registry / @verboo/code / 0.15.34

@verboo/code@0.15.34

Verboo Code — coding agent for the Verboo platform

AI Security Review

scanned 12d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically imports agent skills and plugins from Claude Code into Verboo configuration. No confirmed exfiltration or foreign agent-control modification was identified.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall execution.

Impact

Existing agent extensions are replicated into Verboo without an explicit setup command.

Mechanism

The installer recursively copies available Claude Code skills and plugins into the Verboo home directory.

AI rationale

Automatic migration of another agent's extensions during installation is a guarded lifecycle risk. The inspected behavior is confined to Verboo-owned configuration, so a block is not supported.

Evidence

package.jsonscripts/postinstall.mjs~/.claude/skills~/.claude/plugins~/.verboo/skills~/.verboo/plugins

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The manifest runs scripts/postinstall.mjs automatically after installation.
The installer copies existing Claude Code skills and plugins into Verboo's home configuration directory.
The migration function is invoked unconditionally by the installer.

Evidence against

No network operation or credential forwarding appears in the inspected installer.
The copied destination is the package's own configuration directory, not Claude Code's control surface.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 259 KB of source

Oversized source lightweight scan

dist/cli.mjs20.3 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsShellHighEntropyStrings

Source & flagged code

7 flagged

package.jsonView file

Lines 12-52json

12 "./sdk": {

13 "types": "./src/entrypoints/sdk.d.ts",

14 "import": "./dist/sdk.mjs"

15 }

16 },

17 "files": [

18 "bin/verboo",

19 "bin/import-specifier.mjs",

20 "dist/cli.mjs",

21 "dist/vendor/ripgrep/**",

22 "scripts/postinstall.mjs",

23 "README.md"

24 ],

25 "scripts": {

26 "build": "bun run scripts/build.ts",

27 "desktop:contract:test": "bun test scripts/desktop-release/contract.test.ts",

28 "desktop:package": "bun run scripts/desktop-release/package.ts",

29 "desktop:manifest": "bun run scripts/desktop-release/manifest.ts",

30 "desktop:verify": "bun run scripts/desktop-release/verify-release.ts",

31 "desktop:test": "bun test scripts/desktop-release/*.test.ts",

32 "postinstall": "node scripts/postinstall.mjs || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L32

33 "integrations:generate": "bun run scripts/generate-integrations-artifacts.ts",

Medium

Suspicious Lifecycle Evidence

The manifest runs scripts/postinstall.mjs automatically after installation.

package.jsonView on unpkg · L32

34 "integrations:check": "bun run scripts/generate-integrations-artifacts.ts --check",

35 "dev": "bun run build && node dist/cli.mjs",

36 "dev:profile": "bun run scripts/provider-launch.ts",

37 "dev:profile:fast": "bun run scripts/provider-launch.ts auto --fast --bare",

38 "dev:codex": "bun run scripts/provider-launch.ts codex",

39 "dev:openai": "bun run scripts/provider-launch.ts openai",

40 "dev:gemini": "bun run scripts/provider-launch.ts gemini",

41 "dev:ollama": "bun run scripts/provider-launch.ts ollama",

42 "dev:ollama:fast": "bun run scripts/provider-launch.ts ollama --fast --bare",

43 "dev:atomic-chat": "bun run scripts/provider-launch.ts atomic-chat",

44 "profile:init": "bun run scripts/provider-bootstrap.ts",

45 "profile:recommend": "bun run scripts/provider-recommend.ts",

46 "profile:auto": "bun run scripts/provider-recommend.ts --apply",

47 "profile:codex": "bun run profile:init -- --provider codex --model codexplan",

48 "profile:fast": "bun run profile:init -- --provider ollama --model llama3.2:3b",

49 "profile:code": "bun run profile:init -- --provider ollama --model qwen2.5-coder:7b",

50 "dev:fast": "bun run profile:fast && bun run dev:ollama:fast",

51 "dev:code": "bun run profile:code && bun run dev:profile",

52 "dev:grpc": "bun run scripts/start-grpc.ts",

scripts/postinstall.mjsView file

11import { execFileSync, spawnSync } from 'node:child_process' L12: import { existsSync, mkdirSync, readdirSync, statSync, copyFileSync } from 'node:fs' L13: import { join } from 'node:path' ... L40: let copied = false L41: if (!existsSync(dest)) mkdirSync(dest, { recursive: true }) L42: for (const entry of readdirSync(src)) { ... L49: } else { L50: copyFileSync(srcPath, destPath) L51: copied = true ... L57: function importFromClaudeCode() { L58: const claude = join(homedir(), '.claude') L59: const verboo = join(homedir(), '.verboo')

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L11

•matchType = malicious_source_fingerprint_signature signature = 8e8d658c4c74d4c7 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @verboo/code@0.15.24 matchedPath = scripts/postinstall.mjs matchedIdentity = npm:QHZlcmJvby9jb2Rl:0.15.24 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/cli.mjsView file

•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 21309627 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.mjsView on unpkg

•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 21309627 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

32"postinstall": "node scripts/postinstall.mjs || true", "integrations:generate": "bun run scripts/generate-integrations-artifac

Medium

Suspicious Lifecycle Evidence

The manifest runs scripts/postinstall.mjs automatically after installation.

package.jsonView on unpkg · L32

scripts/postinstall.mjsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L11

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.mjsView on unpkg

dist/cli.mjsView file

•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 21309627 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.mjsView on unpkg

•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 21309627 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg

Findings

1 Critical2 High6 Medium3 Low

CriticalAi Agent Control Hijackscripts/postinstall.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Fingerprint Signaturescripts/postinstall.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumOversized Source Filedist/cli.mjs

MediumOversized Cli Entrypointdist/cli.mjs

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @verboo/code@0.15.34.

See version security history for other recorded verdicts.

Review the evidence and your use of @verboo/code@0.15.34 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-27 01:13:07.622Z (UTC).