Loading npm security reports…

devez-vibe@1.7.62: AI-agent control-surface risk | LPM Firewall

registry / devez-vibe / 1.7.62

devez-vibe@1.7.62

Stable terminal UI for Codex and Claude Agent SDK

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Npm installation automatically changes the default skill directories for two AI-agent products. It also deletes stale entries in those directories and installs Python dependencies.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package causes npm to run postinstall.

Impact

The package mutates broad, foreign AI-agent control surfaces without an explicit user command; subsequent agent sessions can load its supplied skills.

Mechanism

Postinstall copies and prunes AI-agent skills, then invokes pip.

Policy narrative

A normal npm install runs install-skills.mjs. That script selects default Codex and Claude configuration locations, copies two package-controlled skill trees into each, and recursively deletes installed files missing from the package source. The same lifecycle hook runs prepare-search-deps.mjs, which invokes pip install for additional packages. This is automatic mutation of broad, foreign AI-agent control surfaces rather than an explicit setup command.

Rationale

The package has a concrete, automatic postinstall chain that writes and deletes files in default Codex and Claude skill directories, plus performs dependency installation. This meets the install-control-surface blocking policy.

Evidence

package.jsoninstall-skills.mjsprepare-search-deps.mjs~/.codex/skills/luna-loop~/.codex/skills/insane-search~/.claude/skills/luna-loop~/.claude/skills/insane-search

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node install-skills.mjs && node prepare-search-deps.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

42"scripts": { "postinstall": "node install-skills.mjs && node prepare-search-deps.mjs" }

High

Suspicious Lifecycle Evidence

The npm postinstall hook automatically runs two installer scripts.

package.jsonView on unpkg · L42

•scripts.postinstall = node install-skills.mjs && node prepare-search-deps.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

install-skills.mjsView file

1import { L2: copyFileSync, L3: existsSync, L4: mkdirSync, L5: readdirSync, ... L14: const userHome = homedir(); L15: const codexHome = process.env.CODEX_HOME?.trim() || join(userHome, ".codex"); L16: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(userHome, ".claude"); L17: ... L23: function copyTree(source, destination) { L24: mkdirSync(destination, { recursive: true }); L25: for (const entry of readdirSync(source, { withFileTypes: true })) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install-skills.mjsView on unpkg · L1

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 24660992 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

skills/insane-search/tests/live_benchmark/bench.pyView file

•path = skills/insane-search/tests/live_benchmark/bench.py kind = payload_in_excluded_dir sizeBytes = 4268 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/insane-search/tests/live_benchmark/bench.pyView on unpkg

•path = skills/insane-search/tests/live_benchmark/bench.py kind = build_helper sizeBytes = 4268 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/insane-search/tests/live_benchmark/bench.pyView on unpkg