNAL (personal edition) - not a licensed product. Commercial clients must use @tera-system/pro. This package requires authorization and will be restricted.

Tera System OpenCode Plugin أ¢â‚¬â€‌ governance core, 20 agents, 11 commands, distribution tools (personal edition)

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Source inspection confirms automatic consumer-project mutation of an AI-agent control surface, but not a concrete malicious payload or exfiltration path. This warrants a warning rather than a publication block.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation runs postinstall.

Impact

A new OpenCode project can receive enabled MCP command definitions and a large agent control surface without an explicit setup command.

Mechanism

Copies package-owned agent, command, configuration, tool, and asset files into the consuming project.

AI rationale

Evidence

package.jsonscripts/install.jsopencode.tera.example.jsonscripts/lib/license.mjs.opencode/agents/**.opencode/commands/**.opencode/opencode.json.opencode/opencode.tera.example.json.opencode/tera-core.manifest.jsontera-system/**tools/**assets/**project-control/**.tera/license.state.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

An automatic postinstall invokes the installer.
The installer targets the consuming project through INIT_CWD.
It installs agent and command files into the consumer's .opencode directory.
It creates an OpenCode configuration that enables local npx MCP commands.
The installer also copies package tools, system files, and assets into the consumer project.

Evidence against

The installer preserves conflicting unowned files and backs up files it owns.
No network, shell execution, eval, or dynamic code loading appears in the automatic installer.
The manifest has no runtime dependency, including no self-dependency.
The PowerShell update and scheduling features require explicit user invocation and parameters.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 14 file(s), 35.6 KB of source, external domains: www.w3.org

Source & flagged code

10 flagged

package.jsonView file

Lines 9-43json

9 },

10 "files": [

11 "agents",

12 "commands",

13 "core",

14 "assets",

15 "tools",

16 "scripts",

17 "MANIFEST.json",

18 "opencode.tera.example.json",

19 "WELCOME.md",

20 "README.md",

21 "LICENSE.md",

22 "RELEASES.md"

23 ],

24 "bin": {

25 "tera-restore": "scripts/install.js",

26 "tera-core-restore": "scripts/install.js"

27 },

28 "scripts": {

29 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 },

31 "keywords": [

32 "opencode",

33 "plugin",

34 "tera",

35 "governance",

36 "agents",

37 "component"

38 ],

39 "publishConfig": {

40 "access": "public"

41 }

42}

scripts/install.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * @tera/core installer

4 * --------------------------------------------------------------

5 * NON-DESTRUCTIVE + OWNERSHIP-AWARE installer for the Tera System

6 * OpenCode Plugin component.

7 *

8 * Rules:

9 * - Never deletes anything.

10 * - Never overwrites a file it does not own.

11 * - Tracks ownership via `.opencode/tera-core.manifest.json`.

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

•matchType = normalized_sha256 matchedPackage = @tera-system/core@0.2.6 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = fe8a0294685fdce5 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @tera-system/core@0.2.6 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.6 similarity = 1.000 shingleOverlap = 7 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/build.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @tera-system/core@0.1.5 matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.1.5 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/build.mjsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

10* - Never overwrites a file it does not own. L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`. L12: * - Only updates files it owns, always keeping a backup first. L13: * - Idempotent: re-running is safe; identical files are skipped. L14: * - Never touches an existing user `opencode.json`. L15: * ... L65: function copyFile(src, dest) { L66: fs.mkdirSync(path.dirname(dest), { recursive: true }); L67: fs.copyFileSync(src, dest); L68: } ... L70: function loadOwnership(target) { L71: const p = path.join(target, ".opencode", MANIFEST_NAME);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L10

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/build.mjsView on unpkg

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/build.mjsView on unpkg

Findings

1 Critical5 High5 Medium6 Low

CriticalAi Agent Control Hijackscripts/install.js

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blobassets/project-control/TeraPricingCalculator.xlsx

HighKnown Malware Source Similarityscripts/build.mjs

HighKnown Malware Source Fingerprint Signaturescripts/build.mjs

HighPrevious Version Dangerous Deltascripts/build.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helpertools/tera-fetch.ps1

MediumShips Compressed Blobassets/project-control/TeraPricingCalculator.xlsx

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionassets/project-control/TeraPricingCalculator.xlsx

LowNo License

Affected versions and remediation

This report applies to @tera-system/core@0.2.9.

See all versions of @tera-system/core for other recorded verdicts.

Review the evidence and your use of @tera-system/core@0.2.9 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-29 21:53:46.393Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @tera-system

Related packages

More from @tera-system

Source & flagged code