codeplay-common@4.4.4

Common build scripts and files

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package does not show a self-dependency chain or direct credential theft, but it installs persistent build tooling that remotely replaces project-root AI-agent instructions. This is a concrete agent-extension lifecycle risk that warrants a warning.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package, followed by the consuming project's build command.

Impact

A remote server can change instructions consumed by AI agents in the project and can alter build behavior.

Mechanism

Lifecycle project mutation followed by remote agent-instruction replacement.

AI rationale

Evidence

package.jsonscripts/sync-files.jsscripts/uninstall.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsfiles/generate-ai-promo-video.jsbuildCodeplay/codeplayBeforeBuild-6.2.jsAGENTS.mdAGENTS/

Network endpoints2

htmlcodeplay.com/code-play-plugin/versions.jsonhtmlcodeplay.com/code-play-plugin/${zipName}

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Install hooks delete and copy files in the consuming project, then rewrite its package scripts.
The copied build script downloads version-selected agent instructions from a remote server and overwrites AGENTS.md and AGENTS/.
The remote agent update runs automatically when the injected build script is invoked.
A separate user-invoked video tool can call Codex with rules ignored, though it requests a read-only sandbox.

Evidence against

No runtime dependency on codeplay-common itself is declared, so there is no nested lifecycle chain.
The OpenAI request is only reached by an explicit video-generation command and uses the configured API key.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node scripts/sync-files.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/generate-ai-promo-video.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = codeplay-common@4.3.9 matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.3.9 similarity = 0.882 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

files/generate-ai-promo-video.jsView on unpkg

7const { createHash } = require('node:crypto'); L8: const { spawnSync } = require('node:child_process'); L9:

High

Child Process

Package source references child process execution.

files/generate-ai-promo-video.jsView on unpkg · L7

7const { createHash } = require('node:crypto'); L8: const { spawnSync } = require('node:child_process'); L9: L10: const projectDirectory = __dirname; L11: const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json'); L12: const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8')); L13: const appName = String(capacitorConfig.appName || '').trim(); ... L30: const appFilePrefix = `${appUniqueId}. ${sanitizeFileNamePart(appName)}`; L31: const playStoreDownloadUrl = `https://play.google.com/store/apps/details?id=${encodeURIComponent(packageId)}`; L32: const configuredAppStoreUrl = String(iosStoreConfig.appStoreUrl || '') ... L107: title_line_2: { type: 'string' }, L108: body: { type: 'string' },

Low

Weak Crypto

Package source references weak cryptographic algorithms.

files/generate-ai-promo-video.jsView on unpkg · L7

scripts/sync-files.jsView file

1const fs = require("fs"); L2: const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/sync-files.jsView on unpkg · L1

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView file

111try { L112: execSync(`npm install ${packageName}`, { stdio: "inherit" }); L113: console.log(`✅ "${packageName}" installed successfully.`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkg · L111

files/iap-install-2.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/iap-install-2.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/iap-install-2.jsView on unpkg

files/buildCodeplay/manifestModification.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = [redacted].js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/buildCodeplay/manifestModification.jsView on unpkg

files/scripts/setup-baseline-profile.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/scripts/setup-baseline-profile.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/scripts/setup-baseline-profile.jsView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/sync-files.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/generate-ai-promo-video.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

files/generate-ai-promo-video.jsView on unpkg

7const { createHash } = require('node:crypto'); L8: const { spawnSync } = require('node:child_process'); L9:

High

Child Process

Findings

1 Critical7 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltafiles/generate-ai-promo-video.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processfiles/generate-ai-promo-video.js

HighShell

HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js

HighKnown Malware Source Similarityfiles/iap-install-2.js

HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js

HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js

MediumDynamic Requirescripts/sync-files.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

Affected versions and remediation

This report applies to codeplay-common@4.4.4.

See all versions of codeplay-common for other recorded verdicts.

Review the evidence and your use of codeplay-common@4.4.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-29 12:59:19.933Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.