registry / greprag / 5.72.2

greprag@5.72.2

⚠ Under review

GrepRAG — agent memory for Claude Code, Codex, and OpenCode.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 178 file(s), 2.01 MB of source, external domains: 127.0.0.1, api.greprag.com, code.claude.com, docs.claude.com, docs.stripe.com, registry.npmjs.org

Source & flagged code

3 flagged

package.jsonView file

Lines 1-35json

2 "name": "greprag",

3 "version": "5.72.2",

4 "description": "GrepRAG — agent memory for Claude Code, Codex, and OpenCode.",

5 "main": "dist/index.js",

6 "bin": {

7 "greprag": "dist/index.js",

8 "greprag-hook": "dist/hook.js"

9 },

10 "scripts": {

11 "build": "tsc && node scripts/bundle-opencode-plugin.mjs",

12 "clean": "rimraf dist",

13 "release:prepare": "npm run clean && npm run build && node scripts/verify-publish.cjs && node ../../tests/run-release-gate.cjs",

14 "prepublishOnly": "npm run release:prepare",

15 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L15

16 },

17 "files": [

18 "dist",

19 "skill",

20 "scripts"

21 ],

22 "devDependencies": {

23 "@types/node": "^20.0.0",

24 "@types/sql.js": "^1.4.11",

25 "esbuild": "^0.17.19",

26 "rimraf": "^5.0.0",

27 "typescript": "^5.5.0"

28 },

29 "engines": {

30 "node": ">=18.0.0"

31 },

32 "keywords": [

33 "greprag",

34 "claude",

35 "codex",

scripts/postinstall.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2// Runs automatically after `npm install -g greprag`.

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.jsView on unpkg · L1

3//

4// Public UX contract:

5// * `greprag/` — the package's front-door skill. Always installed/refreshed

6// for detected Claude Code and Codex homes so users can type `/greprag`

7// immediately after installing the npm package.

8// * Other bundled skills — refresh-only. If the operator opted in earlier,

Source & flagged code

3 flagged · loading source

package.jsonView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code