dokkimi@0.5.9: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

dokkimi@0.5.9: AI-agent control-surface risk | LPM Firewall

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

shared/platform/dist/platform-unix.jsView file

3exports.unix = void 0; L4: const child_process_1 = require("child_process"); L5: exports.unix = {

High

Child Process

Package source references child process execution.

shared/platform/dist/platform-unix.jsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = shared/platform/dist/platform-unix.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

shared/platform/dist/platform-unix.jsView on unpkg

shared/config/dist/index.jsView file

16Object.defineProperty(exports, "__esModule", { value: true }); L17: __exportStar(require("./config.types"), exports); L18: __exportStar(require("./config.loader"), exports);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

shared/config/dist/index.jsView on unpkg · L16

apps/cli/dist/lib/llm-context-register.jsView file

30Install-time code directly mutates a foreign AI-agent control surface: L56: function writeVersion(version) { L57: fs.mkdirSync(DOKKIMI_DIR, { recursive: true }); L58: fs.writeFileSync(VERSION_PATH, version, 'utf-8'); L59: } L60: function writeInstructions(content) { L61: fs.mkdirSync(DOKKIMI_DIR, { recursive: true }); L62: fs.writeFileSync(INSTRUCTIONS_PATH, content, 'utf-8'); L63: } L64: function upsertSection(filePath) { L65: fs.mkdirSync(path.dirname(filePath), { recursive: true }); L66: const section = `${DOKKIMI_MARKER}\n# Dokkimi\n\n${HINT}\n${DOKKIMI_MARKER}`; ... L82: } Write operation from scripts/postinstall.js: L30: if (!fs.existsSync(dokkimiScope)) { L31: fs.mkdirSync(dokkimiScope, { recursive: true }); L32: } ... L102: try { L103: fs.mkdirSync(path.dirname(dbPath), { recursive

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

apps/cli/dist/lib/llm-context-register.jsView on unpkg · L30

apps/mcp/dist/index.jsView file

21Cross-file remote execution chain: apps/mcp/dist/index.js spawns apps/cli/dist/lib/update-check.js; helper contains network access plus dynamic code execution. L21: ZodArray: () => ZodArray, L22: ZodBase64: () => ZodBase64, L23: ZodBase64URL: () => ZodBase64URL, ... L1482: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config()))) L1483: } : { success: true, data: result.value }; L1484: }; ... L2566: try { L2567: new URL(`http://[${payload.value}]`); L2568: } catch { ... L14688: async ({ projectPath }) => { L14689: const startDir = projectPath || process.cwd(); L14690: const dokkimiDir = findDokkimiDir(startDir);

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

apps/mcp/dist/index.jsView on unpkg · L21

apps/cli/dist/lib/inspect-step-detail.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

apps/cli/dist/lib/inspect-step-detail.js#virtual:normalized:round1View on unpkg

shared/service-manager/dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = shared/service-manager/dist/index.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

shared/service-manager/dist/index.jsView on unpkg

apps/cli/dist/lib/registry-credentials.spec.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = apps/cli/dist/lib/registry-credentials.spec.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/lib/registry-credentials.spec.jsView on unpkg

scripts/postinstall.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = scripts/postinstall.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

shared/service-manager/dist/environment.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = shared/service-manager/dist/environment.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

shared/service-manager/dist/environment.jsView on unpkg

shared/telemetry/dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = shared/telemetry/dist/index.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

shared/telemetry/dist/index.jsView on unpkg

apps/cli/dist/commands/baselines-ops.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = [redacted]-ops.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/commands/baselines-ops.jsView on unpkg

apps/cli/dist/commands/baselines.spec.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = [redacted].spec.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/commands/baselines.spec.jsView on unpkg

apps/cli/dist/commands/dump.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = apps/cli/dist/commands/dump.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/commands/dump.jsView on unpkg

apps/cli/dist/commands/dump.spec.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = apps/cli/dist/commands/dump.spec.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/commands/dump.spec.jsView on unpkg

apps/cli/dist/commands/run-helpers.spec.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = apps/cli/dist/commands/run-helpers.spec.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/commands/run-helpers.spec.jsView on unpkg

apps/cli/dist/lib/editor.jsView file

•matchType = normalized_sha256 matchedPackage = dokkimi@0.5.4 matchedPath = apps/cli/dist/lib/editor.js matchedIdentity = npm:ZG9ra2ltaQ:0.5.4 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

apps/cli/dist/lib/editor.jsView on unpkg