registry / codeplay-common / 4.3.3
codeplay-common@4.3.3
Common build scripts and files
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe build-time updater can replace project AI-agent instructions without a consent prompt, leaving a concrete agent configuration risk. Because the update is triggered by a later build and the inspected source does not establish malicious content, this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
After installation, a consumer runs the build command rewritten by the postinstall script.
Impact
Later AI coding-agent behavior in that project may be influenced by the replaced instructions.
Mechanism
The build script fetches the vendor's instruction archive and force-copies its AGENTS.md and AGENTS/ contents into the project root without an explicit consent prompt in the inspected flow.
AI rationale
The build-time updater can replace project AI-agent instructions without a consent prompt, leaving a concrete agent configuration risk. Because the update is triggered by a later build and the inspected source does not establish malicious content, this warrants a warning rather than a block.
Evidence
package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsAGENTS.mdAGENTS/
Network endpoints2
htmlcodeplay.com/code-play-plugin/versions.jsonhtmlcodeplay.com/code-play-plugin/agents-${remoteVersion}.zip
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json registers preinstall cleanup and postinstall file synchronization.
- The postinstall script copies bundled files into the consumer project root.
- That script replaces the consumer's build command with one that runs the bundled Codeplay build script.
- The build script calls the agent-instructions updater, which fetches version information from htmlcodeplay.com.
- The updater targets project-root AGENTS.md and AGENTS/ and force-copies downloaded instructions over those destinations.
Evidence against
- The agent-instructions update runs from the build script, rather than directly from either npm lifecycle hook; its downloaded content is not present in the inspected package source.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/sync-files.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/buildCodeplay/apk-store-builder.jsView file
1const { spawn } = require("child_process");
L2: const path = require("path");
High
Child Process
Package source references child process execution.
files/buildCodeplay/apk-store-builder.jsView on unpkg · L1scripts/sync-files.jsView file
1const fs = require("fs");
L2: const path = require("path");
Medium
Findings
1 Critical9 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltafiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/buildCodeplay/apk-store-builder.js
HighShell
HighCommand Output Exfiltrationfiles/take-responsive-screenshot.js#virtual:string-array:round1
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighSemantic Analysis Limitedfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js
Affected versions and remediation
This report applies to codeplay-common@4.3.3.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.3.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.