Loading npm security reports…

auto-chrome-mcp-bridge@1.6.0: AI-agent control-surface risk | LPM Firewall

registry / auto-chrome-mcp-bridge / 1.6.0

auto-chrome-mcp-bridge@1.6.0

Auto Chrome MCP — Chrome Native-Messaging host (Node). Non-interference background work mode, per-session work tabs, Force Reconnect, Playwright CDP fallback.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. On global npm install, the package changes Claude Code's skill control surface without a user command. It also retrieves a remote browser extension during installation.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Global npm installation on a system where ~/.claude exists.

Impact

Future Claude Code conversations can automatically load package-provided instructions.

Mechanism

postinstall copies a bundled Claude Code skill and downloads an extension archive

Policy narrative

The npm postinstall hook runs automatically. For global installs, it downloads and extracts a release artifact, then—when Claude Code is present—copies its bundled skill into ~/.claude/skills so it automatically activates in future conversations. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

The package’s postinstall creates or updates a Claude Code skill outside its own installation directory and explicitly states it activates in future conversations. The guard and opt-out do not make this an explicit user-command setup.

Evidence

package.jsondist/scripts/postinstall.jsdist/skill/SKILL.md~/.claude/skills/chrome-mcp-scalemaker-doctor/SKILL.md~/.mcp-chrome-scalemaker/extension.zip~/Downloads/mcp-chrome-scalemaker-extension-v<version>

Network endpoints1

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/scripts/doctor.jsView file

424package = auto-chrome-mcp-bridge; repositoryIdentity = auto-chrome-mcp; dependency = node-fetch L424: try { L425: const mod = require('node-fetch'); L426: return ((_a = mod.default) !== null && _a !== void 0 ? _a : mod);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/scripts/doctor.jsView on unpkg · L424

dist/run_host.shView file

•path = dist/run_host.sh kind = build_helper sizeBytes = 10067 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/run_host.shView on unpkg

dist/scripts/postinstall.jsView file

•matchType = token_shingles matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/postinstall.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/postinstall.jsView on unpkg

dist/scripts/utils.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/utils.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/utils.jsView on unpkg

dist/scripts/browser-config.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/browser-config.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/browser-config.jsView on unpkg

dist/scripts/report.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/report.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/report.jsView on unpkg

dist/file-handler.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/file-handler.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/file-handler.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 69-91json

69 }

70 },

71 "lint-staged": {

72 "*.{js,ts}": [

73 "eslint --fix",

74 "prettier --write"

75 ],

76 "*.{json,md}": [

77 "prettier --write"

78 ]

79 },

80 "scripts": {

81 "dev": "nodemon --watch src --ext ts,js,json --ignore dist/ --exec \"npm run build && npm run register:dev\"",

82 "build": "ts-node src/scripts/build.ts",

83 "test": "jest",

84 "test:watch": "jest --watch",

85 "lint": "eslint 'src/**/*.{js,ts}'",

86 "lint:fix": "eslint 'src/**/*.{js,ts}' --fix",

87 "format": "prettier --write 'src/**/*.{js,ts,json}'",

88 "register:dev": "node dist/scripts/register-dev.js",

89 "postinstall": "node -e \"const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})\""

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L89

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L89

90 }

91}

dist/scripts/doctor.jsView file

Lines 404-444javascript

404 });

405 return fixes;

406}

407// ============================================================================

408// JSON File Reading

409// ============================================================================

410function readJsonFile(filePath) {

411 try

dist/run_host.shView file

•path = dist/run_host.sh kind = build_helper sizeBytes = 10067 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/run_host.shView on unpkg

dist/scripts/postinstall.jsView file

•matchType = token_shingles matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/postinstall.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/postinstall.jsView on unpkg

dist/scripts/utils.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/utils.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/utils.jsView on unpkg

dist/scripts/browser-config.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/browser-config.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/browser-config.jsView on unpkg

dist/scripts/report.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/scripts/report.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/scripts/report.jsView on unpkg

dist/file-handler.jsView file

•matchType = normalized_sha256 matchedPackage = auto-chrome-mcp-bridge@1.2.0 matchedPath = dist/file-handler.js matchedIdentity = npm:YXV0by1jaHJvbWUtbWNwLWJyaWRnZQ:1.2.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/file-handler.jsView on unpkg