registry / codeplay-common / 4.4.7
codeplay-common@4.4.7
Common build scripts and files
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is an unconsented lifecycle-created path to a broad AI-agent control surface and remote project-file updates. It does not meet the narrower install-time block condition because the agent-file mutation runs during the rewritten build command, not directly in a lifecycle hook.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package, then running the consumer project's build command.
Impact
A remote server can change instructions presented to AI agents in the consumer project and place future-build code in that project.
Mechanism
Lifecycle script injection followed by remote agent-instruction and plugin synchronization.
AI rationale
This is an unconsented lifecycle-created path to a broad AI-agent control surface and remote project-file updates. It does not meet the narrower install-time block condition because the agent-file mutation runs during the rewritten build command, not directly in a lifecycle hook.
Evidence
package.jsonscripts/sync-files.jsfiles/buildCodeplay/codeplayBeforeBuild-6.2.jsbuildCodeplay/AGENTS.mdAGENTS/src/
Network endpoints2
htmlcodeplay.com/code-play-plugin/versions.jsonhtmlcodeplay.com/code-play-plugin/
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Install hooks copy package files into the consumer project and replace its build command.
- The installed build command fetches a server-selected archive and overwrites root-level agent instruction files.
- The remote archive has path checks but no signature or hash verification, so the server controls future instruction content.
- The build script also downloads server-selected plugin files into the project.
Evidence against
- The manifest has no dependencies, so there is no runtime self-dependency chain.
- The lifecycle scripts themselves only delete and copy files; the network and agent update run when the replaced build command is invoked.
- The OpenAI request is confined to an explicitly invoked promo-video tool and sends only its generated prompt and image frames.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node scripts/uninstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/generate-ai-promo-video.jsView file
7const { createHash } = require('node:crypto');
L8: const { spawnSync } = require('node:child_process');
L9:
High
Child Process
Package source references child process execution.
files/generate-ai-promo-video.jsView on unpkg · L7•matchType = normalized_sha256
matchedPackage = codeplay-common@4.4.6
matchedPath = files/generate-ai-promo-video.js
matchedIdentity = npm:Y29kZXBsYXktY29tbW9u:4.4.6
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
Findings
9 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/generate-ai-promo-video.js
HighShell
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/generate-ai-promo-video.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/take-screen-image.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
MediumDynamic Requirescripts/sync-files.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to codeplay-common@4.4.7.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.4.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.