Loading npm security reports…

devez-vibe@1.7.1: AI-agent control-surface risk | LPM Firewall

registry / devez-vibe / 1.7.1

devez-vibe@1.7.1

Stable terminal UI for Codex and Claude Agent SDK

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package writes a bundled skill into both Codex and Claude user configuration trees. This is an automatic cross-agent control-surface mutation.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall execution during package installation.

Impact

Changes the behavior and available instructions of locally installed AI-agent clients without an explicit setup command.

Mechanism

Copies and prunes a bundled skill in Codex and Claude user skill directories.

Policy narrative

The npm postinstall hook runs automatically. It resolves the user's Codex and Claude configuration locations, then copies the package's luna-loop skill into each client and removes files not present in the package copy. This modifies two independent user-level AI-agent instruction surfaces as a side effect of installation.

Rationale

The automatic postinstall hook modifies broad, foreign AI-agent control surfaces. This meets the install-control-surface block policy regardless of the bundled skill's stated purpose.

Evidence

package.jsoninstall-skills.mjsskills/luna-loop/~/.codex/skills/luna-loop~/.claude/skills/luna-loop

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node install-skills.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

41"postinstall": "node install-skills.mjs"

High

Suspicious Lifecycle Evidence

The install lifecycle automatically runs a script.

package.jsonView on unpkg · L41

install-skills.mjsView file

1import { L2: copyFileSync, L3: existsSync, L4: mkdirSync, L5: readdirSync, ... L14: const userHome = homedir(); L15: const codexHome = process.env.CODEX_HOME?.trim() || join(userHome, ".codex"); L16: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(userHome, ".claude"); L17: ... L23: function copyTree(source, destination) { L24: mkdirSync(destination, { recursive: true }); L25: for (const entry of readdirSync(source, { withFileTypes: true })) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install-skills.mjsView on unpkg · L1

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 24393728 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

bridge/claude-agent-sdk-bridge.mjsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7ad776c0d0eeac91 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = devez-vibe@1.6.59 matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.59 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

Source & flagged code

7 flagged

package.jsonView file

Lines 21-47json

21 "dvz": "bin/dvz.exe"

22 },

23 "files": [

24 "bin/dvz.exe",

25 "bridge/claude-agent-sdk-bridge.mjs",

26 "install-skills.mjs",

27 "skills/luna-loop/",

28 "README.md",

29 "LICENSE"

30 ],

31 "os": [

32 "win32"

33 ],

34 "cpu": [

35 "x64"

36 ],

37 "engines": {

38 "node": ">=18"

39 },

40 "scripts": {

41 "postinstall": "node install-skills.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

High

Suspicious Lifecycle Evidence

The install lifecycle automatically runs a script.

package.jsonView on unpkg · L41

42 },

43 "dependencies": {

44 "@anthropic-ai/claude-agent-sdk": "0.3.251"

45 }

46}

47

install-skills.mjsView file

Lines 1-21javascript

1import {

2 copyFileSync,

3 existsSync,

4 mkdirSync,

5 readdirSync,

6 rmSync,

7} from "node:fs";

8import { homedir } from "node:os";

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 24393728 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

bridge/claude-agent-sdk-bridge.mjsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7ad776c0d0eeac91 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = devez-vibe@1.6.63 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.63 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = devez-vibe@1.6.59 matchedIdentity = npm:ZGV2ZXotdmliZQ:1.6.59 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.