codeplay-common@4.5.4
Common build scripts and files
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package installs a build helper that can automatically replace project agent instructions with newer publisher-hosted content when a build runs. This warrants a warning for agent configuration risk, while the inspected source does not establish a malicious install-hook action.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Running the project build script after this package has installed its build helper.
Impact
Publisher-controlled instructions can change the guidance available to AI agents working in the project.
Mechanism
The helper checks the publisher’s version data, downloads the corresponding archive, and replaces AGENTS.md and files in the project AGENTS directory.
AI rationale
The package installs a build helper that can automatically replace project agent instructions with newer publisher-hosted content when a build runs. This warrants a warning for agent configuration risk, while the inspected source does not establish a malicious install-hook action.
Evidence
files/buildCodeplay/codeplayBeforeBuild-6.2.jsscripts/sync-files.jsREADME.mdAGENTS.mdAGENTS/
Network endpoints1
htmlcodeplay.com/code-play-plugin/
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The project build script checks for a newer agent-instructions version and downloads its archive from htmlcodeplay.com.
- When that build step runs, it recursively replaces the project’s AGENTS directory and copies the downloaded AGENTS.md into the project root.
- The package’s preinstall and postinstall hooks run cleanup and file synchronization scripts; the README says agent instructions update during npm run build, not npm installation.
- Postinstall also rewrites the project build script to run the package build helper.
Evidence against
- The agent-instructions update is reached from the build helper, not directly from either lifecycle script.
- The update skips downloading when the project already has its required agent files and the server version is not newer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.preinstall = node scripts/uninstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgfiles/generate-ai-promo-video.jsView file
17const { createHash } = require('node:crypto');
L18: const { spawnSync } = require('node:child_process');
L19: const { createInterface } = require('node:readline/promises');
High
Child Process
Package source references child process execution.
files/generate-ai-promo-video.jsView on unpkg · L1717const { createHash } = require('node:crypto');
L18: const { spawnSync } = require('node:child_process');
L19: const { createInterface } = require('node:readline/promises');
L20:
L21: const projectDirectory = __dirname;
L22: const capacitorConfigPath = path.join(projectDirectory, 'capacitor.config.json');
L23: const capacitorConfig = JSON.parse(fs.readFileSync(capacitorConfigPath, 'utf8'));
L24: const appName = String(capacitorConfig.appName || '').trim();
...
L41: const appFilePrefix = `${appUniqueId}. ${sanitizeFileNamePart(appName)}`;
L42: const playStoreDownloadUrl = `https://play.google.com/store/apps/details?id=${encodeURIComponent(packageId)}`;
L43: const configuredAppStoreUrl = String(iosStoreConfig.appStoreUrl || '')
...
L88: const promoCopyResultPath = path.join(temporaryDir
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltafiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processfiles/generate-ai-promo-video.js
HighShell
HighRuntime Package Installfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighSemantic Analysis Limitedfiles/buildCodeplay/codeplayBeforeBuild-6.2.js
HighKnown Malware Source Similarityfiles/iap-install-2.js
HighKnown Malware Source Similarityfiles/buildCodeplay/manifestModification.js
HighKnown Malware Source Similarityfiles/scripts/setup-baseline-profile.js
MediumDynamic Requirescripts/sync-files.js
MediumNetwork
Affected versions and remediation
This report applies to codeplay-common@4.5.4.
See all versions of codeplay-common for other recorded verdicts.
- Review the evidence and your use of codeplay-common@4.5.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.