brokre@0.2.32: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

brokre@0.2.32: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4scripts.postinstall = node postinstall.js Install-time code downloads an unverified remote native archive, stages it locally, activates an executable path, and exposes it to process execution. L15: L16: const { spawnSync } = require('child_process'); L17: const path = require('path'); ... L32: `brokre: postinstall binary download skipped (${err.message})\n` + L33: ' First `brokre` / MCP start will retry. Manual: ' + L34: 'https://raw.githubusercontent.com/Furowu/brokre/main/install.sh\n' L35: ); ... L40: const setup = path.join(__dirname, 'setup-mcp.js'); L41: const res = spawnSync(process.execPath, [setup], { L42: stdio: 'inherit', L4: * L5: * Spawns `brokre mcp` (stdio). Uses brokre on PATH, or downloads a prebuilt L6: * release from GitHub into ~/.brokre/bin/ on first run. ... L9: L1

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L4

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

9Trigger-reachable persistence chain: manifest.main -> index.js L9: L10: const { spawn, execFileSync } = require('child_process'); L11: const fs = require('fs'); L12: const http = require('http'); L13: const https = require('https'); ... L17: L18: const { version: PKG_VERSION } = require('./package.json'); L19: const REPO = 'Furowu/brokre'; ... L45: */ L46: function isLauncherScript(binPath, platform = process.platform) { L47: if (!binPath) return false; ... L69: });

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

index.jsView on unpkg · L9

9L10: const { spawn, execFileSync } = require('child_process'); L11: const fs = require('fs'); L12: const http = require('http'); L13: const https = require('https'); ... L17: L18: const { version: PKG_VERSION } = require('./package.json'); L19: const REPO = 'Furowu/brokre'; ... L45: */ L46: function isLauncherScript(binPath, platform = process.platform) { L47: if (!binPath) return false; ... L69: });

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

index.jsView on unpkg · L9

postinstall.jsView file

15L16: const { spawnSync } = require('child_process'); L17: const path = require('path'); ... L19: function shouldSkipBinary() { L20: if (process.env.BROKRE_SKIP_AUTO_INSTALL === '1') return true; L21: if (process.env.CI === 'true' || process.env.CI === '1') return true; L22: return false; ... L30: } catch (err) { L31: process.stderr.write( L32: `brokre: postinstall binary download skipped (${err.message})\n` + L33: ' First `brokre` / MCP start will retry. Manual: ' + L34: 'https://raw.githubusercontent.com/Furowu/brokre/main/install.sh\n'

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

postinstall.jsView on unpkg · L15

Source & flagged code

6 flagged

package.jsonView file

Lines 1-42json

1{

2 "name": "brokre",

3 "mcpName": "io.github.Furowu/brokre",

4 "version": "0.2.32",

5 "description": "MCP launcher for brokre \u2014 local credential broker for Cursor, Claude Code, Kimi Code, Trae, OpenClaw, Hermes Agent, ChatClaw, and other MCP clients",

6 "license": "MIT",

7 "author": "brokre contributors",

8 "repository": {

9 "type": "git",

10 "url": "git+https://github.com/Furowu/brokre.git",

11 "directory": "packages/brokre-mcp"

12 },

13 "keywords": [

14 "mcp",

15 "model-context-protocol",

16 "brokre",

17 "credentials",

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L4

18 "ssh",

19 "security",

20 "cursor",

21 "claude"

22 ],

23 "bin": {

24 "brokre": "index.js",

25 "brokre-mcp": "index.js",

26 "brokre-setup-mcp": "setup-mcp.js"

27 },

28 "scripts": {

29 "postinstall": "node postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "setup-mcp": "node setup-mcp.js"

31 },

32 "files": [

33 "index.js",

34 "setup-mcp.js",

35 "postinstall.js",

36 "README.md"

37 ],

38 "engines": {

39 "node": ">=18"

40 }

41}

42

index.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2/**

3 * brokre — MCP launcher for brokre credential broker.

4 *

5 * Spawns `brokre mcp` (stdio). Uses brokre on PATH, or downloads a prebuilt

6 * release from GitHub into ~/.brokre/bin/ on first run.

7 */

8'use strict';

9

10const { spawn, execFileSync

postinstall.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * npm postinstall for brokre:

4 * 1) Best-effort download of the matching native CLI into ~/.brokre/bin

5 * 2) IDE MCP registration via setup-mcp.js

6 *

7 * npm 11+ may skip this script unless allow-scripts includes brokre:

8 * npm install -g brokre --allow-scripts=brokre

9 * First CLI/MCP run still calls ensureBrokreBinary() if this step was skipped.

10 *

11 * Opt out of binary download: BROKRE_SKIP_AUTO_INSTALL=1