@verboo/code@0.15.28: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@verboo/code@0.15.28: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

25"scripts": { "build": "bun run scripts/build.ts", "desktop:contract:test": "bun test scripts/desktop-release/contract.test.ts", "desktop:package": "bun run scripts/desktop-release/package.ts", "desktop:manifest": "bun run scripts/desktop-release/manifest.ts", "desktop:verify": "bun run scripts/desktop-release/verify-release.ts", "desktop:test": "bun test scripts/desktop-release/*.test.ts", "postinstall": "node scripts/postinstall.mjs || true", "integrations:generate": "bun run scripts/generate-integrations-artifacts.ts",

Medium

Suspicious Lifecycle Evidence

The manifest automatically runs the postinstall script during installation.

package.jsonView on unpkg · L25

scripts/postinstall.mjsView file

11import { execFileSync, spawnSync } from 'node:child_process' L12: import { existsSync, mkdirSync, readdirSync, statSync, copyFileSync } from 'node:fs' L13: import { join } from 'node:path' ... L40: let copied = false L41: if (!existsSync(dest)) mkdirSync(dest, { recursive: true }) L42: for (const entry of readdirSync(src)) { ... L49: } else { L50: copyFileSync(srcPath, destPath) L51: copied = true ... L57: function importFromClaudeCode() { L58: const claude = join(homedir(), '.claude') L59: const verboo = join(homedir(), '.verboo')

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L11

•matchType = malicious_source_fingerprint_signature signature = 8e8d658c4c74d4c7 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @verboo/code@0.15.24 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:QHZlcmJvby9jb2Rl:0.15.24 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/cli.mjsView file

•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 21285988 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.mjsView on unpkg

•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 21285988 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 5-52json

5 "type": "module",

6 "bin": {

7 "verboo": "bin/verboo"

8 },

9 "exports": {

10 "./package.json": "./package.json",

11 "./dist/cli.mjs": "./dist/cli.mjs",

12 "./sdk": {

13 "types": "./src/entrypoints/sdk.d.ts",

14 "import": "./dist/sdk.mjs"

15 }

16 },

17 "files": [

18 "bin/verboo",

19 "bin/import-specifier.mjs",

20 "dist/cli.mjs",

21 "dist/vendor/ripgrep/**",

22 "scripts/postinstall.mjs",

23 "README.md"

24 ],

25 "scripts": {

26 "build": "bun run scripts/build.ts",

27 "desktop:contract:test": "bun test scripts/desktop-release/contract.test.ts",

28 "desktop:package": "bun run scripts/desktop-release/package.ts",

29 "desktop:manifest": "bun run scripts/desktop-release/manifest.ts",

30 "desktop:verify": "bun run scripts/desktop-release/verify-release.ts",

31 "desktop:test": "bun test scripts/desktop-release/*.test.ts",

32 "postinstall": "node scripts/postinstall.mjs || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 "integrations:generate": "bun run scripts/generate-integrations-artifacts.ts",

Medium

Suspicious Lifecycle Evidence

The manifest automatically runs the postinstall script during installation.

package.jsonView on unpkg · L25

34 "integrations:check": "bun run scripts/generate-integrations-artifacts.ts --check",

35 "dev": "bun run build && node dist/cli.mjs",

36 "dev:profile": "bun run scripts/provider-launch.ts",

37 "dev:profile:fast": "bun run scripts/provider-launch.ts auto --fast --bare",

38 "dev:codex": "bun run scripts/provider-launch.ts codex",

39 "dev:openai": "bun run scripts/provider-launch.ts openai",

40 "dev:gemini": "bun run scripts/provider-launch.ts gemini",

41 "dev:ollama": "bun run scripts/provider-launch.ts ollama",

42 "dev:ollama:fast": "bun run scripts/provider-launch.ts ollama --fast --bare",

43 "dev:atomic-chat": "bun run scripts/provider-launch.ts atomic-chat",

44 "profile:init": "bun run scripts/provider-bootstrap.ts",

45 "profile:recommend": "bun run scripts/provider-recommend.ts",

46 "profile:auto": "bun run scripts/provider-recommend.ts --apply",

47 "profile:codex": "bun run profile:init -- --provider codex --model codexplan",

48 "profile:fast": "bun run profile:init -- --provider ollama --model llama3.2:3b",

49 "profile:code": "bun run profile:init -- --provider ollama --model qwen2.5-coder:7b",

50 "dev:fast": "bun run profile:fast && bun run dev:ollama:fast",

51 "dev:code": "bun run profile:code && bun run dev:profile",

52 "dev:grpc": "bun run scripts/start-grpc.ts",

scripts/postinstall.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * Postinstall: garante que o binário `verboo` fique disponível no fish shell.

4 *

5 * O npm instala globalmente no prefixo retornado por `npm prefix -g` (ex:

6 * /usr/local ou ~/.npm-global). Shells bash/zsh geralmente já têm esse bin no

7 * PATH via .bashrc/.zshrc, mas o fish não herda essas configs — é preciso

8 * chamar `fish_add_path` explicitamente.

9 */

10

11import

dist/cli.mjsView file

•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 21285988 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.mjsView on unpkg

•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 21285988 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg