Loading npm security reports…

basinfy@1.0.3: AI-agent control-surface risk | LPM Firewall

registry / basinfy / 1.0.3

basinfy@1.0.3

Topological Architecture Mapping & Residue Basin Search for AI Code Assistants

AI Security Review

scanned 16d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall silently configures Basinfy as an MCP server in third-party AI-agent project control surfaces. It also rewrites dependency files within its installation.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of basinfy in a likely project root

Impact

Installed IDE/agent clients can launch the package MCP server and follow injected configuration without an explicit user command.

Mechanism

unconsented postinstall AI-agent configuration injection

Policy narrative

On installation, the package uses INIT_CWD or cwd as the project root, resolves agent IDs, and silently invokes its MCP-config writer. The writer supports multiple unrelated AI-agent configuration and rule locations, causing installed agents to launch Basinfy's bundled MCP server. This occurs without an explicit setup command; the opt-out environment variable does not provide prior consent.

Rationale

Direct inspection confirms a postinstall hook that mutates foreign AI-agent control surfaces, matching the publish-block boundary. Obfuscation and unrelated dependency rewriting increase confidence; no network behavior is needed for this finding.

Evidence

package.jsonscripts/postinstall.jsdist/cli/mcp-config.jsbin/basinfy-mcp.jsnode_modules/sharp/package.jsonnode_modules/sharp/index.jsnode_modules/onnxruntime-web/package.jsonnode_modules/onnxruntime-web/index.jsnode_modules/@xenova/transformers/src/utils/tensor.js

Source & flagged code

5 flagged

package.jsonView file

Lines 32-72json

32 "build": "npm run build:viz-css && node scripts/clean-dist.js && npx tsc && node scripts/copy-core-artifacts.js && npm run build:mcp",

33 "build:viz-css": "tailwindcss -i src/visualizer/viz.tailwind.css -o src/visualizer/viz.compiled.css --minify",

34 "build:release": "npm run build && node --max-old-space-size=16384 scripts/obfuscate-dist.js --no-spawn",

35 "verify:pack": "node scripts/verify-pack.js",

36 "pack:audit": "node scripts/pack-audit.js",

37 "pack:demo-full": "npm run build:release && node scripts/pack-demo-full.js",

38 "pack:full": "npm run build:release && node scripts/pack-full.js",

39 "pack:light": "npm run build:release && node scripts/pack-light.js",

40 "dev:cli": "node scripts/dev-cli.js",

41 "build:mcp": "cd packages/mcp-server && npm run build",

42 "start": "ts-node src/cli/index.ts",

43 "test": "jest",

44 "benchmark": "ts-node scripts/benchmark.ts",

45 "benchmark:recall-at-k": "ts-node scripts/benchmark-recall-at-k.ts",

46 "benchmark:recall-canvas": "ts-node scripts/generate-recall-canvas-data.ts",

47 "benchmark:calibrate": "ts-node scripts/calibrate-hybrid-weights.ts",

48 "benchmark:calibrate:es": "ts-node scripts/calibrate-es.ts",

49 "benchmark:train:full": "ts-node scripts/train-calibrate-full.ts",

50 "evolve:online": "ts-node scripts/evolve-online.ts",

51 "prepublishOnly": "npm run build:release && npm run verify:pack && npm run pack:audit",

52 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 "dev": "ts-node-dev --respawn --transpile-only src/cli/index.ts"

54 },

55 "keywords": [

56 "ai",

57 "agents",

58 "code-indexing",

59 "knowledge-graph",

60 "claude",

61 "copilot",

62 "cursor",

63 "context-compression",

64 "token-savings"

65 ],

66 "author": "Alex Martins",

67 "license": "SEE LICENSE IN LICENSE",

68 "repository": {

69 "type": "git",

70 "url": "https://basinfy.com"

71 },

72 "dependencies": {

bin/basinfy.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2const execArgv = process.execArgv.join(' ');

3if (execArgv.includes('--inspect') || execArgv.includes('--debug') || (process.env.NODE_OPTIONS

dist/core/neural-encoder.jsView file

Lines 1-1javascript

1const _0x22b0b0=_0x39d6,_0x391ab7=_0x5ede;function _0x39d6(_0x2b5b5d,_0x230228){_0x2b5b5d=_0x2b5b5d-0x10c;const _0x1436f1=_0x3c17();let _0x38b988

dist/core-runtime/pkg/basinfy_core_bg.wasmView file

•path = dist/core-runtime/pkg/basinfy_core_bg.wasm kind = wasm_module sizeBytes = 213462 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/core-runtime/pkg/basinfy_core_bg.wasmView on unpkg