instar@1.3.1355
⚠ Under reviewCoherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.
AI Security Review
scanned 7d ago · by lpm-firewall-aiInspected source explains the flagged install hook and GitSync writes as package setup behavior, but the required clean citation coverage exceeds the 128-citation limit. The package cannot be cleared or blocked from the reviewed excerpts alone.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The inspected postinstall script runs during package installation; the migration behavior is triggered by the package’s update process.
Impact
No harmful effect was confirmed in these excerpts; broader package behavior remains unresolved.
Mechanism
The postinstall script repairs the package’s native SQLite dependency; the inspected migration hook uses local configuration and an Instar session token.
AI rationale
Inspected source explains the flagged install hook and GitSync writes as package setup behavior, but the required clean citation coverage exceeds the 128-citation limit. The package cannot be cleared or blocked from the reviewed excerpts alone.
Evidence
package.jsonscripts/fix-better-sqlite3.cjsdist/core/GitSync.jsdist/core/PostUpdateMigrator.js
Decision evidence
public snapshotAI called this Manual Review at 65.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook invokes a script that targets the package’s better-sqlite3 dependency.
- The inspected GitSync code writes SSH signing identities to an allowed-signers file.
- The inspected migration hook reads the project’s local configuration and uses an Instar session token for local requests.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
18 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/fix-better-sqlite3.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/threadline/PipeSessionSpawner.jsView file
15*/
L16: import { execSync } from 'node:child_process';
L17: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
dist/threadline/PipeSessionSpawner.jsView on unpkg · L15352// Spawn tmux session, recording its incarnation (session id + pane pid)
L353: const created = execSync(`tmux new-session -d -P -F '#{session_id} #{pane_pid}' -s "${sessionName}" -x 200 -y 50 'bash -c "${shellCmd.replace(/"/g, '\\"')}"'`, { timeout: 10_000, e...
L354: const [tmuxId, panePid] = created.split(' ');
High
Shell
Package source references shell execution.
Findings
4 Critical11 High6 Medium5 Low
CriticalPersistence Backdoordist/core/GitSync.js
CriticalTrigger Reachable Dangerous Capabilitydist/core/GitSync.js
CriticalTrigger Reachable Excluded Directory Payloaddist/core/PostUpdateMigrator.js
CriticalPrevious Version Dangerous Deltadist/core/PostUpdateMigrator.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/threadline/PipeSessionSpawner.js
HighShelldist/threadline/PipeSessionSpawner.js
HighSame File Env Network Executionskills/spec-converge/scripts/publish-spec-review.mjs
HighCredential Redirect Persistencedist/messaging/TelegramAdapter.js
HighSandbox Evasion Gated Capabilitydist/commands/setup.js
Affected versions and remediation
This report applies to instar@1.3.1355.
See all versions of instar for other recorded verdicts.
- Review the evidence and your use of instar@1.3.1355 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.