Loading npm security reports…

kixparadigm-en@1.2.20: AI-agent control-surface risk | LPM Firewall

registry / kixparadigm-en / 1.2.20

kixparadigm-en@1.2.20

kixparadigm-en — English edition of the kix paradigm preset for DeepSeek Harness: resident cognition layer (EN) + kixpower multi-agent orchestration, one-command import (preset + vision-bridge + guard plugins)

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies DeepSeek Harness's preset, plugin, loader, and patch configuration. The installed plugin can later send attached images with a DSH credential to its fixed vision API.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall

Impact

Unconsented activation of package-controlled code in the DSH agent control plane.

Mechanism

Automatic foreign AI-agent preset and plugin installation

Policy narrative

Installing the npm package runs its default installer without an explicit command. That installer copies a full preset into DeepSeek Harness, creates a plugin loader link, and writes a DSH patch entry that activates the package's bridge. The active bridge reads the DSH vision API credential and sends user-attached images to a fixed external endpoint. This is an unconsented postinstall mutation of a foreign AI-agent control surface.

Rationale

The package's declared feature does not justify silently installing and activating code in the separate DeepSeek Harness control plane during npm postinstall. This meets the blocking policy for unconsented postinstall mutation of a foreign/broad AI-agent control surface.

Evidence

package.jsonscripts/install-lib.jsbridge/index.jsbridge/client.jspreset/agent.cordis.yml$DSH_HOME/.agent-presets/kixparadigm-en$DSH_HOME/profiles/web/plugins/dsh-vision-bridge$DSH_HOME/profiles/web/node_modules/dsh-vision-bridge

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-lib.js --quiet

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install-lib.js --quiet

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

preset/plugins/kix-guards.jsView file

104const { randomUUID } = require('node:crypto') L105: const { execFile } = require('node:child_process') L106: const { promisify } = require('node:util')

High

Child Process

Package source references child process execution.

preset/plugins/kix-guards.jsView on unpkg · L104

bin/kixparadigm-en.jsView file

3// kixparadigm-en CLI — English edition, installs the kixparadigm-en preset L4: require('../scripts/install-lib.js').cli(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kixparadigm-en.jsView on unpkg · L3

preset/plugins/kix-guards.test.js#virtual:string-array:round1View file

180check("pwsh: cp 外部 → 控制平面 → allow（v12 remind）", await dispatch("pwsh", { command: `cp /tmp/settings.yaml ${HOME}/.dsh/settings.yaml` }), false) L181: check(`pwsh: curl -o ${HOME}/.dsh/settings.yaml URL → allow（v12 remind）`, await dispatch("pwsh", { command: `curl -o ${HOME}/.dsh/settings.yaml https://example.com/x` }), false) L182: check(`pwsh: curl -o /tmp/x URL → allow（v8 下载目标非控制平面）`, await dispatch("pwsh", { command: "curl -o /tmp/x https://example.com/x" }), false) ... L189: // ══ 4. run_code 代码体受限能力（v3 补 fs 直写）════════════════════════ L190: check("run_code: import(\"node:child_process\") → deny", await dispatch("run_code", { code: "const cp = await import(\"node:child_process\"); return 1" }), true) L191: check("run_code: fetch( 网络 → deny", await dispatch("run_code", { code: "co

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

preset/plugins/kix-guards.test.js#virtual:string-array:round1View on unpkg · L180

preset/skills/kixpower/tests/run-contract-regression.ps1View file

•path = [redacted]-contract-regression.ps1 kind = payload_in_excluded_dir sizeBytes = 56539 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

preset/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.15 matchedPath = [redacted]-contract-regression.ps1 matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•path = [redacted]-contract-regression.ps1 kind = build_helper sizeBytes = 56539 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

preset/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

bridge/index.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.15 matchedPath = bridge/index.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/index.jsView on unpkg

bridge/test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.15 matchedPath = bridge/test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/test.jsView on unpkg

preset/plugins/consistency-lib.cjsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.15 matchedPath = preset/plugins/consistency-lib.cjs matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset/plugins/consistency-lib.cjsView on unpkg

preset/plugins/kix-commands.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.15 matchedPath = preset/plugins/kix-commands.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset/plugins/kix-commands.jsView on unpkg