registry / codeplay-common / 4.4.3
codeplay-common@4.4.3
Common build scripts and files
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe automatic build workflow writes remotely sourced instructions into the consumer's agent configuration, creating a concrete agent-control risk. Archive path validation reduces traversal risk but does not establish consent for replacing those instructions.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The consumer runs the registered build command after installation.
Impact
Publisher-controlled instructions may influence agents working in the consuming project; no credential theft or downloaded code execution was established.
Mechanism
The build script checks a remote version and copies the fetched AGENTS.md into the project root, then force-copies files into AGENTS/.
AI rationale
The automatic build workflow writes remotely sourced instructions into the consumer's agent configuration, creating a concrete agent-control risk. Archive path validation reduces traversal risk but does not establish consent for replacing those instructions.
Evidence
package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsAGENTS.mdAGENTS/
Network endpoints1
htmlcodeplay.com
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The postinstall runs the file-sync script, which registers the bundled build script as the consumer's build command.
- The build script calls the agent-instruction sync routine as part of its automatic build workflow.
- The routine downloads versioned instructions from the package vendor's host.
- The routine copies the downloaded instructions into the project root and force-overwrites files in the agent-instructions directory.
- The source identifies the project-root targets as AGENTS.md and AGENTS.
Evidence against
- The archive validator rejects absolute paths and parent-directory traversal before extraction.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node scripts/uninstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/generate-ai-promo-video.jsView file
7const { createHash } = require('node:crypto');
L8: const { spawnSync } = require('node:child_process');
L9:
High
Child Process
Package source references child process execution.
files/generate-ai-promo-video.jsView on unpkg · L77const { createHash } = require('node:crypto');
L8: const { spawnSync } = require('node:child_process');
L9:
L10: const projectDirectory = __dirname;
L11: const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json');
L12: const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8'));
L13: const appName = String(capacitorConfig.appName || '').trim();
...
L30: const appFilePrefix = `${appUniqueId}. ${sanitizeFileNamePart(appName)}`;
L31: const playStoreDownloadUrl = `https://play.google.com/store/apps/details?id=${encodeURIComponent(packageId)}`;
L32: const configuredAppStoreUrl = String(iosStoreConfig.appStoreUrl || '')
...
L107: title_line_2: { type: 'string' },
L108: body: { type: 'string' },
Findings
1 Critical9 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltafiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/generate-ai-promo-video.js
HighShell
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighSemantic Analysis Limitedfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/take-screen-image.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js
Medium
Affected versions and remediation
This report applies to codeplay-common@4.4.3.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.4.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.