Loading npm security reports…

kixparadigm-en@1.3.10: Suspicious npm security report (Warn) | LPM Firewall

registry / kixparadigm-en / 1.3.10

kixparadigm-en@1.3.10

kixparadigm-en — English edition of the kix paradigm preset for DeepSeek Harness: resident cognition layer (EN) + kixpower multi-agent orchestration, one-command import (preset + vision-bridge + guard plugins)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package automatically changes the global DeepSeek Harness agent profile and registers a bridge. When that bridge receives an image request, it reads the configured API key and forwards the image to its fixed vision endpoint.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation, followed by a DSH image-description request.

Impact

The package gains persistent DSH plugin execution and can transmit user-provided images with the local vision API credential.

Mechanism

Automatic DSH extension installation with credential-backed image forwarding.

AI rationale

This is a first-party DSH extension installer, not a demonstrated arbitrary payload or secret-stealing chain. Its unconsented postinstall mutation of a global AI-agent control surface and credential-backed external image forwarding remain a real lifecycle risk.

Evidence

package.jsonscripts/install-lib.jsbridge/index.js$DSH_HOME/.agent-presets/kixparadigm-classic-en$DSH_HOME/profiles/web/plugins/dsh-vision-bridge$DSH_HOME/profiles/web/node_modules/dsh-vision-bridge$DSH_HOME/profiles/web/cordis.patch.yml$DSH_HOME/.credentials.yaml

Network endpoints1

/api/coding/paas/v4/chat/completions

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-lib.js --quiet

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install-lib.js --quiet

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install-lib.jsView file

17const os = require('node:os') L18: const { spawnSync } = require('node:child_process') L19:

High

Child Process

Package source references child process execution.

scripts/install-lib.jsView on unpkg · L17

17Cross-file remote execution chain: scripts/install-lib.js spawns preset-classic-en/plugins/kix-guards.test.js; helper contains network access plus dynamic code execution. L17: const os = require('node:os') L18: const { spawnSync } = require('node:child_process') L19: L20: const PKG_ROOT = path.join(__dirname, '..') L21: // 各语言包的安装目标由各自 package.json 的 "kixparadigm" 段声明： L22: // { variants: [{ id, dir }, ...], bridgeDir } —— 缺省 = 中文主包行为 L23: // 旧字段 presetId/presetDir 仍受支持（等价于单元素 variants）。 L24: const PKG = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf8')) L25: const CFG = PKG.kixparadigm || {} ... L129: function dshHome() { L130: return process.env.DSH_HOME || path.join(os.homedir(), '.dsh') L131: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/install-lib.jsView on unpkg · L17

preset-classic-en/plugins/kix-guards.test.jsView file

199check('run_code v18: fs write API → allow', await dispatch('run_code', { code: 'const fs = await import("node:fs"); fs.writeFileSync("a","b"); return 1' }), false) L200: check('run_code v18: eval/Function/constructor → allow', await dispatch('run_code', { code: 'const a = eval("1+1"); const b = Function("return 2")(); return [a,b,new Map().construc... L201: check('run_code v18: computed capability access → allow', await dispatch('run_code', { code: 'return globalThis["process"]["env"]' }), false)

Low

Eval

Package source references a known benign dynamic code generation pattern.

preset-classic-en/plugins/kix-guards.test.jsView on unpkg · L199

bin/kixparadigm-en.jsView file

3// kixparadigm-en CLI — English edition, installs the kixparadigm-en preset L4: require('../scripts/install-lib.js').cli(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kixparadigm-en.jsView on unpkg · L3

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View file

•path = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 kind = payload_in_excluded_dir sizeBytes = 55675 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.20 matchedPath = [redacted]-contract-regression.ps1 matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•path = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 kind = build_helper sizeBytes = 55675 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1

preset-classic-en/plugins/kix-discipline.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

preset-classic-en/plugins/kix-discipline.js#virtual:normalized:round1View on unpkg

bridge/index.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.20 matchedPath = bridge/index.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/index.jsView on unpkg

bridge/test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.20 matchedPath = bridge/test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/test.jsView on unpkg

preset-classic-en/plugins/kix-commands.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.2.20 matchedPath = preset/plugins/kix-commands.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-commands.jsView on unpkg

preset-classic-en/plugins/kix-focus.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = kixparadigm-en@1.2.14 matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.2.14 similarity = 0.485 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

preset-classic-en/plugins/kix-focus.jsView on unpkg