continuum-ai@0.1.4: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

continuum-ai@0.1.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.mjsView file

13L14: await import(postinstallPath);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/postinstall.mjsView on unpkg · L13

dist/infrastructure/cursor/CursorMcpConfig.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L10: var nextEntry = buildContinuumMcpServerEntry(serverPath); L11: var existing = config.mcpServers?.[CONTINUUM_MCP_SERVER_NAME]; L12: if (existing !== undefined && entriesEqual(existing, nextEntry)) { ... L17: ...config, L18: mcpServers: { L19: ...config.mcpServers, L20: [CONTINUUM_MCP_SERVER_NAME]: nextEntry, Write operation from [redacted].js: L138: var commandsDir = resolveCursorCommandsDir(); L139: await mkdir(commandsDir, { recursive: true }); L140: var installed = []; Foreign user/project scope from [redacted].js: L1: import { homedir } from 'node:os'; L2: import { join } from 'node:path';

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/infrastructure/cursor/CursorMcpConfig.jsView on unpkg · L1

dist/infrastructure/cursor/postinstall.jsView file

3async function main() { if (!isNpmGlobalInstall()) { return; } var result = await setupCursor();

Medium

Suspicious Lifecycle Evidence

Global-install postinstall invokes Cursor setup.

dist/infrastructure/cursor/postinstall.jsView on unpkg · L3

dist/infrastructure/cursor/CursorMcpConfigWriter.jsView file

6export async function writeContinuumCursorMcpConfig(serverPath) { var configPath = resolveCursorMcpConfigPath(); await mkdir(resolveCursorHome(), { recursive: true }); var config = {}; if (await fileExists(configPath)) { var raw = await readFile(configPath, 'utf-8'); var parsed = parseCursorMcpConfig(raw); if (!parsed.ok) { return parsed; } config = parsed.value; } var merged = mergeContinuumMcpServer(config, serverPath); if (!merged.updated && await fileExists(configPath)) { return ok({ configPath, updated

Medium

Ai Review Evidence

Setup writes a Continuum MCP entry to ~/.cursor/mcp.json.

dist/infrastructure/cursor/CursorMcpConfigWriter.jsView on unpkg · L6

Source & flagged code

6 flagged

package.jsonView file

Lines 13-53json

13 },

14 "homepage": "https://github.com/allcantara/continuum-ai#readme",

15 "bin": {

16 "continuum": "dist/presentation/cli/cli.js",

17 "continuum-mcp": "dist/presentation/mcp/server.js"

18 },

19 "files": [

20 "dist",

21 "scripts"

22 ],

23 "scripts": {

24 "build": "tsc",

25 "dev": "tsx src/presentation/mcp/server.ts",

26 "start": "node dist/presentation/mcp/server.js",

27 "cli": "tsx src/presentation/cli/cli.ts",

28 "test": "vitest run",

29 "test:watch": "vitest",

30 "lint": "eslint src tests",

31 "typecheck": "tsc --noEmit",

32 "prepublishOnly": "npm run typecheck && npm run lint && npm test && npm run build",

33 "postinstall": "node ./scripts/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "engines": {

36 "node": ">=24.15.0"

37 },

38 "keywords": [

39 "mcp",

40 "context",

41 "memory",

42 "ai",

43 "cursor"

44 ],

45 "license": "MIT",

46 "dependencies": {

47 "@modelcontextprotocol/sdk": "^1.12.1",

48 "commander": "^13.1.0",

49 "zod": "^3.24.2"

50 },

51 "devDependencies": {

52 "@types/node": "^22.15.21",

53 "esbuild": "^0.28.2",

scripts/postinstall.mjsView file

Lines 1-15javascript

1import { existsSync } from 'node:fs';

2import { dirname, join } from 'node:path';

3import { fileURLToPath } from 'node:url';

4

5var postinstallPath = join

dist/infrastructure/cursor/CursorMcpConfig.jsView file

Lines 1-21javascript

1import { err, ok } from '../../application/Result.js';

2import { CONTINUUM_MCP_SERVER_NAME } from './CursorPaths.js';

3export function buildContinuumMcpServerEntry(serverPath) {

4 if (process.platform

dist/infrastructure/cursor/postinstall.jsView file

Lines 1-23javascript

1import { setupCursor } from '../../application/setup/SetupCursorUseCase.js';

2import { isNpmGlobalInstall } from '../npm/isNpmGlobalInstall.js';

3async function main() {

4 if (!isNpmGlobalInstall

dist/infrastructure/cursor/CursorMcpConfigWriter.jsView file

Lines 1-26javascript

1import { access, mkdir, readFile } from 'node:fs/promises';

2import { ok } from '../../application/Result.js';

3import { writeFileAtomically } from '../persistence/filesystem/AtomicFileWriter.js';

4import { resolveCursorHome, resolveCursorMcpConfigPath } from