karajan-code@4.13.0: AI-agent control-surface risk

Loading npm security reports…

Source & flagged code

18 flagged

package.jsonView file

Lines 54-94json

54 "vendor/tree-sitter-grammars/",

55 "packages/hu-board/src/",

56 "packages/hu-board/public/",

57 "packages/hu-board/package.json",

58 "packages/ai-trash/src/",

59 "packages/ai-trash/bin/",

60 "packages/ai-trash/package.json",

61 "docs/karajan-code-logo-small.png",

62 "docs/README.es.md",

63 "LICENSE",

64 "README.md"

65 ],

66 "bin": {

67 "kj": "bin/kj.js",

68 "kj-tail": "bin/kj-tail",

69 "kj-trash": "packages/ai-trash/bin/kj-trash.js",

70 "karajan-mcp": "bin/karajan-mcp.js",

71 "kj-rag-mcp": "bin/kj-rag-mcp.js"

72 },

73 "scripts": {

74 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L74

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L74

75 "setup": "node scripts/install.js",

76 "test": "vitest run",

77 "test:watch": "vitest",

78 "test:coverage": "vitest run --coverage",

79 "lint": "eslint src/",

80 "lint:fix": "eslint src/ --fix",

81 "lint:syntax": "((command -v rg >/dev/null 2>&1 && rg --files src tests | rg '\\.js$') || find src tests -type f -name '*.js') | while IFS= read -r f; do node --check \"$f\"; done",

82 "format:check": "prettier --check .",

83 "format:fix": "prettier --write .",

84 "typecheck": "npx -p typescript@5 tsc --noEmit -p tsconfig.json",

85 "validate": "npm run lint && npm run lint:syntax && npm test",

86 "mcp": "node src/mcp/server.js",

87 "audit:test-diet": "node scripts/audit-test-diet.mjs",

88 "verify-pack": "node scripts/verify-pack.mjs",

89 "prepublishOnly": "node scripts/verify-pack.mjs",

90 "verify-quickstart": "node scripts/quickstart-gate.mjs"

91 },

92 "simple-git-hooks": {

93 "pre-commit": "npx lint-staged"

94 },

scripts/diet-baseline.mjsView file

Lines 5-45javascript

5 * Captures the *current* state of the unit test suite so subsequent diet

6 * commits (HU plan-20260429094214-0srv_002 .. _008) can prove they did not

7 * blow past the guardrails (wall

src/agents/resolve-bin.jsView file

Lines 45-74javascript

45 if (resolved) {

46 cache.set(name, resolved);

47 return resolved;

48 }

49 } catch {

50 /* not in PATH */

51 }

scripts/verify-pack.mjsView file

Lines 72-112javascript

73 const binPath = path.join(tmpDir, "node_modules", ".bin", "kj");

74 if (!fs.existsSync(binPath)) fail(`kj binary missing after install: ${binPath

src/sonar/project-key.jsView file

Lines 39-79javascript

39 const raw = String(remoteUrl || "").trim();

40 if (!raw) return null;

scripts/install.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2import fs from "node:fs/promises";

3import os from "node:os";

4import path from "node:path";

5import { spawn } from

src/utils/update-check.jsView file

Lines 1-31javascript

1import fs from "node:fs/promises";

2import os from "node:os";

3import path from "node:path";

4import { isSea } from "node:sea";

scripts/postinstall.jsView file

25await fs.mkdir(path.dirname(file), { recursive: true }); L26: await fs.writeFile(file, `${JSON.stringify(obj, null, 2)}\n`, "utf8"); L27: } ... L48: async function setupClaudeMcp(kjHome) { L49: const claudeJsonPath = path.join(os.homedir(), ".claude.json"); L50: let config = {}; ... L56: L57: config.mcpServers = config.mcpServers || {}; L58: config.mcpServers["karajan-mcp"] = { L59: type: "stdio", ... L83: async function setupCodexMcp(kjHome) { L84: const configPath = path.join(os.homedir(), ".codex", "config.toml");

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L25

src/audit/basal-cost.jsView file

76return new Promise((resolve) => { L77: execFile("npx", ["depcheck", "--json"], { cwd: projectDir, timeout: 30000 }, (err, stdout) => { L78: if (err && !stdout) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/audit/basal-cost.jsView on unpkg · L76

vendor/tree-sitter-grammars/python.wasmView file

•path = vendor/tree-sitter-grammars/python.wasm kind = wasm_module sizeBytes = 457883 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/tree-sitter-grammars/python.wasmView on unpkg

scripts/install-binary.shView file

•path = scripts/install-binary.sh kind = build_helper sizeBytes = 7546 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install-binary.shView on unpkg

packages/ai-trash/src/git-snapshot.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

packages/ai-trash/src/git-snapshot.jsView on unpkg

packages/hu-board/src/server.jsView file

•matchType = normalized_sha256 matchedPackage = karajan-code@3.15.3 matchedPath = packages/hu-board/src/server.js matchedIdentity = npm:a2FyYWphbi1jb2Rl:3.15.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/hu-board/src/server.jsView on unpkg

scripts/build-sea.mjsView file

•matchType = normalized_sha256 matchedPackage = karajan-code@4.14.0 matchedPath = scripts/build-sea.mjs matchedIdentity = npm:a2FyYWphbi1jb2Rl:4.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build-sea.mjsView on unpkg

src/cli/register-meta.jsView file

•matchType = normalized_sha256 matchedPackage = karajan-code@4.14.0 matchedPath = src/cli/register-meta.js matchedIdentity = npm:a2FyYWphbi1jb2Rl:4.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/register-meta.jsView on unpkg

