registry / greprag / 5.73.11

greprag@5.73.11

⚠ Under review

GrepRAG — agent memory for Claude Code, Codex, and OpenCode.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 10 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 188 file(s), 2.07 MB of source, external domains: 127.0.0.1, api.greprag.com, code.claude.com, docs.claude.com, docs.stripe.com, registry.npmjs.org

Source & flagged code

3 flagged

package.jsonView file

Lines 1-34json

2 "name": "greprag",

3 "version": "5.73.11",

4 "description": "GrepRAG — agent memory for Claude Code, Codex, and OpenCode.",

5 "main": "dist/index.js",

6 "bin": {

7 "greprag": "dist/index.js",

8 "greprag-hook": "dist/hook.js",

9 "greprag-codex-hook": "dist/codex-fast-hook.js"

10 },

11 "scripts": {

12 "build": "tsc && node scripts/bundle-opencode-plugin.mjs",

13 "clean": "rimraf dist",

14 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 },

16 "files": [

17 "dist",

18 "skill",

19 "scripts"

20 ],

21 "devDependencies": {

22 "@types/node": "^20.0.0",

23 "@types/sql.js": "^1.4.11",

24 "esbuild": "^0.17.19",

25 "rimraf": "^5.0.0",

26 "typescript": "^5.5.0"

27 },

28 "engines": {

29 "node": ">=18.0.0"

30 },

31 "keywords": [

32 "greprag",

33 "claude",

34 "codex",

scripts/postinstall.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2// Runs automatically after `npm install -g greprag`.

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.jsView on unpkg · L1

3//

4// Public UX contract:

5// * `greprag/` — the package's front-door skill. Always installed/refreshed

6// for detected Claude Code and Codex homes so users can type `/greprag`

7// immediately after installing the npm package.

8// * Other bundled skills — refresh-only. If the operator opted in earlier,

Source & flagged code

3 flagged · loading source

package.jsonView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code