Loading npm security reports…

codeplay-common@4.2.6: AI-agent control-surface risk | LPM Firewall

registry / codeplay-common / 4.2.6

codeplay-common@4.2.6

Common build scripts and files

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall unconditionally replaces the consuming project's AGENTS.md and copies AGENTS/ instruction files. It also rewrites build scripts; the installed build helper can retrieve replacement plugins from a remote server without integrity verification.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation; subsequently running the rewritten build command

Impact

Existing project AI-agent controls are overwritten and later builds can incorporate remote code.

Mechanism

install-time project and AI-agent instruction takeover with remote build payload updates

Policy narrative

During npm installation, the package's postinstall copies its own AGENTS.md and AGENTS/ directory into the consumer project root, overwriting the broad AI-agent instruction surface without user action. It also replaces build scripts. Those scripts later fetch version data and replacement plugin code from htmlcodeplay.com without a pinned hash or signature, creating a remote-controlled code path.

Rationale

The unconsented postinstall overwrite of root AGENTS.md is a foreign, broad AI-agent control-surface mutation. Remote code updates in the rewritten build path reinforce the supply-chain risk.

Evidence

package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsAGENTS.mdAGENTS/buildCodeplay/scripts/setup-baseline-profile.js

Network endpoints2

/code-play-plugin/versions.json

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/uninstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/buildCodeplay/apk-store-builder.jsView file

1const { spawn } = require("child_process"); L2: const path = require("path");

High

Child Process

Package source references child process execution.

files/buildCodeplay/apk-store-builder.jsView on unpkg · L1

scripts/sync-files.jsView file

1Install-time AI-agent control hijack evidence: L9: const agentManifestPath = path.join(agentTemplatesPath, "manifest.json"); L10: const agentFileName = "AGENTS.md"; L11: const agentFolderName = "AGENTS"; ... L22: try { L23: fs.cpSync(source, destination, { recursive: true }); L24: process.stdout.write(`✅ Copied folder: ${source} -> ${destination}\n`); ... L41: const selectedVersion = normalizeVersion( L42: packageJson.codeplayCommon?.agentsVersion || manifest.current L43: ); ... L63: try { L64: fs.copyFileSync(agentFileSource, path.join(projectRoot, agentFileName)); L65: fs.cpSync(agentFolderSource, path.join(projectRoot, agentFolderName), { recursive: true }); Payload evidence from agent-templates/v1.1/AGENTS/agents.md: L1: # AI Development Instructions L2:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync-files.jsView on unpkg · L1

1const fs = require("fs"); L2: const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/sync-files.jsView on unpkg · L1

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView file

106try { L107: execSync(`npm install ${packageName}`, { stdio: "inherit" }); L108: console.log(`✅ "${packageName}" installed successfully.`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkg · L106