codeplay-common@4.4.1
Common build scripts and files
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe agent-instruction mutation is reachable through the generated build command and can affect later agent behavior, so a warning is warranted. The inspected source does not establish a malicious payload or credential theft.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
After installation, a consumer runs the generated build command.
Impact
Remote updates can change instructions that later guide AI agents working in the project. No malicious payload is established by the inspected source.
Mechanism
The build script fetches a versioned archive from htmlcodeplay.com and copies its AGENTS.md and AGENTS contents into the project, replacing existing files.
AI rationale
The agent-instruction mutation is reachable through the generated build command and can affect later agent behavior, so a warning is warranted. The inspected source does not establish a malicious payload or credential theft.
Evidence
package.jsonscripts/sync-files.jsscripts/uninstall.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsAGENTS.mdAGENTS/
Network endpoints1
htmlcodeplay.com
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The preinstall and postinstall hooks run uninstall.js and sync-files.js, respectively.
- The copied build script targets AGENTS.md and AGENTS under the consumer project root.
- Postinstall copies package files and adds a build command that runs codeplayBeforeBuild-6.2.js.
- When that build script runs, it fetches versioned instructions from htmlcodeplay.com and writes them to AGENTS.md and AGENTS, replacing existing content.
- The generated build script calls syncAgentInstructions as part of its main routine.
- The preinstall cleanup recursively removes project build directories and deletes a baseline profile backup.
Evidence against
- The agent-instruction update runs through the generated build command, not directly from either npm lifecycle hook.
- The updater checks local and remote versions before updating; the package source does not establish credential theft or a malicious instruction payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/sync-files.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/generate-ai-promo-video.jsView file
7const { createHash } = require('node:crypto');
L8: const { spawnSync } = require('node:child_process');
L9:
High
Child Process
Package source references child process execution.
files/generate-ai-promo-video.jsView on unpkg · L77const { createHash } = require('node:crypto');
L8: const { spawnSync } = require('node:child_process');
L9:
L10: const projectDirectory = __dirname;
L11: const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json');
L12: const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8'));
L13: const appName = String(capacitorConfig.appName || '').trim();
...
L30: const appFilePrefix = `${appUniqueId}. ${sanitizeFileNamePart(appName)}`;
L31: const playStoreDownloadUrl = `https://play.google.com/store/apps/details?id=${encodeURIComponent(packageId)}`;
L32: const configuredAppStoreUrl = String(iosStoreConfig.appStoreUrl || '')
...
L107: title_line_2: { type: 'string' },
L108: body: { type: 'string' },
Findings
1 Critical9 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltafiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/generate-ai-promo-video.js
HighShell
HighCommand Output Exfiltrationfiles/take-screen-image.js#virtual:normalized:round1
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighSemantic Analysis Limitedfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js
Affected versions and remediation
This report applies to codeplay-common@4.4.1.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.