Loading npm security reports…

domma-js@0.33.1: AI-agent control-surface risk | LPM Firewall

registry / domma-js / 0.33.1

domma-js@0.33.1

Dynamic Object Manipulation & Modeling API - A complete front-end toolkit.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time code offers a default-accepted copy of Claude control files into a path outside the installed package. The root calculation is flawed but can still target a parent project with package.json.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall with an empty or affirmative prompt response

Impact

Unconsented mutation of a foreign AI-agent project control surface

Mechanism

copies CLAUDE.md and .claude configuration into an external project

Policy narrative

Installing the package executes postinstall. Outside CI, it prompts to copy AI-assistance files and treats an empty response as acceptance; if its computed external target contains package.json, it creates CLAUDE.md and .claude/ there when absent. The shipped configuration is benign-looking framework guidance, and no exfiltration was found, but install-time mutation of a foreign Claude project surface is concrete.

Rationale

The package has a concrete npm postinstall path that can mutate foreign Claude control files without affirmative consent. This meets the install-control-surface block policy despite the flawed target-root calculation and benign template contents.

Evidence

package.jsonbin/postinstall.jstemplates/kickstart/CLAUDE.mdtemplates/kickstart/.claude/settings.jsonCLAUDE.md.claude/blueprints/types/

Decision evidence

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

public/dist/domma.esm.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = function...lt};

Medium

Secret Pattern

Package contains a possible secret pattern.

public/dist/domma.esm.jsView on unpkg · L8

bin/postinstall.jsView file

7Install-time AI-agent control hijack evidence: L7: L8: import { existsSync, mkdirSync, copyFileSync, readdirSync, statSync, readFileSync, writeFileSync } from 'fs'; L9: import { join, dirname, resolve } from 'path'; ... L88: if (!existsSync(dest)) { L89: mkdirSync(dest, { recursive: true }); L90: } ... L96: } else { L97: copyFileSync(src, dest); L98: } ... L141: console.log(`${colors.gray}Domma includes AI assistance files for Claude Code:${colors.reset}`); L142: console.log(`${colors.gray} • CLAUDE.md - Framework reference guide${colors.reset}`); L143: console.log(`${colors.gray} • .claude/ - Settings & code snippets${colors.reset}`); Payload evidence from templates/kickstart-spa/.claude/memory/MEMORY.md: L15: 2. **Storage**: `S.set('key', value)` - NOT `localStorage.setItem()` L16: 3.

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/postinstall.jsView on unpkg · L7

bin/domma-cli.jsView file

•matchType = normalized_sha256 matchedPackage = domma-js@0.37.0 matchedPath = bin/domma-cli.js matchedIdentity = npm:ZG9tbWEtanM:0.37.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/domma-cli.jsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 18-58json

18 "public/dist/domma.esm.js",

19 "public/dist/domma.css",

20 "public/dist/bundles/",

21 "public/dist/elements.css",

22 "public/dist/grid.css",

23 "public/dist/syntax.css",

24 "public/dist/domma-syntax.min.js",

25 "public/dist/domma-flags.min.js",

26 "public/dist/domma-flags.esm.js",

27 "public/dist/themes/",

28 "assets/types/",

29 "LICENSE",

30 "README.md"

31 ],

32 "repository": {

33 "type": "git",

34 "url": "git+https://github.com/pinpointzero73/domma.git"

35 },

36 "type": "module",

37 "scripts": {

38 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L38

39 "start": "node bin/domma-cli.js serve",

40 "serve": "node bin/domma-cli.js serve",

41 "serve:3096": "node bin/domma-cli.js serve --port 3096",

42 "dev": "NODE_ENV=development npm run generate:bundles && rollup -c && node scripts/build-info.js && npm run build:metadata && npm run copy:themes && npm run generate:themes && npm run build:css && npm run build:miniapps && live-server public --port=3001 --open=/index.html",

43 "dev:watch": "NODE_ENV=development npm run generate:bundles && rollup -c && node scripts/build-info.js && npm run build:metadata && npm run copy:themes && npm run generate:themes && npm run build:css && npm run build:miniapps && npm run watch:miniapps",

44 "build": "npm run generate:bundles && rollup -c && node scripts/build-info.js && npm run build:metadata && npm run copy:themes && npm run generate:themes && npm run build:css && npm run build:css-bundles && npm run build:archives && npm run build:kickstart-files && npm run build:miniapps",

45 "build:js": "rollup -c",

46 "build:css": "node scripts/build-css.js",

47 "build:css-bundles": "node scripts/build-css-bundles.js",

48 "build:archives": "node scripts/build-archives.js",

49 "build:kickstart-files": "node scripts/build-kickstart-files.js",

50 "build:info": "node scripts/build-info.js",

51 "build:metadata": "node scripts/copy-metadata.js",

52 "copy:themes": "node scripts/copy-theme-css.js",

53 "build:miniapps": "node scripts/build-miniapp.js && node scripts/copy-miniapps.js",

54 "build:miniapp:garage": "node scripts/build-miniapp.js garage",

55 "build:miniapp:address": "node scripts/build-miniapp.js address",

56 "watch:miniapps": "node scripts/watch-miniapps.js",

57 "generate:bundles": "node scripts/generate-bundles.js",

58 "generate:themes": "node scripts/generate-admin-themes.js",

public/dist/domma.esm.jsView file

8patternName = generic_password severity = medium line = 8 matchedText = function...lt};

Medium

Secret Pattern

Package contains a possible secret pattern.

public/dist/domma.esm.jsView on unpkg · L8

bin/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2

3/**

4 * Domma Postinstall Script

5 * Offers to copy AI assistance files to the project root

6 */

7

8import { existsSync, mkdirSync, copyFileSync, readdirSync, statSync, readFileSync, writeFileSync } from 'fs';

9import { join, dirname, resolve } from

bin/domma-cli.jsView file

•matchType = normalized_sha256 matchedPackage = domma-js@0.37.0 matchedPath = bin/domma-cli.js matchedIdentity = npm:ZG9tbWEtanM:0.37.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/domma-cli.jsView on unpkg