continuum-ai@0.1.1: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

continuum-ai@0.1.1: AI-agent control-surface risk | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.mjsView file

13L14: await import(postinstallPath);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/postinstall.mjsView on unpkg · L13

dist/infrastructure/cursor/CursorMcpConfig.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L10: var nextEntry = buildContinuumMcpServerEntry(serverPath); L11: var existing = config.mcpServers?.[CONTINUUM_MCP_SERVER_NAME]; L12: if (existing !== undefined && entriesEqual(existing, nextEntry)) { ... L17: ...config, L18: mcpServers: { L19: ...config.mcpServers, L20: [CONTINUUM_MCP_SERVER_NAME]: nextEntry, Write operation from [redacted].js: L129: var commandsDir = resolveCursorCommandsDir(); L130: await mkdir(commandsDir, { recursive: true }); L131: var installed = []; Foreign user/project scope from [redacted].js: L1: import { homedir } from 'node:os'; L2: import { join } from 'node:path';

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/infrastructure/cursor/CursorMcpConfig.jsView on unpkg · L1

dist/presentation/cli/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = continuum-ai@0.1.0 matchedIdentity = npm:Y29udGludXVtLWFp:0.1.0 similarity = 0.938 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/presentation/cli/cli.jsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 13-53json

13 },

14 "homepage": "https://github.com/allcantara/continuum-ai#readme",

15 "bin": {

16 "continuum": "dist/presentation/cli/cli.js",

17 "continuum-mcp": "dist/presentation/mcp/server.js"

18 },

19 "files": [

20 "dist",

21 "scripts"

22 ],

23 "scripts": {

24 "build": "tsc",

25 "dev": "tsx src/presentation/mcp/server.ts",

26 "start": "node dist/presentation/mcp/server.js",

27 "cli": "tsx src/presentation/cli/cli.ts",

28 "test": "vitest run",

29 "test:watch": "vitest",

30 "lint": "eslint src tests",

31 "typecheck": "tsc --noEmit",

32 "prepublishOnly": "npm run typecheck && npm run lint && npm test && npm run build",

33 "postinstall": "node ./scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "engines": {

36 "node": ">=24.15.0"

37 },

38 "keywords": [

39 "mcp",

40 "context",

41 "memory",

42 "ai",

43 "cursor"

44 ],

45 "license": "MIT",

46 "dependencies": {

47 "@modelcontextprotocol/sdk": "^1.12.1",

48 "commander": "^13.1.0",

49 "zod": "^3.24.2"

50 },

51 "devDependencies": {

52 "@types/node": "^22.15.21",

53 "eslint": "^9.27.0",

scripts/postinstall.mjsView file

Lines 1-15javascript

1import { existsSync } from 'node:fs';

2import { dirname, join } from 'node:path';

3import { fileURLToPath } from 'node:url';

4

5var postinstallPath = join

dist/infrastructure/cursor/CursorMcpConfig.jsView file

Lines 1-21javascript

1import { err, ok } from '../../application/Result.js';

2import { CONTINUUM_MCP_SERVER_NAME } from './CursorPaths.js';

3export function buildContinuumMcpServerEntry(serverPath) {

4 if (process.platform

dist/presentation/cli/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = continuum-ai@0.1.0 matchedIdentity = npm:Y29udGludXVtLWFp:0.1.0 similarity = 0.938 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/presentation/cli/cli.jsView on unpkg