codeplay-common@4.3.9
Common build scripts and files
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package creates a remote, unpinned AI-agent instruction update path during its build workflow. This is a real capability risk, but it is not an unconsented install-time AI control-surface mutation.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The consuming project runs npm run build after installation.
Impact
A compromised or changed vendor endpoint could alter instructions read by AI coding agents in the project.
Mechanism
Remote agent-instruction download and project-root overwrite.
AI rationale
The package creates a remote, unpinned AI-agent instruction update path during its build workflow. This is a real capability risk, but it is not an unconsented install-time AI control-surface mutation.
Evidence
package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsREADME.mdAGENTS.mdAGENTS/
Network endpoints2
htmlcodeplay.com/code-play-plugin/versions.jsonhtmlcodeplay.com/code-play-plugin/agents-<version>.zip
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Install hooks copy build tooling into the consuming project and replace its build command.
- A build command fetches a server-selected ZIP and writes AGENTS.md and AGENTS/ at the project root.
- The downloaded agent instructions are not integrity-pinned or signed.
- The build entry point invokes the agent-instruction sync.
Evidence against
- The agent-instruction download is not executed by preinstall or postinstall.
- The source documents this behavior and limits it to npm run build.
- No credential harvesting or unrelated data exfiltration was found in the inspected lifecycle and build code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/sync-files.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/generate-ai-promo-video.jsView file
7const { createHash } = require('node:crypto');
L8: const { spawnSync } = require('node:child_process');
L9:
High
Child Process
Package source references child process execution.
files/generate-ai-promo-video.jsView on unpkg · L7scripts/sync-files.jsView file
1const fs = require("fs");
L2: const path = require("path");
Medium
Findings
9 High4 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/generate-ai-promo-video.js
HighShell
HighSame File Env Network Executionfiles/generate-ai-promo-video.js#virtual:normalized:round1
HighCommand Output Exfiltrationfiles/generate-ai-promo-video.js#virtual:normalized:round1
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js
MediumDynamic Requirescripts/sync-files.js
MediumNetwork
Affected versions and remediation
This report applies to codeplay-common@4.3.9.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.3.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.