@theidentityselector/thiss@4.0.1
The Identity Selector
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package unconditionally clears the installer's npm cache during installation, a destructive action unrelated to its purpose. This supports blocking the release.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package, when npm runs its preinstall hook.
Impact
Removes cached npm artifacts, potentially disrupting other projects or slowing subsequent installs; this is unrelated to an identity selector's purpose.
Mechanism
The hook runs `npm cache clean --force` without asking the installer.
Attack narrative
During installation, the package's preinstall hook clears the npm cache with `npm cache clean --force`. This deletes cached artifacts beyond the package's own files, without a user request, and is unrelated to the package's identity-selector function.
AI rationale
The package unconditionally clears the installer's npm cache during installation, a destructive action unrelated to its purpose. This supports blocking the release.
Evidence
package.jsonnpm's configured cache
Decision evidence
public snapshotAI called this Malicious at 90.0% confidence as Malware with low false-positive risk.
Evidence for block
- The npm preinstall hook unconditionally runs `npm cache clean --force` during installation.
Evidence against
- The postinstall patch is limited to post-robot files under node_modules and is described as preserving wire compatibility.
- The flagged browser redirect follows SAML discovery and uses the configured return URL.
Behavioral surface
EvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts changed=cover,lint,test
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.preinstall = echo Clearing Cache & npm cache clean --force
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = echo Clearing Cache & npm cache clean --force
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•scripts.postinstall = ./scripts/pin-post-robot-key.sh && echo Finished Installing && npm list --depth=0
Findings
2 Critical1 High5 Medium6 Low
CriticalTrojan Source Unicodedist-pre/2.1.98/775_af7f8f98699ded7a89fc.js
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumShips Build Helperdemo-site/sp2/entrypoint.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist-pre/2.1.169/240_d1e7cb373972e1fb8ad3.js
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @theidentityselector/thiss@4.0.1.
See all versions of @theidentityselector/thiss for other recorded verdicts.
- Avoid installing @theidentityselector/thiss@4.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.