Loading npm security reports…

capix-code@1.6.10: Suspicious npm security report (Warn) | LPM Firewall

registry / capix-code / 1.6.10

capix-code@1.6.10

Capix Code — decentralized AI coding agent with GPU marketplace

AI Security Review

scanned 1h ago · by lpm-firewall-ai

The npm postinstall hook fetches an unsigned remote archive and installs its contents into `~/.capix-code`. It also installs an MCP dependency at install time and creates a credential-refresh wrapper for the package-owned MCP runtime.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install of capix-code@1.6.10

Impact

A release-host or dependency compromise can place executable code and MCP runtime files in the user's home directory; source inspection cannot verify the remote payload.

Mechanism

unverified remote payload download plus install-time dependency installation

Rationale

The package is not clean because its automatic lifecycle hook installs unverified remote executable content and an additional runtime dependency. The inspected source supports a warning for a staged payload/supply-chain risk rather than a malicious block verdict.

Evidence

package.jsonscripts/postinstall.cjsbin/capix-code.cjsdist/customer/config/defaults.json~/.capix-code/bin~/.capix-code/engine~/.capix-code/runtime~/.capix-code/config~/.capix-code/mcp~/.capix-code/credentials.json

Network endpoints2

github.com/CapIX-Protocol/Capix-Code/releases/download/v1.6.3/capix-code-1.6.3-{platform}-{arch}-unsigned.{tar.gz|zip}

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/capix-code.cjsView file

2L3: const { spawnSync } = require('node:child_process'); L4: const { chmodSync, cpSync, existsSync, mkdirSync } = require('node:fs');

High

Child Process

Package source references child process execution.

bin/capix-code.cjsView on unpkg · L2

2L3: const { spawnSync } = require('node:child_process'); L4: const { chmodSync, cpSync, existsSync, mkdirSync } = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/capix-code.cjsView on unpkg · L2

scripts/postinstall.cjs#virtual:normalized:round1View file

56console.log('Installing runtime dependencies...'); L57: execSync(`npm install --omit=dev --ignore-scripts`, { cwd: runtimeDir, stdio: 'inherit' }); L58: } ... L69: fs.writeFileSync(mcpEntry, L70: "#!/usr/bin/env node\nconst { readFileSync, writeFileSync, chmodSync, existsSync } = require(\"node:fs\");\nconst { join } = require(\"node:path\");\nconst { homedir } = require(\"... L71: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/postinstall.cjs#virtual:normalized:round1View on unpkg · L56

scripts/postinstall.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = capix-code@1.6.5 matchedIdentity = npm:Y2FwaXgtY29kZQ:1.6.5 similarity = 0.889 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall.cjsView on unpkg

1#!/usr/bin/env node L2: const { execSync } = require('child_process'); L3: const fs = require('fs'); ... L6: L7: if (process.env.CI || process.env.GITHUB_ACTIONS) { L8: console.log('Skipping binary download in CI environment.'); ... L18: const NAME = `capix-code-${VERSION}-${platform}-${arch}-unsigned`; L19: const RELEASE = `https://github.com/CapIX-Protocol/Capix-Code/releases/download/v${VERSION}/${NAME}.${ext}`; L20: L21: const installDir = path.join(os.homedir(), '.capix-code'); L22: const tmpDir = path.join(os.tmpdir(), 'capix-code-install'); ... L54: const runtimeDir = path.join(installDir, 'runtime');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.cjsView on unpkg · L1

56console.log('Installing runtime dependencies...'); L57: execSync(`npm install --omit=dev --ignore-scripts`, { cwd: runtimeDir, stdio: 'inherit' }); L58: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/assert-customer-brand.shView file

•path = scripts/assert-customer-brand.sh kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/assert-customer-brand.shView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 13-53json

13 "dist/customer/config/",

14 "README.md",

15 "LICENSE"

16 ],

17 "engines": {

18 "node": ">=20"

19 },

20 "scripts": {

21 "compile": "tsc --noEmit",

22 "lint": "eslint src/",

23 "format": "prettier --write .",

24 "format:check": "prettier --check .",

25 "test": "vitest run",

26 "test:watch": "vitest",

27 "test:coverage": "vitest run --coverage",

28 "manifest:validate": "node scripts/validate-manifest.mjs manifest/release-manifest.json",

