Loading npm security reports…

hyperqe@9.0.1: AI-agent control-surface risk | LPM Firewall

registry / hyperqe / 9.0.1

hyperqe@9.0.1

HyperQE — AI-native Quality Engineering orchestration for Cursor, Claude Code, and GitHub Copilot

AI Security Review

scanned 5d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. The npm postinstall hook automatically installs instructions and configuration into broad agent control surfaces in the consumer project. This includes Claude command-hook settings when the destination file is missing.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package with lifecycle scripts enabled and automatic bootstrap not explicitly disabled.

Impact

Future agent sessions can load package-provided instructions, MCP configuration, and command hooks without separate setup consent.

Mechanism

The installer resolves INIT_CWD and recursively copies package seed paths into the consumer project without an approval prompt.

Policy narrative

Installing hyperqe activates a default-enabled postinstall bootstrap. It copies missing files into the consumer project's agent instruction and configuration locations, including Claude settings that register a command hook. Preserving existing files and offering an environment-variable opt-out do not provide prior consent for creating these broad agent control surfaces.

AI rationale

Inspected source establishes unconsented postinstall mutation of broad AI-agent control surfaces, meeting the supplied blocking policy. The other inspected scanner hints do not establish credential theft or hidden payload execution.

Evidence

package.json.hyperqe/scripts/bootstrap-project.mjs.claude/settings.jsonAGENTS.md.claude.cursor.codex.github/copilot-instructions.md.github/prompts

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node .hyperqe/scripts/bootstrap-project.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

.hyperqe/scripts/vf1/vf1.1.selftest.mjsView file

264patternName = generic_password severity = medium line = 264

Medium

Secret Pattern

Package contains a possible secret pattern.

.hyperqe/scripts/vf1/vf1.1.selftest.mjsView on unpkg · L264

.hyperqe/scripts/bootstrap-project.mjsView file

21'.cursor', L22: '.claude', L23: '.codex', L24: '.github/workflows/validate.yml', ... L27: '.github/agents', L28: '.mcp.json', L29: '.vscode/mcp.json', L30: 'AGENTS.md', L31: ]; ... L95: await fs.ensureDir(path.dirname(dst)); L96: await fs.copyFile(src, dst); L97: copied.copied += 1;

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

.hyperqe/scripts/bootstrap-project.mjsView on unpkg · L21

.hyperqe/scripts/setup-cursor.ps1View file

•path = .hyperqe/scripts/setup-cursor.ps1 kind = payload_in_excluded_dir sizeBytes = 873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

•path = .hyperqe/scripts/setup-cursor.ps1 kind = build_helper sizeBytes = 873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

.hyperqe/scripts/vf1/vf1.selftest.mjsView file

22patternName = generic_password severity = medium line = 22

Medium

Secret Pattern

Hardcoded password in .hyperqe/scripts/vf1/vf1.selftest.mjs

.hyperqe/scripts/vf1/vf1.selftest.mjsView on unpkg · L22

70patternName = generic_password severity = medium line = 70

Medium

Secret Pattern

Hardcoded password in .hyperqe/scripts/vf1/vf1.selftest.mjs

.hyperqe/scripts/vf1/vf1.selftest.mjsView on unpkg · L70

.hyperqe/scripts/p2-2-runtime-selftest.mjsView file

54patternName = generic_password severity = medium line = 54

Medium

Secret Pattern

Hardcoded password in .hyperqe/scripts/p2-2-runtime-selftest.mjs

.hyperqe/scripts/p2-2-runtime-selftest.mjsView on unpkg · L54

.hyperqe/validation-framework/vf2.1/benchmark.mjsView file

239patternName = generic_password severity = medium line = 239

Medium

Secret Pattern

Hardcoded password in .hyperqe/validation-framework/vf2.1/benchmark.mjs

.hyperqe/validation-framework/vf2.1/benchmark.mjsView on unpkg · L239

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.mjsView file

3patternName = generic_password severity = medium line = 3

Medium

Secret Pattern

Hardcoded password in .hyperqe/frameworks/webdriverio/patterns/screen-platform.example.mjs

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.mjsView on unpkg · L3

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in .hyperqe/frameworks/webdriverio/patterns/screen-platform.example.mjs

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.mjsView on unpkg · L4

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.tsView file

15patternName = generic_password severity = medium line = 15

Medium

Secret Pattern

Hardcoded password in .hyperqe/frameworks/webdriverio/patterns/screen-platform.example.ts

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.tsView on unpkg · L15

21patternName = generic_password severity = medium line = 21

Medium

Secret Pattern

Hardcoded password in .hyperqe/frameworks/webdriverio/patterns/screen-platform.example.ts

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.tsView on unpkg · L21

Source & flagged code

13 flagged

package.jsonView file

Lines 39-79json

39 ".cursor",

40 ".codex",

41 ".github/workflows/validate.yml",

42 ".github/copilot-instructions.md",

43 ".github/prompts",

44 ".github/agents",

45 ".mcp.json",

46 ".vscode/mcp.json",

47 "AGENTS.md",

48 "LICENSE",

49 "README.md",

50 "docs/HYPERQE-OVERVIEW.md",

51 "docs/PLAYBOOK.md",

52 "docs/GUIDELINES.md",

53 "docs/hyperqe-overview.html"

