@the-brotherhood-of-scu/scu-cli: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@the-brotherhood-of-scu/scu-cli: Suspicious npm security report | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/scu.jsView file

•matchType = malicious_source_fingerprint_signature signature = 5848f30b9a8b895d signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @the-brotherhood-of-scu/scu-cli@0.5.1 matchedPath = bin/scu.js matchedIdentity = npm:[redacted]:0.5.1 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/scu.jsView on unpkg

4L5: const fs = require('fs'); L6: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/scu.jsView on unpkg · L4

install.jsView file

4* 1. 按当前平台/架构从 GitHub Release 下载 scu 预编译二进制（SHA256 校验） L5: * 2. 把 Claude Code Skill 安装到 ~/.claude/skills/scu-cli/（SCU_CLI_NO_SKILL=1 跳过） L6: * ... L62: if (!fs.existsSync(src)) return; L63: const dir = path.join(os.homedir(), '.claude', 'skills', 'scu-cli'); L64: fs.mkdirSync(dir, { recursive: true }); L65: fs.copyFileSync(src, path.join(dir, 'SKILL.md')); L66: info(`Claude Skill 已安装到 ${dir}`); ... L104: L105: fs.mkdirSync(binDir, { recursive: true }); L106: fs.writeFileSync(dest, buf); L107: fs.chmodSync(dest, 0o755);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install.jsView on unpkg · L4

•matchType = normalized_sha256 matchedPackage = @the-brotherhood-of-scu/scu-cli@0.5.1 matchedPath = install.js matchedIdentity = npm:[redacted]:0.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

install.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@the-brotherhood-of-scu/scu-cli",

3 "version": "0.6.0",

4 "description": "四川大学校园服务命令行工具（教务/微服务/缴费/体测/第二课堂），面向 AI 代理与脚本设计",

5 "bin": {

6 "scu": "bin/scu.js"

7 },

8 "scripts": {

9 "postinstall": "node install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 },

11 "files": [

12 "bin/scu.js",

13 "install.js",

14 "skill/scu-cli",

15 "README.md",

16 "CHANGELOG.md",

17 "LICENSE"

18 ],

19 "engines": {

20 "node": ">=18"

21 },

22 "license": "AGPL-3.0-only",

23 "repository": {

24 "type": "git",

25 "url": "git+https://github.com/The-Brotherhood-of-SCU/SCU-CLI.git"

26 },

27 "homepage": "https://github.com/The-Brotherhood-of-SCU/SCU-CLI",

28 "bugs": "https://github.com/The-Brotherhood-of-SCU/SCU-CLI/issues",

29 "keywords": [

bin/scu.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// scu 的 npm shim：转发到 postinstall 下载的平台二进制，原样透传参数、stdio 与退出码。

3'use strict';

4

5const fs = require('fs');

6const path = require

install.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2/**

3 * npm postinstall：

4 * 1. 按当前平台/架构从 GitHub Release 下载 scu 预编译二进制（SHA256 校验）

5 * 2. 把 Claude Code Skill 安装到 ~/.claude/skills/scu-cli/（SCU_CLI_NO_SKILL=1 跳过）

6 *

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install.jsView on unpkg · L4

7 * 二进制托管在 GitHub Release 而非随 npm 包分发，因此 package.json 的 version

8 * 必须对应一个存在的 Release 标签 v<version>（CI 发布时会用标签值覆盖 version）。