Loading npm security reports…

bumper-guard@0.2.6: AI-agent control-surface risk | LPM Firewall

registry / bumper-guard / 0.2.6

bumper-guard@0.2.6

A plain-language safety net for vibe coders. Pauses risky things your AI assistant (Claude Code, Cursor, Codex CLI, Copilot CLI) is about to do, explains them in plain English, and lets you decide.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically alters detected AI-agent configurations, launches a background daemon, and creates login persistence. These changes occur without an explicit setup command.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall during package installation.

Impact

The package takes control of broad agent execution hooks and persists a process across user logins.

Mechanism

Automatic global AI-agent hook installation plus persistent daemon startup.

Policy narrative

On installation, the postinstall script checks for several AI-agent directories and globally modifies each detected agent's configuration to run package hook scripts. It then starts its daemon detached and installs an operating-system login persistence mechanism. This is unconsented install-time mutation of foreign, broad AI-agent control surfaces combined with persistence.

Rationale

The package's install hook automatically changes global Claude, Cursor, Copilot, and Codex control settings and enables a persistent background process. This meets the install-time AI-agent control-surface abuse boundary even though no secret theft was found.

Evidence

package.jsonsrc/installers/postinstall.jssrc/installers/claude-code.jssrc/installers/cursor.jssrc/installers/codex.jssrc/installers/autostart.jssrc/account.js~/.claude/settings.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/installers/postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node src/installers/postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/installers/autostart.jsView file

3Trigger-reachable persistence chain: scripts.postinstall -> src/installers/postinstall.js -> src/installers/autostart.js L3: const path = require("path"); L4: const { execFileSync } = require("child_process"); L5: ... L10: L11: const BIN_PATH = path.join(__dirname, "..", "..", "bin", "bumper.js"); L12: const LAUNCH_AGENT_LABEL = "com.bumper.autostart"; ... L26: const WIN_STARTUP_DIR = () => L27: path.join(process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming"), "Microsoft", "Windows", "Start Menu", "Programs", "Startup"); L28: const WIN_LAUNCHER_PATH = () => path.join(WIN_STARTUP_DIR(), "BumperAutostart.vbs"); ... L79: fs.writeFileSync(LAUNCH_AGENT_PATH, plistContents()); L80: run("launchctl", ["load", "-w", LAUNCH_AGENT_PATH]); L81: return { platform: "darwin", mechanism: "

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

src/installers/autostart.jsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = bumper-guard@0.2.4 matchedPath = src/installers/autostart.js matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/installers/autostart.jsView on unpkg

3const path = require("path"); L4: const { execFileSync } = require("child_process"); L5: ... L10: L11: const BIN_PATH = path.join(__dirname, "..", "..", "bin", "bumper.js"); L12: const LAUNCH_AGENT_LABEL = "com.bumper.autostart"; ... L26: const WIN_STARTUP_DIR = () => L27: path.join(process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming"), "Microsoft", "Windows", "Start Menu", "Programs", "Startup"); L28: const WIN_LAUNCHER_PATH = () => path.join(WIN_STARTUP_DIR(), "BumperAutostart.vbs"); ... L79: fs.writeFileSync(LAUNCH_AGENT_PATH, plistContents()); L80: run("launchctl", ["load", "-w", LAUNCH_AGENT_PATH]); L81: return { platform: "darwin", mechanism: "launchd LaunchAgent", ref: LAUNCH_AGENT_PATH };

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/installers/autostart.jsView on unpkg · L3

src/account.jsView file

•matchType = normalized_sha256 matchedPackage = bumper-guard@0.2.4 matchedPath = src/account.js matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/account.jsView on unpkg

src/policy.jsView file

•matchType = normalized_sha256 matchedPackage = bumper-guard@0.2.4 matchedPath = src/policy.js matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/policy.jsView on unpkg

bin/bumper.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = bumper-guard@0.2.5 matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.5 similarity = 0.895 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/bumper.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "bumper-guard",

3 "version": "0.2.6",

4 "description": "A plain-language safety net for vibe coders. Pauses risky things your AI assistant (Claude Code, Cursor, Codex CLI, Copilot CLI) is about to do, explains them in plain English, and lets you decide.",

5 "bin": {

6 "bumper": "bin/bumper.js"

7 },

8 "main": "src/daemon.js",

9 "type": "commonjs",

10 "files": [

11 "bin",

12 "src",

13 "web",

14 "bumper.policy.example.yaml",

15 "README.md",

16 "LICENSE"

17 ],

18 "scripts": {

19 "start": "node bin/bumper.js start",

20 "postinstall": "node src/installers/postinstall.js || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 },

22 "dependencies": {

23 "@modelcontextprotocol/sdk": "^1.12.0",

24 "commander": "^12.1.0",

25 "express": "^4.21.2",

26 "js-yaml": "^4.1.0",

27 "zod": "^3.23.8"

28 },

29 "engines": {

30 "node": ">=18"

31 },

32 "license": "SEE LICENSE IN LICENSE",

33 "homepage": "https://bumper-guard.pages.dev"

34}

35

src/installers/autostart.jsView file

Lines 1-23javascript

1const fs = require("fs");

2const os = require("os");

3const path = require

src/account.jsView file

•matchType = normalized_sha256 matchedPackage = bumper-guard@0.2.4 matchedPath = src/account.js matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/account.jsView on unpkg

src/policy.jsView file

•matchType = normalized_sha256 matchedPackage = bumper-guard@0.2.4 matchedPath = src/policy.js matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/policy.jsView on unpkg

bin/bumper.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = bumper-guard@0.2.5 matchedIdentity = npm:YnVtcGVyLWd1YXJk:0.2.5 similarity = 0.895 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/bumper.jsView on unpkg