Loading npm security reports…

kixparadigm@1.3.16: AI-agent control-surface risk | LPM Firewall

registry / kixparadigm / 1.3.16

kixparadigm@1.3.16

kixparadigm — AI 自编排最小范式（认知层常驻）+ kixpower 多智能体编排 + DSH 一键导入（preset + vision-bridge + 门禁插件）

AI Security Review

scanned 28d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm installation automatically changes the DSH agent control surface and registers a package-owned plugin. That plugin can read a DSH API credential and transmit user-supplied images to an external vision endpoint.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing the npm package triggers postinstall; later use of the installed DSH image feature triggers the request.

Impact

A dependency install can persist executable agent-plugin code in a separate DSH profile and enable external transmission of image content using a local credential.

Mechanism

Automatic DSH preset and plugin installation followed by credential-backed image upload.

Policy narrative

On npm installation, postinstall runs an installer that copies presets into DSH, installs a plugin under the DSH web profile, creates its loader link, and edits the profile patch file so the plugin is mounted. The installed plugin reads the DSH credential file when a text-only model receives images, then sends the image data and bearer credential to the configured external vision service.

AI rationale

This is unconsented postinstall mutation of a foreign AI-agent control surface, with a mounted plugin that accesses credentials and sends user content externally. The automatic lifecycle behavior meets the publish-block policy even though the feature has a stated purpose.

Evidence

package.jsonscripts/install-lib.jsdsh/vision-bridge/index.js$DSH_HOME/.agent-presets/kixparadigm$DSH_HOME/.agent-presets/kixparadigm-classic$DSH_HOME/profiles/web/plugins/dsh-vision-bridge

Source & flagged code

22 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-lib.js --quiet

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install-lib.js --quiet

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dsh/preset-classic/plugins/kix-browser.test.jsView file

12const os = require('node:os') L13: const { spawnSync } = require('node:child_process') L14:

High

Child Process

Package source references child process execution.

dsh/preset-classic/plugins/kix-browser.test.jsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-browser.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-classic/plugins/kix-browser.test.jsView on unpkg

skills/fetch-webpage/scripts/fetch-webpage.mjsView file

67// so go through ComSpec. L68: const out = execFileSync(process.env.ComSpec ?? 'cmd.exe', ['/c', 'npm root -g'], { encoding: 'utf8', windowsHide: true }); L69: paths.push(out.trim());

High

Shell

Package source references shell execution.

skills/fetch-webpage/scripts/fetch-webpage.mjsView on unpkg · L67

•matchType = normalized_sha256 matchedPackage = kixparadigm@1.3.10 matchedPath = skills/fetch-webpage/scripts/fetch-webpage.mjs matchedIdentity = npm:a2l4cGFyYWRpZ20:1.3.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/fetch-webpage/scripts/fetch-webpage.mjsView on unpkg

dsh/preset-classic/plugins/kix-guards.test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-guards.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-classic/plugins/kix-guards.test.jsView on unpkg

221check('run_code v18: fs write API → allow', await dispatch('run_code', { code: 'const fs = await import("node:fs"); fs.writeFileSync("a","b"); return 1' }), false) L222: check('run_code v18: eval/Function/constructor → allow', await dispatch('run_code', { code: 'const a = eval("1+1"); const b = Function("return 2")(); return [a,b,new Map().construc... L223: check('run_code v18: computed capability access → allow', await dispatch('run_code', { code: 'return globalThis["process"]["env"]' }), false)

Low

Eval

Package source references a known benign dynamic code generation pattern.

dsh/preset-classic/plugins/kix-guards.test.jsView on unpkg · L221

bin/kixparadigm.jsView file

3// kixparadigm CLI — npm 全局安装后的命令入口 L4: require('../scripts/install-lib.js').cli(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kixparadigm.jsView on unpkg · L3

scripts/install-lib.jsView file

17Cross-file remote execution chain: scripts/install-lib.js spawns dsh/preset/plugins/kix-guards.test.js; helper contains network access plus dynamic code execution. L17: const os = require('node:os') L18: const { spawnSync } = require('node:child_process') L19: L20: const PKG_ROOT = path.join(__dirname, '..') L21: // 各语言包的安装目标由各自 package.json 的 "kixparadigm" 段声明： L22: // { variants: [{ id, dir }, ...], bridgeDir } —— 缺省 = 中文主包行为 L23: // 旧字段 presetId/presetDir 仍受支持（等价于单元素 variants）。 L24: const PKG = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf8')) L25: const CFG = PKG.kixparadigm || {} ... L129: function dshHome() { L130: return process.env.DSH_HOME || path.join(os.homedir(), '.dsh') L131: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/install-lib.jsView on unpkg · L17

install.shView file

•path = install.sh kind = build_helper sizeBytes = 8368 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

dsh/preset-classic/skills/kixpower/tests/run-contract-regression.ps1View file

•path = dsh/preset-[redacted]-contract-regression.ps1 kind = payload_in_excluded_dir sizeBytes = 55675 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dsh/preset-classic/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

dsh/preset-classic/plugins/kix-discipline.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dsh/preset-classic/plugins/kix-discipline.js#virtual:normalized:round1View on unpkg

dsh/preset-null/plugins/kix-browser.test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-browser.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-null/plugins/kix-browser.test.jsView on unpkg

dsh/preset/plugins/kix-browser.test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-browser.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset/plugins/kix-browser.test.jsView on unpkg

dsh/preset-classic/plugins/kix-browser.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-browser.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-classic/plugins/kix-browser.jsView on unpkg

dsh/preset-classic/plugins/kix-focus.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-focus.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-classic/plugins/kix-focus.jsView on unpkg

dsh/preset-null/plugins/kix-browser.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-browser.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-null/plugins/kix-browser.jsView on unpkg

dsh/preset-null/plugins/kix-focus.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-focus.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-null/plugins/kix-focus.jsView on unpkg

dsh/preset-null/plugins/kix-guards.test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-guards.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset-null/plugins/kix-guards.test.jsView on unpkg

dsh/preset/plugins/kix-browser.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-browser.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset/plugins/kix-browser.jsView on unpkg

dsh/preset/plugins/kix-focus.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.16 matchedPath = preset-classic-en/plugins/kix-focus.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.16 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dsh/preset/plugins/kix-focus.jsView on unpkg