antigyc@0.1.2: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

antigyc@0.1.2: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/google-agent.jsView file

77const temp = `${metadataPath}.${process.pid}.${crypto.randomUUID()}.tmp`; L78: await fs.writeFile(temp, `${JSON.stringify({ version: PROVIDER_METADATA_VERSION, ...body }, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 }); L79: await fs.rename(temp, metadataPath); ... L176: const targetDirectory = path.dirname(binaryPath); L177: await fs.writeFile(tempFile, script, { encoding: 'utf8', mode: 0o700 }); L178: try { ... L265: try { L266: if (hadBinary) await fs.copyFile(binaryPath, backupBinary); L267: if (hadMetadata) await fs.copyFile(metadataPath, backupMetadata); L268: healthyBackendPaths.delete(binaryPath); ... L285: await fs.rm(metadataPath, { force: true }); L286: if (hadBinary) await fs.copyFile(backupBinary, binaryPath);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/google-agent.jsView on unpkg · L77

4import path from 'node:path'; L5: import { spawn } from 'node:child_process'; L6: import { conversationAsText, conversationForModel } from './history.js'; ... L13: const MAX_LOGIN_CAPTURE_CHARS = 32_000; L14: const PUBLIC_GEMINI_MODELS_URL = 'https://ai.google.dev/gemini-api/docs/models'; L15: const PUBLIC_MODEL_DISCOVERY_TIMEOUT_MS = 8 * 1000; ... L26: export function officialAntigravityBinaryPath({ L27: platform = process.platform, L28: env = process.env, L29: home = os.homedir() L30: } = {}) { ... L66: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/google-agent.jsView on unpkg · L4

480package = antigyc; repositoryIdentity = antigravity-cli-npm; dependency = @lydell/node-pty L480: try { L481: return await import('@lydell/node-pty'); L482: } catch {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

src/google-agent.jsView on unpkg · L480

Lines 57-97javascript

57 return crypto.createHash('sha256').update(await fs.readFile(file)).digest('hex');

58}

59

60export function officialAntigravityMetadataPath({ binaryPath = officialAntigravityBinaryPath() } = {}) {

61 return path.join(path.dirname(binaryPath), 'provider.json');

62}

63

64async function readProviderMetadata(binaryPath) {

65 const metadataPath = officialAntigravityMetadataPath({ binaryPath });

66 try {

67 const parsed = JSON.parse(await fs.readFile(metadataPath, 'utf8'));

68 return parsed?.version === PROVIDER_METADATA_VERSION ? parsed : null;

69 } catch {

70 return null;

71 }

72}

73

74async function writeProviderMetadata(binaryPath, body) {

75 const metadataPath = officialAntigravityMetadataPath({ binaryPath });

76 await fs.mkdir(path.dirname(metadataPath), { recursive: true });

77 const temp = `${metadataPath}.${process.pid}.${crypto.randomUUID()}.tmp`;

78 await fs.writeFile(temp, `${JSON.stringify({ version: PROVIDER_METADATA_VERSION, ...body }, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });

79 await fs.rename(temp, metadataPath);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/google-agent.jsView on unpkg · L77

80 try { await fs.chmod(metadataPath, 0o600); } catch {}

81}

82

83async function finalizeProviderMetadata(binaryPath, providerVersion) {

84 const current = await readProviderMetadata(binaryPath);

85 if (!current) return;

86 await writeProviderMetadata(binaryPath, {

87 ...current,

88 providerVersion: providerVersion || current.providerVersion || null,

89 binarySha256: await sha256File(binaryPath),

90 verifiedAt: new Date().toISOString()

91 });

92}

93

94export async function providerProvenanceStatus({ binaryPath = officialAntigravityBinaryPath() } = {}) {

95 if (!await fileExists(binaryPath)) return { status: 'missing', sourceUrl: null, providerVersion: null };

96 const metadata = await readProviderMetadata(binaryPath);

97 if (!metadata?.sourceUrl || !metadata.binarySha256) {