registry / @toothfairyai/tfcode / 2.2.6

@toothfairyai/tfcode@2.2.6

**ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Installing the package runs an unpinned remote binary downloader and a user-wide pip installer. The downloaded binary is placed in bin/ for later execution.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation with lifecycle scripts enabled

Impact

A remote release or Python package update can alter code installed on the user's machine outside the npm dependency lock.

Mechanism

postinstall downloads the latest remote archive and invokes pip

Attack narrative

The automatic postinstall hook fetches a mutable latest-version value from gitea.toothfairyai.com, downloads the matching archive with curl, extracts it, and replaces the package executable. It then invokes pip to install unpinned packages into the user's Python environment with a system-package override flag. This makes installation depend on remote, unpinned executable content and mutates software outside the npm package.

Rationale

This is a concrete install-hook supply-chain risk: mutable remote executable content and unpinned user-wide Python packages are installed automatically. No credential theft was found, but the automatic remote payload and broad environment mutation warrant blocking.

Evidence

package.jsonpostinstall.mjsbin/tfcodebin/app

Network endpoints1

gitea.toothfairyai.com

@toothfairyai/tfcode@2.2.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code