Loading npm security reports…

basinfy@1.0.5: AI-agent control-surface risk | LPM Firewall

registry / basinfy / 1.0.5

basinfy@1.0.5

Topological Architecture Mapping & Residue Basin Search for AI Code Assistants

AI Security Review

scanned 16d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall automatically registers Basinfy's MCP server with detected or default third-party AI coding agents in the consuming project. This changes agent control configuration without an explicit user command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation in a directory recognized as a project root, unless BASINFY_SKIP_MCP=1 is pre-set.

Impact

A package installation can cause IDE/agent clients to launch the package's MCP server and grant it project-context access.

Mechanism

postinstall-driven detection and rewriting of AI-agent MCP configuration

Policy narrative

Installing the package invokes scripts/postinstall.js. For a recognized project it loads the obfuscated MCP configuration module, detects installed AI agents or selects defaults, then writes a basinfy MCP server entry into their project configuration. The registration makes third-party agent clients launch package-provided code without the user having run the documented setup command.

Rationale

This is concrete unconsented postinstall mutation of a broad foreign AI-agent control surface, meeting the blocking policy. The documented manual workflow and opt-out do not make the default lifecycle mutation consented.

Evidence

package.jsonscripts/postinstall.jsdist/cli/mcp-config.jsREADME.md.mcp.json.vscode/mcp.json

Decision evidence

Source & flagged code

5 flagged

package.jsonView file

Lines 32-72json

32 "build": "npm run build:viz-css && node scripts/clean-dist.js && npx tsc && node scripts/copy-core-artifacts.js && npm run build:mcp",

33 "build:viz-css": "tailwindcss -i src/visualizer/viz.tailwind.css -o src/visualizer/viz.compiled.css --minify",

34 "build:release": "npm run build && node --max-old-space-size=16384 scripts/obfuscate-dist.js --no-spawn",

35 "verify:pack": "node scripts/verify-pack.js",

36 "pack:audit": "node scripts/pack-audit.js",

37 "pack:demo-full": "npm run build:release && node scripts/pack-demo-full.js",

38 "pack:full": "npm run build:release && node scripts/pack-full.js",

39 "pack:light": "npm run build:release && node scripts/pack-light.js",

40 "dev:cli": "node scripts/dev-cli.js",

41 "build:mcp": "cd packages/mcp-server && npm run build",

42 "start": "ts-node src/cli/index.ts",

43 "test": "jest",

44 "benchmark": "ts-node scripts/benchmark.ts",

45 "benchmark:recall-at-k": "ts-node scripts/benchmark-recall-at-k.ts",

46 "benchmark:recall-canvas": "ts-node scripts/generate-recall-canvas-data.ts",

47 "benchmark:calibrate": "ts-node scripts/calibrate-hybrid-weights.ts",

48 "benchmark:calibrate:es": "ts-node scripts/calibrate-es.ts",

49 "benchmark:train:full": "ts-node scripts/train-calibrate-full.ts",

50 "evolve:online": "ts-node scripts/evolve-online.ts",

51 "prepublishOnly": "npm run build:release && npm run verify:pack && npm run pack:audit",

52 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 "dev": "ts-node-dev --respawn --transpile-only src/cli/index.ts"

54 },

55 "keywords": [

56 "ai",

57 "agents",

58 "code-indexing",

59 "knowledge-graph",

60 "claude",

61 "copilot",

62 "cursor",

63 "context-compression",

64 "token-savings"

65 ],

66 "author": "Alex Martins",

67 "license": "SEE LICENSE IN LICENSE",

68 "repository": {

69 "type": "git",

70 "url": "https://basinfy.com"

71 },

72 "dependencies": {

bin/basinfy.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2const execArgv = process.execArgv.join(' ');

3if (execArgv.includes('--inspect') || execArgv.includes('--debug') || (process.env.NODE_OPTIONS

dist/core/neural-encoder.jsView file

Lines 1-1javascript

1function _0xd6a7(_0x29ddb7,_0x167caa){_0x29ddb7=_0x29ddb7-0xc0;const _0x2e7ae0=_0xdcad();let _0x137b90=_0x2e7ae0[_0x29ddb7];if(_0xd6a7['gRrNIN']===undefined

dist/core-runtime/pkg/basinfy_core_bg.wasmView file

•path = dist/core-runtime/pkg/basinfy_core_bg.wasm kind = wasm_module sizeBytes = 213462 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/core-runtime/pkg/basinfy_core_bg.wasmView on unpkg