Loading npm security reports…

auto-chrome-mcp-bridge@1.2.0: AI-agent control-surface risk | LPM Firewall

registry / auto-chrome-mcp-bridge / 1.2.0

auto-chrome-mcp-bridge@1.2.0

Auto Chrome MCP — Chrome Native-Messaging host (Node). Non-interference background work mode, per-session work tabs, Force Reconnect, Playwright CDP fallback.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Global npm installation mutates Claude Code's user-wide skill directory without an explicit setup command. The dropped skill auto-instructs the agent to execute shell diagnostics and fixes.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm global installation while ~/.claude exists

Impact

Unconsented modification of a foreign AI-agent control surface can cause future agent-initiated shell actions.

Mechanism

postinstall drops an auto-triggered Claude Code skill

Policy narrative

The package lifecycle hook runs postinstall. For global installs on systems with Claude Code, it copies its bundled SKILL.md into ~/.claude/skills, where it is designed to auto-trigger in later conversations. That skill directs Claude Code to execute Bash commands itself. This is an unconsented install-time write to a foreign, user-wide AI-agent control surface; the remote extension download increases supply-chain exposure.

Rationale

Source directly confirms a postinstall write into ~/.claude/skills and an agent-directed shell-execution payload. This meets the policy boundary for an unconsented lifecycle mutation of a foreign AI-agent control surface.

Evidence

package.jsondist/scripts/postinstall.jsdist/skill/SKILL.md~/.claude/skills/chrome-mcp-scalemaker-doctor/SKILL.md

Network endpoints1

/scalemaker-ship-it/mcp-chrome-scalemaker/releases/latest/download/chrome-mcp-scalemaker-extension.zip

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/run_host.shView file

•path = dist/run_host.sh kind = build_helper sizeBytes = 10067 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/run_host.shView on unpkg

dist/scripts/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/doctor.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/doctor.jsView on unpkg

dist/scripts/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/postinstall.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/postinstall.jsView on unpkg

dist/scripts/utils.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/utils.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/utils.jsView on unpkg

dist/scripts/browser-config.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/browser-config.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/browser-config.jsView on unpkg

dist/scripts/report.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/report.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/report.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 69-91json

69 }

70 },

71 "lint-staged": {

72 "*.{js,ts}": [

73 "eslint --fix",

74 "prettier --write"

75 ],

76 "*.{json,md}": [

77 "prettier --write"

78 ]

79 },

80 "scripts": {

81 "dev": "nodemon --watch src --ext ts,js,json --ignore dist/ --exec \"npm run build && npm run register:dev\"",

82 "build": "ts-node src/scripts/build.ts",

83 "test": "jest",

84 "test:watch": "jest --watch",

85 "lint": "eslint 'src/**/*.{js,ts}'",

86 "lint:fix": "eslint 'src/**/*.{js,ts}' --fix",

87 "format": "prettier --write 'src/**/*.{js,ts,json}'",

88 "register:dev": "node dist/scripts/register-dev.js",

89 "postinstall": "node -e \"const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})\""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L89

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L89

90 }

91}

dist/run_host.shView file

•path = dist/run_host.sh kind = build_helper sizeBytes = 10067 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/run_host.shView on unpkg

dist/scripts/doctor.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/doctor.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/doctor.jsView on unpkg

dist/scripts/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/postinstall.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/postinstall.jsView on unpkg

dist/scripts/utils.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/utils.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/utils.jsView on unpkg

dist/scripts/browser-config.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/browser-config.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/browser-config.jsView on unpkg

dist/scripts/report.jsView file

•matchType = normalized_sha256 matchedPackage = mcp-chrome-scalemaker-bridge@1.0.37 matchedPath = dist/scripts/report.js matchedIdentity = npm:[redacted]:1.0.37 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/report.jsView on unpkg