Loading npm security reports…

devez-vibe@1.8.11: Malicious npm security report (Block) | LPM Firewall

registry / devez-vibe / 1.8.11

devez-vibe@1.8.11

Stable terminal UI for Codex and Claude Agent SDK

AI Security Review

scanned 26d ago · by lpm-firewall-ai

Installing the package automatically modifies both Codex and Claude user skill control surfaces. It also performs an account-level Python package installation.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

An installation changes agent instructions in the user's Codex and Claude homes and adds Python packages without an explicit setup command.

Mechanism

Automatic cross-agent skill deployment and user-level dependency installation

Attack narrative

When npm installs this package, its postinstall hook runs automatically. The hook copies package-supplied skills into both default Codex and Claude configuration directories, pruning prior content, so it alters broad AI-agent control surfaces without an explicit user setup action. It then invokes pip with --user to install or upgrade Python dependencies. This is an unconsented install-time mutation chain, not a user-invoked feature.

AI rationale

The package has a concrete automatic postinstall chain that writes agent skills into both Codex and Claude user homes and performs a user-level pip installation. This meets the install-hook abuse boundary for unconsented mutation of broad AI-agent control surfaces.

Evidence

package.jsoninstall-skills.mjsprepare-search-deps.mjs$CODEX_HOME/skills/luna-loop$CODEX_HOME/skills/insane-search$CLAUDE_CONFIG_DIR/skills/luna-loop$CLAUDE_CONFIG_DIR/skills/insane-search

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node install-skills.mjs && node prepare-search-deps.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install-skills.mjs && node prepare-search-deps.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

install-skills.mjsView file

1import { L2: copyFileSync, L3: existsSync, L4: mkdirSync, L5: readdirSync, L6: rmSync, L7: writeFileSync, L8: } from "node:fs"; ... L16: const userHome = homedir(); L17: const codexHome = process.env.CODEX_HOME?.trim() || join(userHome, ".codex"); L18: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(userHome, ".claude"); L19:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install-skills.mjsView on unpkg · L1

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 25006592 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

skills/insane-search/tests/live_benchmark/bench.pyView file

•path = skills/insane-search/tests/live_benchmark/bench.py kind = payload_in_excluded_dir sizeBytes = 4268 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/insane-search/tests/live_benchmark/bench.pyView on unpkg

•path = skills/insane-search/tests/live_benchmark/bench.py kind = build_helper sizeBytes = 4268 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/insane-search/tests/live_benchmark/bench.pyView on unpkg

bridge/claude-agent-sdk-bridge.mjsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.8.17 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.8.17 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 93fe01ecd4965ede signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = devez-vibe@1.8.17 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.8.17 similarity = 1.000 shingleOverlap = 6 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

bin/dvz.jsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.8.17 matchedPath = bin/dvz.js matchedIdentity = npm:ZGV2ZXotdmliZQ:1.8.17 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/dvz.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 25-51json

25 "bin/dvz.js",

26 "bin/dvz.exe",

27 "bridge/claude-agent-sdk-bridge.mjs",

28 "install-skills.mjs",

29 "prepare-search-deps.mjs",

30 "skills/luna-loop/",

31 "skills/insane-search/",

32 "README.md",

33 "LICENSE"

34 ],

35 "os": [

36 "win32"

37 ],

38 "cpu": [

39 "x64"

40 ],

41 "engines": {

42 "node": ">=18"

43 },

44 "scripts": {

45 "postinstall": "node install-skills.mjs && node prepare-search-deps.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L45

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L45

46 },

47 "dependencies": {

48 "@anthropic-ai/claude-agent-sdk": "0.3.260"

49 }

50}

51

install-skills.mjsView file

Lines 1-21javascript

1import {

2 copyFileSync,

3 existsSync,

4 mkdirSync,

5 readdirSync,

6 rmSync,

7 writeFileSync,

8} from "node:fs";

9import { homedir } from

bin/dvz.exeView file

•path = bin/dvz.exe kind = native_binary sizeBytes = 25006592 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/dvz.exeView on unpkg

skills/insane-search/tests/live_benchmark/bench.pyView file

•path = skills/insane-search/tests/live_benchmark/bench.py kind = payload_in_excluded_dir sizeBytes = 4268 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/insane-search/tests/live_benchmark/bench.pyView on unpkg

•path = skills/insane-search/tests/live_benchmark/bench.py kind = build_helper sizeBytes = 4268 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/insane-search/tests/live_benchmark/bench.pyView on unpkg

bridge/claude-agent-sdk-bridge.mjsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.8.17 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.8.17 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 93fe01ecd4965ede signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = devez-vibe@1.8.17 matchedPath = bridge/claude-agent-sdk-bridge.mjs matchedIdentity = npm:ZGV2ZXotdmliZQ:1.8.17 similarity = 1.000 shingleOverlap = 6 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bridge/claude-agent-sdk-bridge.mjsView on unpkg

bin/dvz.jsView file

•matchType = normalized_sha256 matchedPackage = devez-vibe@1.8.17 matchedPath = bin/dvz.js matchedIdentity = npm:ZGV2ZXotdmliZQ:1.8.17 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/dvz.jsView on unpkg