registry / codeplay-common / 4.3.2
codeplay-common@4.3.2
Common build scripts and files
AI Security Review
scanned 4d ago · by lpm-firewall-aiSource inspection confirms an automatic install-time setup that wires a later build helper to update project-root agent instructions from a publisher-hosted archive. Because the agent configuration change requires a subsequent consumer build, the source supports a warning for agent-extension lifecycle risk, not a publish block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A consumer installs the package and later runs the wired build command.
Impact
Publisher-controlled instructions can change the guidance used by project AI agents; source does not show an install hook directly performing that update.
Mechanism
The build helper checks a remote version, downloads an archive from htmlcodeplay.com, validates its paths, then copies its agent instruction files into the project root.
AI rationale
Source inspection confirms an automatic install-time setup that wires a later build helper to update project-root agent instructions from a publisher-hosted archive. Because the agent configuration change requires a subsequent consumer build, the source supports a warning for agent-extension lifecycle risk, not a publish block.
Evidence
package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsAGENTS.mdAGENTS/
Network endpoints2
htmlcodeplay.com/code-play-plugin/versions.jsonhtmlcodeplay.com/code-play-plugin/{zipName}
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs preinstall cleanup and postinstall synchronization automatically.
- The postinstall copies package files into the consumer project, wires a build script to run the build helper, and rewrites the consumer package.json.
- When that helper runs during a build, it fetches versioned agent instructions and overwrites the project-root AGENTS.md and AGENTS directory.
Evidence against
- The agent-instruction update runs from the build helper, not directly from either install hook; the package-specific helper is wired into the consumer build command.
- The preinstall cleanup targets named build artifacts and files associated with this package, which is consistent with removing stale generated files.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/sync-files.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/buildCodeplay/apk-store-builder.jsView file
1const { spawn } = require("child_process");
L2: const path = require("path");
High
Child Process
Package source references child process execution.
files/buildCodeplay/apk-store-builder.jsView on unpkg · L1scripts/sync-files.jsView file
1const fs = require("fs");
L2: const path = require("path");
Medium
Findings
1 Critical8 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltafiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/buildCodeplay/apk-store-builder.js
HighShell
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighSemantic Analysis Limitedfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js
MediumDynamic Requirescripts/sync-files.js
MediumNetwork
Affected versions and remediation
This report applies to codeplay-common@4.3.2.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.3.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.