registry / AI-agent capability abuse / codeplay-common / 4.3.8

codeplay-common@4.3.8

Common build scripts and files

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This package establishes a server-controlled AI-agent instruction update path through an install-injected build script. The source documents the behavior and does not show direct credential theft or install-time agent-file writes.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install modifies the project build script; npm run build activates the download.

Impact

A server-controlled AGENTS.md can influence AI agents working in the project.

Mechanism

Remote agent-instruction archive download and project-root overwrite.

AI rationale

Evidence

package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsREADME.mdAGENTS.mdAGENTS/.codeplay-version

Network endpoints2

htmlcodeplay.com/code-play-plugin/versions.jsonhtmlcodeplay.com/code-play-plugin/${zipName}

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Install hooks delete and copy project files, then rewrite the project's npm scripts.
The injected build script fetches a server-selected archive and writes AGENTS.md and AGENTS/ at the project root.
The remote archive is structurally checked but is not authenticated or integrity-pinned.

Evidence against

Agent instruction updates occur during npm run build, not directly during installation.
The README clearly documents the agent-file update behavior.
No credential harvesting or unrelated data exfiltration was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 316 KB of source, external domains: 127.0.0.1, api.openai.com, developers.google.com, htmlcodeplay.com, play.google.com, schemas.android.com

Source & flagged code

10 flagged

package.jsonView file

•scripts.postinstall = node scripts/sync-files.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/generate-ai-promo-video.jsView file

Lines 1-27javascript

1// Generate an English app promo video from the original Android capture.

2// Usage: node generate-ai-promo-video.js

3// Optional: node generate-ai-promo-video.js --input path/to/source.mp4 --output path/to/output.mp4

5const fs = require('node:fs');

6const path = require('node:path');

7const { createHash } = require('node:crypto');

8const { spawnSync } = require('node:child_process');

High

Child Process

Package source references child process execution.

files/generate-ai-promo-video.jsView on unpkg · L7

10const projectDirectory = __dirname;

11const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json');

12const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8'));

13const appName = String(capacitorConfig.appName || '').trim();

14const appUniqueId = String(capacitorConfig.android?.APP_UNIQUE_ID ?? '').trim();

15const packageId = String(capacitorConfig.appId || '').trim();

17if (!appName) throw new Error('capacitor.config.json is missing appName.');

18if (!appUniqueId) throw new Error('capacitor.config.json is missing android.APP_UNIQUE_ID.');

19if (!packageId) throw new Error('capacitor.config.json is missing appId.');

21const appFilePrefix = `${appUniqueId}. ${sanitizeFileNamePart(appName)}`;

22const playStoreDownloadUrl = `https://play.google.com/store/apps/details?id=${encodeURIComponent(packageId)}`;

23const sourceVideoDirectory = path.join(projectDirectory, 'Auto-Screenshot', 'Video', 'Output');

24const outputVideoDirectory = path.join(projectDirectory, 'Auto-AI-Video');

25const spatialXrDirectory = path.join(outputVideoDirectory, 'Google-Play-XR-Spatial');

26const spatialXrVideoPath = path.join(

27 spatialXrDirectory,

scripts/sync-files.jsView file

Lines 1-21javascript

1const fs = require("fs");

2const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/sync-files.jsView on unpkg · L1

files/generate-ai-promo-video.js#virtual:normalized:round1View file

311- Each kicker: 2-30 characters. Each title line: 1-22 characters. Body: 8-72 characters. L312: - Narration must fit its scene"s maximum word count. Use natural spoken English for a warm UK female voice.\n- Keep captions punchy, specific and readable. Prefer user benefits and... L313: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

files/generate-ai-promo-video.js#virtual:normalized:round1View on unpkg · L311

310- APP_UNIQUE_ID is internal and must never appear in audience-facing copy. L311: - Each kicker: 2-30 characters. Each title line: 1-22 characters. Body: 8-72 characters. L312: - Narration must fit its scene"s maximum word count. Use natural spoken English for a warm UK female voice.\n- Keep captions punchy, specific and readable. Prefer user benefits and... L313: );

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

files/generate-ai-promo-video.js#virtual:normalized:round1View on unpkg · L310

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView file

Lines 91-131javascript

91 { pattern: /IAP-(\d+\.\d+)$/, minVersion: '2.8', isFolder: true , required: true, baseDir: 'js/Ads',mandatoryUpdate: true },

92 { pattern

files/iap-install-2.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/iap-install-2.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/iap-install-2.jsView on unpkg

files/buildCodeplay/manifestModification.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = [redacted].js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/buildCodeplay/manifestModification.jsView on unpkg

files/scripts/setup-baseline-profile.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/scripts/setup-baseline-profile.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/scripts/setup-baseline-profile.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/sync-files.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/generate-ai-promo-video.jsView file

7const { createHash } = require('node:crypto'); L8: const { spawnSync } = require('node:child_process'); L9:

High

Child Process

Package source references child process execution.

files/generate-ai-promo-video.jsView on unpkg · L7

scripts/sync-files.jsView file

1const fs = require("fs"); L2: const path = require("path");

Medium

Findings

1 Critical9 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltafiles/buildCodeplay/codeplayBeforeBuild-6.2.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processfiles/generate-ai-promo-video.js

HighShell

HighSame File Env Network Executionfiles/generate-ai-promo-video.js#virtual:normalized:round1

HighCommand Output Exfiltrationfiles/generate-ai-promo-video.js#virtual:normalized:round1

HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js

HighKnown Malware Source Similarityfiles/iap-install-2.js

HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js

HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js

Affected versions and remediation

This report applies to codeplay-common@4.3.8.

See all versions of codeplay-common for other recorded verdicts.

Review the evidence and your use of codeplay-common@4.3.8 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-27 07:41:07.850Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.