devez-vibe@1.7.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

devez-vibe@1.7.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node install-skills.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

41"postinstall": "node install-skills.mjs"

High

Ai Review Evidence

The package runs an installer automatically after npm installation.

package.jsonView on unpkg · L41

install-skills.mjsView file

1import { L2: copyFileSync, L3: existsSync, L4: mkdirSync, L5: readdirSync, ... L14: const userHome = homedir(); L15: const codexHome = process.env.CODEX_HOME?.trim() || join(userHome, ".codex"); L16: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(userHome, ".claude"); L17: ... L23: function copyTree(source, destination) { L24: mkdirSync(destination, { recursive: true }); L25: for (const entry of readdirSync(source, { withFileTypes: true })) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install-skills.mjsView on unpkg · L1

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 24382464 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

bridge/claude-agent-sdk-bridge.mjsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7ad776c0d0eeac91 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = devez-vibe@1.6.59 matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.59 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

Source & flagged code

7 flagged

package.jsonView file

Lines 21-47json

21 "dvz": "bin/dvz.exe"

22 },

23 "files": [

24 "bin/dvz.exe",

25 "bridge/claude-agent-sdk-bridge.mjs",

26 "install-skills.mjs",

27 "skills/luna-loop/",

28 "README.md",

29 "LICENSE"

30 ],

31 "os": [

32 "win32"

33 ],

34 "cpu": [

35 "x64"

36 ],

37 "engines": {

38 "node": ">=18"

39 },

40 "scripts": {

41 "postinstall": "node install-skills.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

High

Ai Review Evidence

The package runs an installer automatically after npm installation.

package.jsonView on unpkg · L41

42 },

43 "dependencies": {

44 "@anthropic-ai/claude-agent-sdk": "0.3.251"

45 }

46}

47

install-skills.mjsView file

Lines 1-21javascript

1import {

2 copyFileSync,

3 existsSync,

4 mkdirSync,

5 readdirSync,

6 rmSync,

7} from "node:fs";

8import { homedir } from "node:os";

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 24382464 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

bridge/claude-agent-sdk-bridge.mjsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7ad776c0d0eeac91 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = devez-vibe@1.6.59 matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.59 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.