Loading npm security reports…

codeplay-common@4.4.6: AI-agent control-surface risk | LPM Firewall

registry / codeplay-common / 4.4.6

codeplay-common@4.4.6

Common build scripts and files

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation silently rewrites the consumer project so its later build fetches and installs remote agent instructions. The downloaded content can replace the project-root AGENTS.md and AGENTS directory.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package, followed by the automatically injected build command.

Impact

An untrusted server can control AI-agent instructions and build-time source in the consumer project.

Mechanism

Lifecycle project mutation followed by unverified remote agent-instruction deployment.

Policy narrative

During npm installation, the package deletes and copies consumer-project files and replaces the build script. The injected build script queries a remote version manifest, downloads an agent-instruction archive, and copies its AGENTS.md and AGENTS directory into the project root. It also installs the current codeplay-common release at runtime. This creates a concealed update path from a package lifecycle hook to a broad AI-agent control surface without user approval or content integrity verification.

Rationale

This package establishes an unconsented lifecycle-to-build chain that can overwrite generic AI-agent instructions from a remote server and self-update through npm. The behavior is a concrete control-surface takeover risk, not ordinary build setup.

Evidence

package.jsonscripts/uninstall.jsscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsbuildCodeplay/AGENTS.md

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/sync-files.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/generate-ai-promo-video.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = codeplay-common@4.4.4 matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.4.4 similarity = 0.941 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

files/generate-ai-promo-video.jsView on unpkg

7const { createHash } = require('node:crypto'); L8: const { spawnSync } = require('node:child_process'); L9:

High

Child Process

Package source references child process execution.

files/generate-ai-promo-video.jsView on unpkg · L7

7const { createHash } = require('node:crypto'); L8: const { spawnSync } = require('node:child_process'); L9: L10: const projectDirectory = __dirname; L11: const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json'); L12: const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8')); L13: const appName = String(capacitorConfig.appName || '').trim(); ... L30: const appFilePrefix = `${appUniqueId}. ${sanitizeFileNamePart(appName)}`; L31: const playStoreDownloadUrl = `https://play.google.com/store/apps/details?id=${encodeURIComponent(packageId)}`; L32: const configuredAppStoreUrl = String(iosStoreConfig.appStoreUrl || '') ... L67: const promoCopyResultPath = path.join(temporaryDirectory, 'promo-copy-result.json'); L68: const ffmpegFallbackDirectory =

Low

Weak Crypto

Package source references weak cryptographic algorithms.

files/generate-ai-promo-video.jsView on unpkg · L7

scripts/sync-files.jsView file

1const fs = require("fs"); L2: const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/sync-files.jsView on unpkg · L1

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView file

111try { L112: execSync(`npm install ${packageName}`, { stdio: "inherit" }); L113: console.log(`✅ "${packageName}" installed successfully.`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView on unpkg · L111

files/iap-install-2.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/iap-install-2.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/iap-install-2.jsView on unpkg

files/buildCodeplay/manifestModification.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = [redacted].js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/buildCodeplay/manifestModification.jsView on unpkg

files/scripts/setup-baseline-profile.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/scripts/setup-baseline-profile.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/scripts/setup-baseline-profile.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node scripts/sync-files.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

files/generate-ai-promo-video.jsView file

Lines 1-27javascript

1// Generate an English app promo video from the original Android capture.

2// Usage: node generate-ai-promo-video.js

3// Optional: node generate-ai-promo-video.js --input path/to/source.mp4 --output path/to/output.mp4

4

5const fs = require('node:fs');

6const path = require('node:path');

7const { createHash } = require('node:crypto');

8const { spawnSync } = require('node:child_process');

9

High

Child Process

Package source references child process execution.

files/generate-ai-promo-video.jsView on unpkg · L7

10const projectDirectory = __dirname;

11const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json');

12const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8'));

13const appName = String(capacitorConfig.appName || '').trim();

Low

Weak Crypto

Package source references weak cryptographic algorithms.

files/generate-ai-promo-video.jsView on unpkg · L7

14const appUniqueId = String(capacitorConfig.android?.APP_UNIQUE_ID ?? '').trim();

15const packageId = String(capacitorConfig.appId || '').trim();

16const iosStoreConfigPath = path.join(projectDirectory, 'Auto-AI-Video', 'ios-store-config.json');

17let iosStoreConfig = {};

18if (fs.existsSync(iosStoreConfigPath)) {

19 try {

20 iosStoreConfig = JSON.parse(fs.readFileSync(iosStoreConfigPath, 'utf8'));

21 } catch {

22 iosStoreConfig = {};

23 }

24}

25

26if (!appName) throw new Error('capacitor.config.json is missing appName.');

27if (!appUniqueId) throw new Error('capacitor.config.json is missing android.APP_UNIQUE_ID.');

•matchType = previous_version_dangerous_delta matchedPackage = codeplay-common@4.4.4 matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.4.4 similarity = 0.941 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

files/generate-ai-promo-video.jsView on unpkg

scripts/sync-files.jsView file

Lines 1-21javascript

1const fs = require("fs");

2const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/sync-files.jsView on unpkg · L1

3

files/buildCodeplay/codeplayBeforeBuild-6.2.jsView file

Lines 91-131javascript

91 { pattern: /IAP-(\d+\.\d+)$/, minVersion: '2.8', isFolder: true , required: true, baseDir: 'js/Ads',mandatoryUpdate: true },

92 { pattern

files/iap-install-2.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/iap-install-2.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/iap-install-2.jsView on unpkg

files/buildCodeplay/manifestModification.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = [redacted].js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/buildCodeplay/manifestModification.jsView on unpkg

files/scripts/setup-baseline-profile.jsView file

•matchType = normalized_sha256 matchedPackage = codeplay-common@4.2.5 matchedPath = files/scripts/setup-baseline-profile.js matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

files/scripts/setup-baseline-profile.jsView on unpkg