registry / kbglow / 0.3.0

kbglow@0.3.0

Your Mac's keyboard backlight blinks while your AI agent (e.g. Claude Code) is waiting for approval

AI Security Review

scanned 4d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm installation automatically mutates Claude Code's user settings and installs behavior-bearing hooks. Those hooks execute the package binary on Claude Code events.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

Persistent execution of package commands within Claude Code event handling.

Mechanism

automatic foreign AI-agent hook installation

Policy narrative

On npm install, package.json invokes scripts/setup.js with --postinstall. The script creates or rewrites ~/.claude/settings.json, backs up existing content, and adds Claude Code command hooks that invoke the installed kbglow binary for multiple agent events. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

Although the stated feature is benign and documented, the package performs the policy-defined blocking behavior: postinstall mutation of a foreign AI-agent control surface. No exfiltration or network activity was confirmed. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonscripts/setup.jsREADME.mdbin/kbglow~/.claude/settings.json~/.claude/settings.json.kbglow-bak

Decision evidence

public snapshot

kbglow@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code