Loading npm security reports…

capix-code@1.6.11: AI-agent policy block | LPM Firewall

registry / capix-code / 1.6.11

capix-code@1.6.11

Capix Code — decentralized AI coding agent with GPU marketplace

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. An npm postinstall fetches an unsigned remote executable/runtime and installs further dependencies. It then injects Capix provider plugins into OpenCode's user configuration and the package bin launches the downloaded executable.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Installing `capix-code@1.6.11`; later invoking `capix-code`.

Impact

Remote release contents and installed MCP dependency code gain execution through the CLI and can be loaded through OpenCode configuration without an explicit user setup command.

Mechanism

install-time remote payload bootstrap and OpenCode plugin configuration injection

Policy narrative

On npm install, the lifecycle hook downloads an unsigned archive, extracts it into `~/.capix-code`, installs `capix-mcp` with scripts enabled, and writes an OpenCode configuration referencing downloaded local plugin files. The shipped bin subsequently executes the downloaded launcher with the caller's environment. This is unconsented install-time mutation of a foreign AI-agent control surface combined with remote executable staging.

Rationale

Source inspection confirms the lifecycle hook performs the concrete chain; this is not merely a static heuristic. Its install-time OpenCode configuration write and unsigned remote runtime bootstrap meet the blocking boundary.

Evidence

package.jsonscripts/postinstall.cjsbin/capix-code.cjsdist/customer/config/capix-defaults.json~/.capix-code~/.config/opencode/capix-code.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/capix-code.cjsView file

2L3: const { spawnSync } = require('node:child_process'); L4: const { chmodSync, cpSync, existsSync, mkdirSync } = require('node:fs');

High

Child Process

Package source references child process execution.

bin/capix-code.cjsView on unpkg · L2

2L3: const { spawnSync } = require('node:child_process'); L4: const { chmodSync, cpSync, existsSync, mkdirSync } = require('node:fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/capix-code.cjsView on unpkg · L2

scripts/postinstall.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = capix-code@1.6.10 matchedIdentity = npm:Y2FwaXgtY29kZQ:1.6.10 similarity = 0.889 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall.cjsView on unpkg

1#!/usr/bin/env node L2: const { execSync } = require('child_process'); L3: const fs = require('fs'); ... L6: L7: if (process.env.CI || process.env.GITHUB_ACTIONS) { process.exit(0); } L8: ... L13: const NAME = `capix-code-${VERSION}-${plat}-${arch}-unsigned`; L14: const URL = `https://github.com/CapIX-Protocol/Capix-Code/releases/download/v${VERSION}/${NAME}.${ext}`; L15: const ROOT = path.join(os.homedir(), '.capix-code'); L16: const TMP = path.join(os.tmpdir(), 'capix-code-install');

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/postinstall.cjsView on unpkg · L1

37console.log('Installing runtime dependencies...'); L38: execSync('npm install --omit=dev --ignore-scripts', { cwd: path.join(ROOT, 'runtime'), stdio: 'inherit' }); L39:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.cjsView on unpkg · L37

scripts/assert-customer-brand.shView file

•path = scripts/assert-customer-brand.sh kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/assert-customer-brand.shView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 13-53json

13 "dist/customer/config/",

14 "README.md",

15 "LICENSE"

16 ],

17 "engines": {

18 "node": ">=20"

19 },

20 "scripts": {

21 "compile": "tsc --noEmit",

22 "lint": "eslint src/",

23 "format": "prettier --write .",

24 "format:check": "prettier --check .",

25 "test": "vitest run",

26 "test:watch": "vitest",

27 "test:coverage": "vitest run --coverage",

28 "manifest:validate": "node scripts/validate-manifest.mjs manifest/release-manifest.json",

29 "manifest:build": "node scripts/build-manifest.mjs",

30 "resolve-version": "node scripts/resolve-version.mjs",

31 "prepack": "node scripts/prepare-npm-meta.mjs",

32 "pack:npm-platform": "node scripts/prepare-npm-platform.mjs",

33 "postinstall": "node scripts/postinstall.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "devDependencies": {

36 "@ai-sdk/provider": "3.0.8",

37 "@eslint/js": "^9.0.0",

38 "@types/node": "^22.0.0",

39 "@vitest/coverage-v8": "^2.1.0",

40 "eslint": "^9.0.0",

41 "husky": "^9.0.0",

42 "lint-staged": "^15.0.0",

43 "prettier": "^3.0.0",

44 "typescript": "^5.7.0",

45 "typescript-eslint": "^8.0.0",

46 "vitest": "^2.1.0",

47 "@capix/runtime-provider": "file:packages/runtime-provider",

48 "@opencode-ai/plugin": "1.17.18",

49 "@opencode-ai/sdk": "1.17.18",

50 "bun": "^1.3.14",

51 "opencode-ai": "1.17.18"

52 },

53 "lint-staged": {

bin/capix-code.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2

3const { spawnSync } = require('node:child_process');

4const { chmodSync, cpSync, existsSync, mkdirSync } = require(

scripts/postinstall.cjsView file

Lines 1-57javascript

1#!/usr/bin/env node

2const { execSync } = require('child_process');

3const fs = require('fs');

4const path

scripts/assert-customer-brand.shView file

•path = scripts/assert-customer-brand.sh kind = build_helper sizeBytes = 2018 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/assert-customer-brand.shView on unpkg