kbglow@0.3.1: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

kbglow@0.3.1: AI-agent control-surface risk | LPM Firewall

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/setup.js --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/setup.js --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/setup.jsView file

1#!/usr/bin/env node L2: // Wire kbglow into Claude Code's hooks (~/.claude/settings.json) so the L3: // keyboard blinks while Claude is waiting for approval. ... L25: L26: const settingsDir = path.join(os.homedir(), '.claude'); L27: const settingsPath = path.join(settingsDir, 'settings.json'); ... L62: } L63: fs.writeFileSync(settingsPath + '.kbglow-bak', raw); L64: backedUp = true; ... L76: L77: fs.mkdirSync(settingsDir, { recursive: true }); L78: fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/setup.jsView on unpkg · L1

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: #!/usr/bin/env node

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/setup.jsView on unpkg

18Trigger-reachable persistence chain: scripts.postinstall -> scripts/setup.js L18: const os = require('os'); L19: const { execSync } = require('child_process'); L20: ... L25: L26: const settingsDir = path.join(os.homedir(), '.claude'); L27: const settingsPath = path.join(settingsDir, 'settings.json'); ... L58: try { L59: settings = JSON.parse(raw); L60: } catch (e) { ... L94: L95: function launchctl(cmd) { L96: try {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

scripts/setup.jsView on unpkg · L18

•matchType = normalized_sha256 matchedPackage = kbglow@0.3.0 matchedPath = scripts/setup.js matchedIdentity = npm:a2JnbG93:0.3.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/setup.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 18fe34bcaebc0074 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = kbglow@0.3.0 matchedPath = scripts/setup.js matchedIdentity = npm:a2JnbG93:0.3.0 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/setup.jsView on unpkg

18const os = require('os'); L19: const { execSync } = require('child_process'); L20: ... L25: L26: const settingsDir = path.join(os.homedir(), '.claude'); L27: const settingsPath = path.join(settingsDir, 'settings.json'); ... L58: try { L59: settings = JSON.parse(raw); L60: } catch (e) { ... L94: L95: function launchctl(cmd) { L96: try {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/setup.jsView on unpkg · L18

bin/kbglowView file

•path = bin/kbglow kind = native_binary sizeBytes = 276400 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/kbglowView on unpkg