Loading npm security reports…

hyperqe@8.1.3: AI-agent control-surface risk | LPM Firewall

registry / hyperqe / 8.1.3

hyperqe@8.1.3

HyperQE — AI-Native Agentic Quality Engineering Platform

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall automatically writes broad AI-agent configuration into the installing project. It seeds MCP launch configuration and a Claude write/edit hook without requiring an explicit bootstrap command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install hyperqe

Impact

Project AI-agent behavior and later MCP command execution are altered automatically.

Mechanism

default-on lifecycle seeding of AI-agent control surfaces

Policy narrative

Installing the package invokes a default-on postinstall bootstrap against INIT_CWD or the current directory. The bootstrap copies agent-discovered configuration for Claude, Cursor, Codex, Copilot, VS Code, and MCP into that project, then creates runtime state. The seeded MCP file configures later npx execution of unpinned @latest MCP packages, and the Claude settings add a command hook on Write/Edit. Existing files are not overwritten, but absent agent control files are created without an explicit user bootstrap action.

Rationale

This is concrete, default-on postinstall mutation of multiple foreign/broad AI-agent control surfaces. That meets the firewall block boundary despite no observed credential exfiltration in the bootstrap source.

Evidence

package.json.hyperqe/scripts/bootstrap-project.mjs.mcp.json.claude/settings.json.hyperqe.cursor.claude.codex.github/workflows/validate.yml.github/copilot-instructions.md

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node .hyperqe/scripts/bootstrap-project.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

42"scripts": { "postinstall": "node .hyperqe/scripts/bootstrap-project.mjs", "validate": "tsx .hyperqe/scripts/validate.ts",

High

Suspicious Lifecycle Evidence

postinstall runs bootstrap-project.mjs.

package.jsonView on unpkg · L42

.hyperqe/scripts/bootstrap-project.mjsView file

21'.cursor', L22: '.claude', L23: '.codex', L24: '.github/workflows/validate.yml', ... L26: '.github/prompts', L27: '.mcp.json', L28: '.vscode/mcp.json', L29: 'AGENTS.md', L30: ]; ... L83: await fs.ensureDir(path.dirname(dst)); L84: await fs.copyFile(src, dst); L85: copied.copied += 1;

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

.hyperqe/scripts/bootstrap-project.mjsView on unpkg · L21

138// --- postinstall auto-trigger ------------------------------------------------------------- // Runs automatically when this package is installed as a dependency (npm's "postinstall" life- // cycle script, wired in package.json). Defaults to ON (opt-out via HQE_AUTO_BOOTSTRAP=false) so // `npm install hyperqe` alone is enough to get a working project -- no separate command to // remember. Direct CLI use (`hqe bootstrap`) bypasses this gate entirely; it's an explicit user // action, not something that needs an env-var opt-out. async function main() { const isMainModule = process.argv[1] &&

High

Ai Review Evidence

Bootstrap defaults on and targets INIT_CWD/current directory.

.hyperqe/scripts/bootstrap-project.mjsView on unpkg · L138

19export const coreSeedPaths = [ '.hyperqe', '.cursor', '.claude', '.codex', '.github/workflows/validate.yml', '.github/copilot-instructions.md', '.github/prompts', '.mcp.json', '.vscode/mcp.json', 'AGENTS.md', ];

High

Ai Review Evidence

It seeds Claude, Cursor, Codex, Copilot, MCP, VS Code, and AGENTS control files.

.hyperqe/scripts/bootstrap-project.mjsView on unpkg · L19

79if (await fs.pathExists(dst)) { copied.skipped += 1; return; } await fs.ensureDir(path.dirname(dst)); await fs.copyFile(src, dst);

High

Ai Review Evidence

Missing destination files are copied during install.

.hyperqe/scripts/bootstrap-project.mjsView on unpkg · L79

.hyperqe/scripts/setup-cursor.ps1View file

•path = .hyperqe/scripts/setup-cursor.ps1 kind = payload_in_excluded_dir sizeBytes = 873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

•path = .hyperqe/scripts/setup-cursor.ps1 kind = build_helper sizeBytes = 873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 22-63json

22 },

23 "bin": {

24 "hqe": "bin/hqe.mjs"

25 },

26 "files": [

27 "bin",

28 ".hyperqe",

29 ".claude/commands",

30 ".claude/agents",

31 ".claude/CLAUDE.md",

32 ".claude/settings.json",

33 ".cursor",

34 ".codex",

35 ".github/workflows/validate.yml",

36 ".github/copilot-instructions.md",

37 ".github/prompts",

38 ".mcp.json",

39 ".vscode/mcp.json",

40 "AGENTS.md"

41 ],

42 "scripts": {

43 "postinstall": "node .hyperqe/scripts/bootstrap-project.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

44 "validate": "tsx .hyperqe/scripts/validate.ts",

High

Suspicious Lifecycle Evidence

postinstall runs bootstrap-project.mjs.

package.jsonView on unpkg · L42

45 "validate:artifacts": "node .hyperqe/scripts/validate-artifacts.mjs",

46 "check:golden": "node .hyperqe/scripts/check-golden-outputs.mjs",

47 "orchestration-dashboard": "node .hyperqe/scripts/orchestration-dashboard/server.mjs",

48 "detect:layout": "node .hyperqe/scripts/detect-test-layout.mjs",

49 "init:fw:playwright": "node .hyperqe/scripts/init-framework.mjs playwright",

50 "init:fw:wdio": "node .hyperqe/scripts/init-framework.mjs webdriverio",

51 "sync:env": "node .hyperqe/scripts/sync-env-from-code.mjs",

52 "lint": "eslint ."

53 },

54 "dependencies": {

55 "ajv": "^8.20.0",

56 "ajv-formats": "^3.0.1",

57 "fs-extra": "^11.3.5"

58 },

59 "devDependencies": {

60 "@types/node": "^25.7.0",

61 "eslint": "^9.20.0",

62 "tsx": "^4.21.0",

63 "typescript": "^5.9.3",

.hyperqe/scripts/bootstrap-project.mjsView file

Lines 1-41javascript

1import fs from 'fs-extra';

2import path from 'node:path';

3import { fileURLToPath } from 'node:url';

4

5const __filename =

.hyperqe/scripts/setup-cursor.ps1View file

•path = .hyperqe/scripts/setup-cursor.ps1 kind = payload_in_excluded_dir sizeBytes = 873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

•path = .hyperqe/scripts/setup-cursor.ps1 kind = build_helper sizeBytes = 873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.hyperqe/scripts/setup-cursor.ps1View on unpkg