Loading npm security reports…

ginka-role-fix@0.1.0: AI-agent control-surface risk | LPM Firewall

registry / ginka-role-fix / 0.1.0

ginka-role-fix@0.1.0

Transparent local HTTPS fix for the GINKA API: rewrites chat-completions messages with role 'developer' to 'system' (api.ginka.cloud rejects 'developer').

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. A privileged global installation silently creates a persistent local TLS interception service for api.ginka.cloud. It installs its CA and changes selected AI request roles before forwarding traffic.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package globally with administrator privileges activates the postinstall hook.

Impact

All local traffic to the targeted API is redirected through a package-controlled CA and service; AI request semantics are modified.

Mechanism

Persistent localhost TLS interception with request-role rewriting.

Policy narrative

On a privileged global install, the postinstall hook runs setup without a separate user command. Setup redirects the GINKA API hostname to localhost, trusts a generated CA, and starts a persistent service. The service decrypts target traffic and rewrites developer-role messages to system-role messages before forwarding them. Although the source limits interception to one host and shows no exfiltration, this is an unconsented install-time mutation of a broad Node and system-service trust surface.

Rationale

The package performs unconsented privileged postinstall creation of a persistent TLS interception service and changes AI request content. Its scoped host and absence of exfiltration reduce scope but do not remove the concrete control-surface risk.

Evidence

package.jsonlib/cli.jslib/platform.jslib/proxy.jslib/constants.js/etc/hosts/usr/local/share/ca-certificates/ginka-role-fix-ca.crt/etc/systemd/system/ginka-role-fix.service

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/ginka-fix.js postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

28"scripts": { "test": "node --test \"test/**/*.test.js\"", "postinstall": "node bin/ginka-fix.js postinstall"

High

Suspicious Lifecycle Evidence

A postinstall hook automatically runs privileged setup during a global install.

package.jsonView on unpkg · L28

•scripts.postinstall = node bin/ginka-fix.js postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/ginka-fix.jsView file

3L4: require('../lib/cli') L5: .main(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ginka-fix.jsView on unpkg · L3

lib/platform.jsView file

5Trigger-reachable persistence chain: scripts.postinstall -> bin/ginka-fix.js -> lib/cli.js -> lib/platform.js L5: const path = require('node:path'); L6: const { execFileSync, spawnSync } = require('node:child_process'); L7: ... L71: const result = run(cmd, args); L72: return { ok: result.status === 0, stdout: result.stdout || '', stderr: result.stderr || '' }; L73: } ... L76: return new Promise((resolve) => { L77: const net = require('node:net'); L78: const socket = net.connect({ port, host }); ... L249: fs.writeFileSync(this.plistPath, plist, { mode: 0o644 }); L250: const boot = runChecked('launchctl', ['bootstrap', 'system', this.plistPath]); L251: if (!boot.ok) runChecked('launchctl', ['load', this.plistPath]);

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

lib/platform.jsView on unpkg · L5

5const path = require('node:path'); L6: const { execFileSync, spawnSync } = require('node:child_process'); L7: ... L71: const result = run(cmd, args); L72: return { ok: result.status === 0, stdout: result.stdout || '', stderr: result.stderr || '' }; L73: } ... L76: return new Promise((resolve) => { L77: const net = require('node:net'); L78: const socket = net.connect({ port, host }); ... L249: fs.writeFileSync(this.plistPath, plist, { mode: 0o644 }); L250: const boot = runChecked('launchctl', ['bootstrap', 'system', this.plistPath]); L251: if (!boot.ok) runChecked('launchctl', ['load', this.plistPath]);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/platform.jsView on unpkg · L5