54 ],

55 "scripts": {

56 "build": "node .hyperqe/scripts/validation-dashboard/build-ui.mjs",

57 "prepack": "npm run build",

58 "pack:local": "npm pack",

59 "postinstall": "node .hyperqe/scripts/bootstrap-project.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

60 "validate": "tsx .hyperqe/scripts/validate.ts",

61 "validate:artifacts": "node .hyperqe/scripts/validate-artifacts.mjs",

62 "check:golden": "node .hyperqe/scripts/check-golden-outputs.mjs",

63 "orchestration-dashboard": "node .hyperqe/scripts/orchestration-dashboard/server.mjs",

64 "validation-dashboard": "node .hyperqe/scripts/validation-dashboard/server.mjs",

65 "test:validation-dashboard": "node .hyperqe/scripts/validation-dashboard/selftest.mjs",

66 "test:rovo": "node .hyperqe/scripts/rovo/rovo.selftest.mjs",

67 "test:manual-tc": "node .hyperqe/scripts/manual-tc/manual-tc.selftest.mjs",

68 "test:design-ordering": "node .hyperqe/scripts/manual-tc/design-ordering.selftest.mjs",

69 "test:step-detail": "node .hyperqe/scripts/manual-tc/step-detail.selftest.mjs",

70 "test:manual-tc-md": "node .hyperqe/scripts/manual-tc/manual-tc-markdown.selftest.mjs",

71 "validation:canary": "node .hyperqe/scripts/vf2/validation-canary.mjs",

72 "validation:tc01-golden": "node .hyperqe/scripts/vf2/tc01-golden-canary.mjs",

73 "detect:layout": "node .hyperqe/scripts/detect-test-layout.mjs",

74 "init:fw:playwright": "node .hyperqe/scripts/init-framework.mjs playwright",

75 "init:fw:wdio": "node .hyperqe/scripts/init-framework.mjs webdriverio",

76 "sync:env": "node .hyperqe/scripts/sync-env-from-code.mjs",

77 "lint": "eslint .",

78 "test:orchestration": "node .hyperqe/scripts/task-store.selftest.mjs && node .hyperqe/scripts/batch-planner.selftest.mjs && node .hyperqe/scripts/executable-task-contract.selftest.mjs && node .hyperqe/scripts/orchestration-control.selftest.mjs && node .hyperqe/scripts/recovery.selftest.mjs && node .hyperqe/scripts/resource-conflict.selftest.mjs && node .hyperqe/scripts/ide-parent-bridge.selftest.mjs && node .hyperqe/scripts/multi-agent-recovery.selftest.mjs && node .hyperqe/scripts/native-isolation-evidence.selftest.mjs && node .hyperqe/scripts/wave-planner.selftest.mjs && node .hyperqe/sc ...

79 "test:vf1": "node .hyperqe/scripts/vf1/vf1.selftest.mjs",

Long lines were clipped for display.

.hyperqe/scripts/vf1/vf1.1.selftest.mjsView file

Lines 244-284javascript

244 requiredArtifacts: [],

245 manualSteps: [{ id: "STEP-001", requiresUi: true }],

246 locators: [],

247 },

248 });

249 assert.ok(v.findings.some((

.hyperqe/scripts/bootstrap-project.mjsView file

Lines 1-41javascript

1import fs from 'fs-extra';

2import path from 'node:path';

3import { fileURLToPath } from 'node:url';

4

5const __filename =

.hyperqe/scripts/setup-cursor.ps1View file

•path = .hyperqe/scripts/setup-cursor.ps1 kind = payload_in_excluded_dir sizeBytes = 873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

•path = .hyperqe/scripts/setup-cursor.ps1 kind = build_helper sizeBytes = 873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.hyperqe/scripts/setup-cursor.ps1View on unpkg

.hyperqe/scripts/vf1/vf1.selftest.mjsView file

Lines 2-42javascript

2 * VF1 unit + integration selftest (no external SUT required).

3 */

4import assert from "node:assert/strict";

5import path from "node:path"

.hyperqe/scripts/p2-2-runtime-selftest.mjsView file

Lines 34-74javascript

34 // Identity / markers

35 const m = parseHqeMarker("[HQE:TC01:STEP-006] Fill permalink");

36 assert(m?.testcaseId === "TC01" && m?.manualStepId === "STEP-006"

.hyperqe/validation-framework/vf2.1/benchmark.mjsView file

Lines 219-255javascript

219

220 await writeJsonAtomic(path.join(reportBase, "benchmark-results", "latest.json"), summary);

221 await writeJsonAtomic(path.join(reportBase, "critical-misses.json"), { scope: "SELF_TEST", misses: critMiss });

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.mjsView file

Lines 1-22javascript

1/** ESM mirror of screen-platform.example.ts for Node contract tests */

2export function loginLocatorsFor(platform) {

3 const android = { username: "~username", password: "~password", submit: "~login-button" };

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.tsView file

15patternName = generic_password severity = medium line = 15

Medium

Secret Pattern

Hardcoded password in .hyperqe/frameworks/webdriverio/patterns/screen-platform.example.ts

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.tsView on unpkg · L15

21patternName = generic_password severity = medium line = 21

Medium

Secret Pattern

Hardcoded password in .hyperqe/frameworks/webdriverio/patterns/screen-platform.example.ts

.hyperqe/frameworks/webdriverio/patterns/screen-platform.example.tsView on unpkg · L21