Loading npm security reports…

@toothfairyai/tfcode@2.5.11: Malicious npm security report | LPM Firewall

registry / @toothfairyai/tfcode / 2.5.11

@toothfairyai/tfcode@2.5.11

**ToothFairyAI's AI coding agent** — a command-line interface that brings AI-powered coding assistance to your terminal with deep ToothFairyAI workspace integration.

AI Security Review

scanned 23d ago · by lpm-firewall-ai

Installing the package fetches a mutable remote release, extracts its binary, and installs Python packages into the user's environment. The CLI subsequently executes the downloaded binary.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm install runs the postinstall hook; invoking tfcode runs the installed binary.

Impact

A remote release can replace the executable delivered to users, while installation also modifies the user's Python environment.

Mechanism

Install-time remote binary staging and user-level Python package installation.

Attack narrative

On installation, package.json runs postinstall.mjs. That script asks a remote Gitea server for its latest release, downloads a platform archive with curl, extracts it, and writes an executable into bin/tfcode without a version pin or integrity verification. It also invokes pip with --user and --break-system-packages. When the user invokes tfcode, the launcher executes the staged binary. This gives the remote release publisher control over code delivered through an automatic lifecycle hook.

AI rationale

The automatic lifecycle hook stages a mutable, unverified remote executable and alters the user's Python environment. The CLI explicitly executes the staged binary, creating a concrete remote payload delivery path.

Evidence

package.jsonpostinstall.mjsbin/tfcode.jsbin/tfcodebin/appbin/computer$TMPDIR/tfcode-install-${process.pid}user Python site-packages

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

python/tf_sync/config.pyView file

•path = python/tf_sync/config.py kind = build_helper sizeBytes = 7012 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

python/tf_sync/config.pyView on unpkg

bin/tfcode.jsView file

•matchType = normalized_sha256 matchedPackage = @toothfairyai/tfcode@2.5.7 matchedPath = bin/tfcode.js matchedIdentity = npm:QHRvb3RoZmFpcnlhaS90ZmNvZGU:2.5.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/tfcode.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 0290b274445d960c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @toothfairyai/tfcode@2.5.7 matchedPath = bin/tfcode.js matchedIdentity = npm:QHRvb3RoZmFpcnlhaS90ZmNvZGU:2.5.7 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/tfcode.jsView on unpkg

postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @toothfairyai/tfcode@2.5.7 matchedPath = postinstall.mjs matchedIdentity = npm:QHRvb3RoZmFpcnlhaS90ZmNvZGU:2.5.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.mjsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@toothfairyai/tfcode",

3 "version": "2.5.11",

4 "bin": {

5 "tfcode": "./bin/tfcode.js"

6 },

7 "scripts": {

8 "postinstall": "node ./postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 },

10 "license": "MIT",

11 "optionalDependencies": {

12 "@toothfairyai/tfcode-linux-arm64": "2.5.11",

13 "@toothfairyai/tfcode-windows-x64": "2.5.11",

14 "@toothfairyai/tfcode-linux-x64-baseline-musl": "2.5.11",

15 "@toothfairyai/tfcode-darwin-x64-baseline": "2.5.11",

16 "@toothfairyai/tfcode-linux-x64-musl": "2.5.11",

17 "@toothfairyai/tfcode-windows-x64-baseline": "2.5.11",

18 "@toothfairyai/tfcode-linux-arm64-musl": "2.5.11",

19 "@toothfairyai/tfcode-windows-arm64": "2.5.11",

20 "@toothfairyai/tfcode-linux-x64": "2.5.11",

21 "@toothfairyai/tfcode-darwin-x64": "2.5.11",

22 "@toothfairyai/tfcode-linux-x64-baseline": "2.5.11",

23 "@toothfairyai/tfcode-darwin-arm64": "2.5.11"

24 },

25 "engines": {

26 "node": ">=18"

27 },

28 "homepage": "https://toothfairyai.com/developers/tfcode",

python/tf_sync/config.pyView file

•path = python/tf_sync/config.py kind = build_helper sizeBytes = 7012 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

python/tf_sync/config.pyView on unpkg

bin/tfcode.jsView file

•matchType = normalized_sha256 matchedPackage = @toothfairyai/tfcode@2.5.7 matchedPath = bin/tfcode.js matchedIdentity = npm:QHRvb3RoZmFpcnlhaS90ZmNvZGU:2.5.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/tfcode.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 0290b274445d960c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @toothfairyai/tfcode@2.5.7 matchedPath = bin/tfcode.js matchedIdentity = npm:QHRvb3RoZmFpcnlhaS90ZmNvZGU:2.5.7 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/tfcode.jsView on unpkg

postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @toothfairyai/tfcode@2.5.7 matchedPath = postinstall.mjs matchedIdentity = npm:QHRvb3RoZmFpcnlhaS90ZmNvZGU:2.5.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.mjsView on unpkg