basinfy@1.0.12: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

basinfy@1.0.12: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/basinfy.jsView file

6L7: const fs = require('fs'); L8: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/basinfy.jsView on unpkg · L6

dist/core/locker.jsView file

1'use strict';var _0x4fc5bc=_0x3feb,_0x143fdc=_0x1369;(function(_0x2f3140,_0x1cbce7){var _0x3b4710={_0x4ecb9a:0x22b,_0x45660a:'mjsy',_0x369a34:0x21d,_0x185922:0x1ee,_0x14d102:0x1f2,...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/core/locker.jsView on unpkg · L1

dist/cli/mcp-config.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L1: 'use strict';const _0x50daa6=_0x3020,_0x4ec430=_0x2d9b;(function(_0xab1c1a,_0x4caa30){const _0x55f64a={_0x287856:0x20d,_0x111d85:0xad,_0x31f19b:'FR$4',_0x148e00:0x122,_0x2c2a88:'TW... Write operation from scripts/postinstall.js: L64: fs.rmSync(pkgDir, { recursive: true, force: true }); L65: fs.mkdirSync(pkgDir, { recursive: true }); L66: fs.writeFileSync( L67: path.join(pkgDir, 'package.json'), ... L69: ); L70: fs.writeFileSync(indexPath, 'module.exports = {};\n'); L71: } ... L91: } else { L92: fs.writeFileSync(tensorJsPath, tensorContent, 'utf8'); L93: } Foreign user/project scope from scripts/postinstall.js: L64: fs.rmSync(pkgDir, { recursive: true, force: true }); L65: fs.mkdirSync(pkgDir, { recursive: true }); L

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli/mcp-config.jsView on unpkg · L1

dist/core-runtime/pkg/basinfy_core_bg.wasmView file

•path = dist/core-runtime/pkg/basinfy_core_bg.wasm kind = wasm_module sizeBytes = 38348 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/core-runtime/pkg/basinfy_core_bg.wasmView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 43-83json

43 "pack:full": "npm run build:release && node scripts/pack-full.js",

44 "pack:light": "npm run build:release && node scripts/pack-light.js",

45 "dev:cli": "node scripts/dev-cli.js",

46 "build:mcp": "cd packages/mcp-server && npm run build",

47 "start": "ts-node src/cli/index.ts",

48 "test": "jest",

49 "test:ci": "npm run build:mcp && jest --ci --coverage --forceExit --detectOpenHandles",

50 "test:unit": "jest --testPathIgnorePatterns=mcp/server",

51 "test:mcp": "npm run build:mcp && jest tests/mcp",

52 "benchmark": "ts-node scripts/benchmark.ts",

53 "benchmark:run": "ts-node benchmarks/runner/index.ts",

54 "benchmark:react": "ts-node benchmarks/runner/index.ts --dataset react --K 10",

55 "benchmark:basinfy": "ts-node benchmarks/runner/index.ts --dataset basinfy --K 10 --systems basinfy,ripgrep,no-context",

56 "benchmark:recall-at-k": "ts-node scripts/benchmark-recall-at-k.ts",

57 "benchmark:recall-canvas": "ts-node scripts/generate-recall-canvas-data.ts",

58 "benchmark:calibrate": "ts-node scripts/calibrate-hybrid-weights.ts",

59 "benchmark:calibrate:es": "ts-node scripts/calibrate-es.ts",

60 "benchmark:train:full": "ts-node scripts/train-calibrate-full.ts",

61 "evolve:online": "ts-node scripts/evolve-online.ts",

62 "prepublishOnly": "npm run build:release && npm run verify:pack && npm run pack:audit",

63 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L63

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L63

64 "dev": "ts-node-dev --respawn --transpile-only src/cli/index.ts",

65 "sbom": "node scripts/generate-sbom.js",

66 "sbom:xml": "node scripts/generate-sbom.js --format xml"

67 },

68 "keywords": [

69 "ai",

70 "agents",

71 "code-indexing",

72 "knowledge-graph",

73 "claude",

74 "copilot",

75 "cursor",

76 "context-compression",

77 "token-savings"

78 ],

79 "author": "Alex Martins",

80 "license": "SEE LICENSE IN LICENSE",

81 "repository": {

82 "type": "git",

83 "url": "https://basinfy.com"

bin/basinfy.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2// Marks this as the CLI entrypoint so core modules install CLI-only process

3// handlers (SIGINT flush + exit, uncaughtException). The MCP server does NOT

4// set this and owns its own graceful shutdown. See src/core/topological-memory.ts.

5process.env.BASINFY_CLI_ENTRY = '1';

6

7const fs = require

dist/core/locker.jsView file

Lines 1-1javascript

1'use strict';var _0x4fc5bc=_0x3feb,_0x143fdc=_0x1369;(function(_0x2f3140,_0x1cbce7){var _0x3b4710={_0x4ecb9a:0x22b,_0x45660a:'mjsy',_0x369a34:0x21d,_0x185922:0x1ee,_0x14d102:0x1f2,_0x5726dc:

dist/cli/mcp-config.jsView file

Lines 1-1javascript

1'use strict';const _0x50daa6=_0x3020,_0x4ec430=_0x2d9b;(function(_0xab1c1a,_0x4caa30){const _0x55f64a={_0x287856:0x20d,_0x111d85:0xad,_0x31f19b:'FR$4',_0x148e00:0x122,_0x2c2a88:

dist/core-runtime/pkg/basinfy_core_bg.wasmView file

•path = dist/core-runtime/pkg/basinfy_core_bg.wasm kind = wasm_module sizeBytes = 38348 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/core-runtime/pkg/basinfy_core_bg.wasmView on unpkg