gossipcat@0.6.12: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

gossipcat@0.6.12: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

1Install-time AI-agent control hijack evidence: L2: /** L3: * Generates .mcp.json with the correct absolute path to mcp-server.js L4: * for the current install method (global npm, local project dep, git clone). ... L8: const { join, resolve } = require('path'); L9: const { existsSync, readFileSync, writeFileSync, statSync } = require('fs'); L10: ... L21: L22: // For git clones: skip writing if .mcp.json already exists. Still warn if the L23: // built server is older than package.json — stale-build warning is the most ... L29: // build-recovery path at the end of this script instead. L30: if (isGitClone && existsSync(join(packageRoot, '.mcp.json')) && existsSync(mcpServerPath)) { L31: try { Payload evidence from dist-mcp/default-rules/gossipcat-rules.md: L1: # Gossipcat — Multi-Agent Orche

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = gossipcat@0.6.11 matchedPath = scripts/postinstall.js matchedIdentity = npm:Z29zc2lwY2F0:0.6.11 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = e828bf456828b140 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = gossipcat@0.6.11 matchedPath = scripts/postinstall.js matchedIdentity = npm:Z29zc2lwY2F0:0.6.11 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/postinstall.jsView on unpkg

assets/hooks/discipline/pretool-signals-validate.shView file

•path = assets/hooks/discipline/pretool-signals-validate.sh kind = build_helper sizeBytes = 1857 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

assets/hooks/discipline/pretool-signals-validate.shView on unpkg

dist-dashboard/assets/Geist-Variable-jflMhO5d.woff2View file

•path = dist-dashboard/assets/Geist-Variable-jflMhO5d.woff2 kind = high_entropy_blob sizeBytes = 69740 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist-dashboard/assets/Geist-Variable-jflMhO5d.woff2View on unpkg

dist-mcp/mcp-server.jsView file

•path = dist-mcp/mcp-server.js kind = oversized_source_file sizeBytes = 3332380 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist-mcp/mcp-server.jsView on unpkg

•path = dist-mcp/mcp-server.js kind = oversized_cli_entrypoint sizeBytes = 3332380 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist-mcp/mcp-server.jsView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 16-56json

16 "node": ">=22"

17 },

18 "workspaces": [

19 "packages/*",

20 "apps/*"

21 ],

22 "files": [

23 "dist-mcp/",

24 "dist-dashboard/",

25 "docs/HANDBOOK.md",

26 "docs/RULES.md",

27 "docs/CURSOR_RULES.md",

28 "scripts/postinstall.js",

29 "assets/hooks/discipline/**"

30 ],

31 "scripts": {

32 "build": "npm run build:all",

33 "build:all": "npm run build -w @gossip/types && npm run build -w @gossip/client && npm run build -w @gossip/tools && npm run build -w @gossip/orchestrator && npm run build -w @gossip/relay",

34 "test": "jest --config jest.config.base.js",

35 "clean": "rm -rf packages/*/dist apps/*/dist dist-mcp/ dist-dashboard/",

36 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "build:mcp": "rm -rf dist-mcp && npx esbuild apps/cli/src/mcp-server-sdk.ts --bundle --platform=node --target=node22 --outfile=dist-mcp/mcp-server.js --external:bufferutil --external:utf-8-validate --external:re2 --tsconfig=tsconfig.json && cp -r packages/orchestrator/src/default-skills dist-mcp/default-skills && cp -r packages/orchestrator/src/default-rules dist-mcp/default-rules && cp -r assets dist-mcp/assets && mkdir -p dist-mcp/data && cp data/archetypes.json dist-mcp/data/archetypes.json && chmod +x dist-mcp/mcp-server.js && chmod +x dist-mcp/assets/hooks/worktree-sandbox.sh && chmod ...

38 "build:dashboard": "cd packages/dashboard-v2 && npx vite build --outDir ../../dist-dashboard --emptyOutDir",

39 "prepublishOnly": "npm run build:all && npm run build:mcp && npm run build:dashboard",

40 "gossipcat": "npx ts-node -r tsconfig-paths/register -P tsconfig.json apps/cli/src/index.ts",

41 "start": "npx ts-node -r tsconfig-paths/register -P tsconfig.json apps/cli/src/index.ts",

42 "audit:memories": "node scripts/audit-memories.mjs"

43 },

44 "publishConfig": {

45 "access": "public"

46 },

47 "devDependencies": {

48 "@types/jest": "^29.5.11",

49 "@types/node": "^22.0.0",

50 "esbuild": "^0.28.1",

51 "jest": "^29.7.0",

52 "ts-jest": "^29.1.1",

53 "typescript": "^5.7.0"

54 },

55 "dependencies": {

56 "@clack/prompts": "^1.1.0",

Long lines were clipped for display.

scripts/postinstall.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2/**

3 * Generates .mcp.json with the correct absolute path to mcp-server.js

4 * for the current install method (global npm, local project dep, git clone).

5 *

6 * Never shipped in the package tarball — always regenerated per machine.

7 */

8const { join, resolve } = require

assets/hooks/discipline/pretool-signals-validate.shView file

•path = assets/hooks/discipline/pretool-signals-validate.sh kind = build_helper sizeBytes = 1857 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

assets/hooks/discipline/pretool-signals-validate.shView on unpkg

dist-dashboard/assets/Geist-Variable-jflMhO5d.woff2View file

•path = dist-dashboard/assets/Geist-Variable-jflMhO5d.woff2 kind = high_entropy_blob sizeBytes = 69740 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist-dashboard/assets/Geist-Variable-jflMhO5d.woff2View on unpkg

dist-mcp/mcp-server.jsView file

•path = dist-mcp/mcp-server.js kind = oversized_source_file sizeBytes = 3332380 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist-mcp/mcp-server.jsView on unpkg

•path = dist-mcp/mcp-server.js kind = oversized_cli_entrypoint sizeBytes = 3332380 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist-mcp/mcp-server.jsView on unpkg