@threadplane/langgraph@0.3.3
LangGraph adapter for the Angular AI agent UI — provideAgent()/injectAgent() expose a run as Angular Signals.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe postinstall path performs automatic identifiable telemetry, including available Git identity, with an opt-out instead of affirmative consent. The endpoint appears brand-aligned, so the source supports a privacy risk warning but does not establish a malicious unrelated-recipient attack.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The package manager runs the package's postinstall lifecycle hook.
Impact
The recipient may associate installations with a persistent identifier and available Git display name or email.
Mechanism
The collector gathers installation and Git context, then posts the event unless a tracking-related environment variable disables collection.
AI rationale
The postinstall path performs automatic identifiable telemetry, including available Git identity, with an opt-out instead of affirmative consent. The endpoint appears brand-aligned, so the source supports a privacy risk warning but does not establish a malicious unrelated-recipient attack.
Evidence
package.jsoninstall/postinstall.cjsinstall/collector.cjsinstall/identity.cjsinstall/git-context.cjsinstall/policy.cjs
Network endpoints1
threadplane.ai/api/growth/collect/v1/install
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package manifest runs install/postinstall.cjs after installation.
- The postinstall handler invokes the install collector when the lifecycle event is postinstall.
- The collector creates or reuses a persistent installation ID in the user's home directory.
- Git context collection includes configured display name and email when available.
- The collector sends an installation event and available identity data in a POST to a fixed Threadplane endpoint.
- Collection can be disabled with tracking-related environment variables, but otherwise runs without an affirmative opt-in.
Evidence against
- The endpoint uses the same Threadplane brand as the package, so the inspected source does not establish an unrelated recipient.
- The collector has a disable flag and bounds execution time; its presence alone does not establish malicious intent.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg52"postinstall": "node install/postinstall.cjs"
},
"module": "fesm2022/threadplane-langgraph.mjs",
Medium
Suspicious Lifecycle Evidence
The package manifest runs install/postinstall.cjs after installation.
package.jsonView on unpkg · L52install/git-context.cjsView file
Findings
2 High7 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similarityinstall/git-context.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidenceinstall/postinstall.cjs
MediumAi Review Evidenceinstall/identity.cjs
MediumAi Review Evidenceinstall/collector.cjs
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @threadplane/langgraph@0.3.3.
See all versions of @threadplane/langgraph for other recorded verdicts.
- Review the evidence and your use of @threadplane/langgraph@0.3.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.