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/diet-baseline.mjsView file

25L26: import { execFileSync, spawnSync } from "node:child_process"; L27: import { mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/diet-baseline.mjsView on unpkg · L25

karajan-code@4.13.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

18 flagged

package.jsonView file

Lines 54-94json

54 "vendor/tree-sitter-grammars/",

55 "packages/hu-board/src/",

56 "packages/hu-board/public/",

57 "packages/hu-board/package.json",

58 "packages/ai-trash/src/",

59 "packages/ai-trash/bin/",

60 "packages/ai-trash/package.json",

61 "docs/karajan-code-logo-small.png",

62 "docs/README.es.md",

63 "LICENSE",

64 "README.md"

65 ],

66 "bin": {

67 "kj": "bin/kj.js",

68 "kj-tail": "bin/kj-tail",

69 "kj-trash": "packages/ai-trash/bin/kj-trash.js",

70 "karajan-mcp": "bin/karajan-mcp.js",

71 "kj-rag-mcp": "bin/kj-rag-mcp.js"

72 },

73 "scripts": {

74 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L74

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L74

75 "setup": "node scripts/install.js",

76 "test": "vitest run",

77 "test:watch": "vitest",

78 "test:coverage": "vitest run --coverage",

79 "lint": "eslint src/",

80 "lint:fix": "eslint src/ --fix",

81 "lint:syntax": "((command -v rg >/dev/null 2>&1 && rg --files src tests | rg '\\.js$') || find src tests -type f -name '*.js') | while IFS= read -r f; do node --check \"$f\"; done",

82 "format:check": "prettier --check .",

83 "format:fix": "prettier --write .",

84 "typecheck": "npx -p typescript@5 tsc --noEmit -p tsconfig.json",

85 "validate": "npm run lint && npm run lint:syntax && npm test",

86 "mcp": "node src/mcp/server.js",

87 "audit:test-diet": "node scripts/audit-test-diet.mjs",

88 "verify-pack": "node scripts/verify-pack.mjs",

89 "prepublishOnly": "node scripts/verify-pack.mjs",

90 "verify-quickstart": "node scripts/quickstart-gate.mjs"

91 },

92 "simple-git-hooks": {

93 "pre-commit": "npx lint-staged"

94 },

scripts/diet-baseline.mjsView file

Lines 5-45javascript

5 * Captures the *current* state of the unit test suite so subsequent diet

6 * commits (HU plan-20260429094214-0srv_002 .. _008) can prove they did not

7 * blow past the guardrails (wall

src/agents/resolve-bin.jsView file

Lines 45-74javascript

45 if (resolved) {

46 cache.set(name, resolved);

47 return resolved;

48 }

49 } catch {

50 /* not in PATH */

51 }

scripts/verify-pack.mjsView file

Lines 72-112javascript

73 const binPath = path.join(tmpDir, "node_modules", ".bin", "kj");

74 if (!fs.existsSync(binPath)) fail(`kj binary missing after install: ${binPath

src/sonar/project-key.jsView file

Lines 39-79javascript

39 const raw = String(remoteUrl || "").trim();

40 if (!raw) return null;

scripts/install.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2import fs from "node:fs/promises";

3import os from "node:os";

4import path from "node:path";

5import { spawn } from

src/utils/update-check.jsView file

Lines 1-31javascript

1import fs from "node:fs/promises";

2import os from "node:os";

3import path from "node:path";

4import { isSea } from "node:sea";

scripts/postinstall.jsView file

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L25

src/audit/basal-cost.jsView file

76return new Promise((resolve) => { L77: execFile("npx", ["depcheck", "--json"], { cwd: projectDir, timeout: 30000 }, (err, stdout) => { L78: if (err && !stdout) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/audit/basal-cost.jsView on unpkg · L76

vendor/tree-sitter-grammars/python.wasmView file

•path = vendor/tree-sitter-grammars/python.wasm kind = wasm_module sizeBytes = 457883 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

vendor/tree-sitter-grammars/python.wasmView on unpkg

scripts/install-binary.shView file

•path = scripts/install-binary.sh kind = build_helper sizeBytes = 7546 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install-binary.shView on unpkg

packages/ai-trash/src/git-snapshot.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

packages/ai-trash/src/git-snapshot.jsView on unpkg

packages/hu-board/src/server.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

packages/hu-board/src/server.jsView on unpkg

scripts/build-sea.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build-sea.mjsView on unpkg

src/cli/register-meta.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/cli/register-meta.jsView on unpkg

karajan-code@4.13.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code