29 "manifest:build": "node scripts/build-manifest.mjs",

30 "resolve-version": "node scripts/resolve-version.mjs",

31 "prepack": "node scripts/prepare-npm-meta.mjs",

32 "pack:npm-platform": "node scripts/prepare-npm-platform.mjs",

33 "postinstall": "node scripts/postinstall.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "devDependencies": {

36 "@ai-sdk/provider": "3.0.8",

37 "@eslint/js": "^9.0.0",

38 "@types/node": "^22.0.0",

39 "@vitest/coverage-v8": "^2.1.0",

40 "eslint": "^9.0.0",

41 "husky": "^9.0.0",

42 "lint-staged": "^15.0.0",

43 "prettier": "^3.0.0",

44 "typescript": "^5.7.0",

45 "typescript-eslint": "^8.0.0",

46 "vitest": "^2.1.0",

47 "@capix/runtime-provider": "file:packages/runtime-provider",

48 "@opencode-ai/plugin": "1.17.18",

49 "@opencode-ai/sdk": "1.17.18",

50 "bun": "^1.3.14",

51 "opencode-ai": "1.17.18"

52 },

53 "lint-staged": {

bin/capix-code.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2

3const { spawnSync } = require('node:child_process');

4const { chmodSync, cpSync, existsSync, mkdirSync } = require(

scripts/postinstall.cjs#virtual:normalized:round1View file

56console.log('Installing runtime dependencies...'); L57: execSync(`npm install --omit=dev --ignore-scripts`, { cwd: runtimeDir, stdio: 'inherit' }); L58: } ... L69: fs.writeFileSync(mcpEntry, L70: "#!/usr/bin/env node\nconst { readFileSync, writeFileSync, chmodSync, existsSync } = require(\"node:fs\");\nconst { join } = require(\"node:path\");\nconst { homedir } = require(\"... L71: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/postinstall.cjs#virtual:normalized:round1View on unpkg · L56

scripts/postinstall.cjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2const { execSync } = require('child_process');

3const fs = require('fs');

4const path

scripts/assert-customer-brand.shView file

•path = scripts/assert-customer-brand.sh kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/assert-customer-brand.shView on unpkg

Lines 36-76javascript

36 }

37

38 const customerSrc = path.join(tmpDir, 'customer');

39 if (fs.existsSync(customerSrc)) {

40 for (const dir of ['bin', 'engine', 'runtime', 'config', 'mcp']) {

41 const src = path.join(customerSrc, dir);

42 const dst = path.join(installDir, dir);

43 if (fs.existsSync(src)) {

44 execSync(`rm -rf "${dst}" && cp -a "${src}" "${dst}"`, { stdio: 'inherit' });

45 }

46 }

47 const binPath = path.join(installDir, 'bin', 'capix-code');

48 if (fs.existsSync(binPath)) {

49 fs.chmodSync(binPath, 0o755);

50 }

51 }

52

53 // Install runtime dependencies (typescript is required by plugin.ts)

54 const runtimeDir = path.join(installDir, 'runtime');

55 if (fs.existsSync(path.join(runtimeDir, 'package.json'))) {

56 console.log('Installing runtime dependencies...');

57 execSync(`npm install --omit=dev --ignore-scripts`, { cwd: runtimeDir, stdio: 'inherit' });

58 }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.cjsView on unpkg · L56

59

60 // Install MCP dependencies if not already bundled

61 const mcpDir = path.join(installDir, 'mcp');

62 const mcpEntry = path.join(mcpDir, 'capix-mcp.js');

63 if (!fs.existsSync(path.join(mcpDir, 'node_modules', '@modelcontextprotocol', 'sdk'))) {

64 console.log('Installing MCP dependencies...');

65 execSync(`npm install capix-mcp@2.1.0`, { cwd: mcpDir, stdio: 'inherit' });

66 // Create wrapper that shares credentials

67 const mcpPkgPath = path.join(mcpDir, 'node_modules', 'capix-mcp', 'dist', 'index.js');

68 if (!fs.existsSync(mcpEntry)) {

69 fs.writeFileSync(mcpEntry,

70 '#!/usr/bin/env node\n' +

71 'const { readFileSync, writeFileSync, chmodSync, existsSync } = require("node:fs");\n' +

72 'const { join } = require("node:path");\n' +

73 'const { homedir } = require("node:os");\n' +

74 'const credPath = join(homedir(), ".capix-code", "credentials.json");\n' +

75 'async function loadMcp() {\n' +

76 ' require(join(homedir(), ".capix-code", "mcp", "node_modules", "capix-mcp", "dist", "index.js"));\n' +