Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@toothfairyai/tfcode@1.9.9: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 12 finding(s) warrant review before installing.

View on npm All versions

registry / @toothfairyai/tfcode / 1.9.9

@toothfairyai/tfcode@1.9.9

**ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.

AI Security Review

scanned 8d ago · by lpm-firewall-ai

npm postinstall fetches a mutable latest release and installs its native binary without a pinned version or integrity check. It also installs Python packages into the user environment.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation

Impact

A compromised configured release host can stage native code for later tfcode execution; installation mutates the Python user environment.

Mechanism

remote binary retrieval and user-environment package installation

Rationale

This is not confirmed malicious behavior: defaults are vendor-aligned and no harvesting or foreign control-surface mutation was found. However, an install-time mutable remote native payload chain plus pip environment mutation warrants a warning.

Evidence

package.jsonpostinstall.mjsbin/tfcode.jsbin/tfcodebin/apptemporary tfcode-install directoryuser Python package directory

Network endpoints2

gitea.toothfairyai.com/api/v1/repos/ToothFairyAI/tf_code/releases/latestgitea.toothfairyai.com/ToothFairyAI/tf_code/releases/download/

Decision evidence

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

public snapshot

AI called this Suspicious at 91.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

postinstall resolves a remotely supplied “latest” release version.
postinstall downloads and installs an unsigned platform archive at install time.
postinstall also invokes pip to mutate the user Python environment.

Evidence against

Default download host and repository are ToothFairyAI-aligned.
Writes are limited to the package bin directory and a temporary directory.
No source evidence of credential harvesting, exfiltration, or foreign AI-agent config mutation.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 11.0 KB of source, external domains: toothfairyai.com

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/tfcodeView file

•path = bin/tfcode kind = native_binary sizeBytes = 105536032 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/tfcodeView on unpkg

python/tf_sync/config.pyView file

•path = python/tf_sync/config.py kind = build_helper sizeBytes = 7012 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

python/tf_sync/config.pyView on unpkg

postinstall.mjsView file

123const ext = platform === "linux" ? ".tar.gz" : ".zip" const filename = `${target}${ext}` const url = `https://${GITEA_HOST}/${GITEA_REPO}/releases/download/v${version}/${filename}` console.log(`Downloading tfcode v${version} for ${target}...`) // Download if (!fs.existsSync(binDir)) fs.mkdirSync(binDir, { recursive: true }) const tmpDir = path.join(os.tmpdir(), `tfcode-install-${process.pid}`) fs.mkdirSync(tmpDir, { recursive: true }) const archivePath = path.join(tmpDir, filename) // Use curl to download const curlResult = spawnSync("curl", ["-fsSL", "-o", archivePat

Medium

Suspicious Lifecycle Evidence

postinstall downloads and installs an unsigned platform archive at install time.

postinstall.mjsView on unpkg · L123

Findings

1 High7 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarybin/tfcode

MediumShips Build Helperpython/tf_sync/config.py

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepostinstall.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

91%Warn

Verdict confidence

IntentCritical Vulnerability

TypeStaged Payload Carrier

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

Maintainerstoothfairyai

Version2.3.0

PublishedAug 24, 2026

LicenseMIT

Dependencies12

Integrityverified

Package size29.6 MB

Files11

LinksRepository Homepage

Runtime surface

package.json

Entrypointsbin → tfcode

Runtimenode >=18

Artifact101 MB · 11 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

ChildProcessEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

5 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@toothfairyai/tfcode",

3 "version": "1.9.9",

4 "bin": {

5 "tfcode": "./bin/tfcode.js"

6 },

7 "scripts": {

8 "postinstall": "node ./postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 },

10 "license": "MIT",

11 "optionalDependencies": {

12 "@toothfairyai/tfcode-linux-arm64": "1.9.9",

13 "@toothfairyai/tfcode-windows-x64": "1.9.9",

14 "@toothfairyai/tfcode-linux-x64-baseline-musl": "1.9.9",

15 "@toothfairyai/tfcode-darwin-x64-baseline": "1.9.9",

16 "@toothfairyai/tfcode-linux-x64-musl": "1.9.9",

17 "@toothfairyai/tfcode-windows-x64-baseline": "1.9.9",

18 "@toothfairyai/tfcode-linux-arm64-musl": "1.9.9",

19 "@toothfairyai/tfcode-windows-arm64": "1.9.9",

20 "@toothfairyai/tfcode-linux-x64": "1.9.9",

21 "@toothfairyai/tfcode-darwin-x64": "1.9.9",

22 "@toothfairyai/tfcode-linux-x64-baseline": "1.9.9",

23 "@toothfairyai/tfcode-darwin-arm64": "1.9.9"

24 },

25 "engines": {

26 "node": ">=18"

27 },

28 "homepage": "https://toothfairyai.com/developers/tfcode",

bin/tfcodeView file

•path = bin/tfcode kind = native_binary sizeBytes = 105536032 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/tfcodeView on unpkg

python/tf_sync/config.pyView file

•path = python/tf_sync/config.py kind = build_helper sizeBytes = 7012 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

python/tf_sync/config.pyView on unpkg

postinstall.mjsView file

Lines 103-143javascript

103 try {

104 const pkgUrl = import.meta.resolve(`${pkgName}/package.json`)

105 const pkgDir =

path.

dirname

(

fileURLToPath

(pkgUrl))

106 const srcAppDir = path.join(pkgDir, "bin", "app")

107 if (fs.existsSync(path.join(srcAppDir, "dist", "index.html"))) {

108 fs.cpSync(srcAppDir, targetAppDir, { recursive: true })

109 console.log("✓ Web app copied from platform package")

110 }

111 } catch (e) {

112 console.log(`! Could not copy web app: ${e.message}`)

113 }

114 }

115 return

116 }

117

118 // Build filename for download

119 let target = `tfcode-${platform}-${arch}`

120 if (needsBaseline) target += "-baseline"

121 if (abi) target += `-${abi}`

122

123 const ext = platform === "linux" ? ".tar.gz" : ".zip"

124 const filename = `${target}${ext}`

125 const url = `https://${GITEA_HOST}/${GITEA_REPO}/releases/download/v${version}/${filename}`

126

127 console.log(`Downloading tfcode v${version} for ${target}...`)

128

129 // Download

130 if (!fs.existsSync(binDir)) fs.mkdirSync(binDir, { recursive: true })

131

132 const tmpDir = path.join(os.tmpdir(), `tfcode-install-${process.pid}`)

133 fs.mkdirSync(tmpDir, { recursive: true })

134 const archivePath = path.join(tmpDir, filename)

Medium

Suspicious Lifecycle Evidence

postinstall downloads and installs an unsigned platform archive at install time.

postinstall.mjsView on unpkg · L123

135

136 // Use curl to download

137 const curlResult = spawnSync("curl", ["-fsSL", "-o", archivePath, url], { stdio: "inherit" })

138 if (curlResult.status !== 0) {

139 console.error(`Failed to download from ${url}`)

140 console.error("Trying npm package fallback...")

141

142 // Fallback to npm optionalDependencies

143 try {