Loading npm security reports…

langcli-com@0.1.44: AI-agent control-surface risk | LPM Firewall

registry / langcli-com / 0.1.44

langcli-com@0.1.44

Langcli - interactive AI coding assistant in the terminal

AI Security Review

scanned 20d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing this package runs a postinstall script that launches a third-party Chrome MCP bridge and registers it with Chrome, with no prompt. That is an unconsented install-time write into a foreign browser and AI-agent control surface.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm, yarn, or pnpm install of langcli-com, which runs the postinstall script

Impact

The install can change Chrome native-messaging and MCP chrome-bridge state on the machine without the user running langcli.

Mechanism

postinstall Chrome MCP native-host registration

Policy narrative

On install, npm runs scripts/setup-chrome-mcp.mjs. That script loads @claude-code-best/mcp-chrome-bridge and, unless CLAUDE_CODE_SKIP_CHROME_MCP_SETUP is set, runs fix-permissions, register --browser chrome, and doctor. The user never has to launch langcli. This is a third-party Claude Code fork writing a Chrome native-messaging MCP host at install time, which is an unconsented mutation of a foreign agent control surface.

AI rationale

The postinstall hook drives a third-party Chrome MCP bridge to register a native messaging host without a user command, which is unconsented mutation of a foreign AI-agent control surface. A skip environment variable is not consent, so this is publish_block.

Evidence

package.jsonscripts/setup-chrome-mcp.mjs@claude-code-best/mcp-chrome-bridge/dist/cli.jsLibrary/Logs/mcp-chrome-bridge

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/setup-chrome-mcp.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/setup-chrome-mcp.mjsView file

11import { execFileSync } from 'node:child_process' L12: import { mkdirSync } from 'node:fs' L13: import { createRequire } from 'node:module' ... L16: L17: if (process.env.CLAUDE_CODE_SKIP_CHROME_MCP_SETUP === '1') { L18: process.exit(0) ... L57: L58: mkdirSync(getChromeMcpLogDir(), { recursive: true }) L59:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/setup-chrome-mcp.mjsView on unpkg · L11

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: #!/usr/bin/env node import { execfilesync } from 'node:child_process' import { mkdirsync } from 'node:fs' import { createrequire } from 'node:module' import { homedir } from 'node:os' import { join } from 'node:path' if (process.env.claude_code_skip_chrome_mcp_setup === '1') { process.exit(0) } const require = createrequire(import.meta.url) const clipath = require.resolve( '@claude-code-best/mcp-chrome-bridge/dist/cli.js', ) const userargs = process.argv.

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/setup-chrome-mcp.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 08a6c625ca84325c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = langcli-com@0.1.50 matchedPath = scripts/setup-chrome-mcp.mjs matchedIdentity = npm:bGFuZ2NsaS1jb20:0.1.50 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/setup-chrome-mcp.mjsView on unpkg

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_source_file sizeBytes = 27808391 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 27808391 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 45-85json

45 "sdk-tools.d.ts",

46 "bun.lock",

47 "scripts/setup-chrome-mcp.mjs"

48 ],

49 "scripts": {

50 "build": "bun run build.ts",

51 "dev": "bun run scripts/dev.ts",

52 "dev:inspect": "bun run scripts/dev-debug.ts",

53 "prepublishOnly": "bun run build",

54 "lint": "biome lint src/",

55 "lint:fix": "biome lint --fix src/",

56 "format": "biome format --write src/",

57 "prepare": "git config core.hooksPath .githooks",

58 "test": "bun test",

59 "check:unused": "knip-bun",

60 "health": "bun run scripts/health-check.ts",

61 "docs:dev": "npx mintlify dev",

62 "changeset": "changeset",

63 "changeset-version": "changeset version",

64 "changeset-publish": "bun run build && changeset publish",

65 "postinstall": "node scripts/setup-chrome-mcp.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L65

66 },

67 "dependencies": {

68 "@agentclientprotocol/sdk": "^0.19.0",

69 "@claude-code-best/mcp-chrome-bridge": "^3.0.1"

70 },

71 "devDependencies": {

72 "openai": "^6.34.0",

73 "@alcalzone/ansi-tokenize": "^0.3.0",

74 "@ant/model-provider": "1.0.0",

75 "@ant/claude-for-chrome-mcp": "1.0.0",

76 "@ant/computer-use-input": "1.0.0",

77 "@ant/computer-use-mcp": "1.0.0",

78 "@ant/computer-use-swift": "1.0.0",

79 "@anthropic-ai/bedrock-sdk": "^0.26.4",

80 "@anthropic-ai/claude-agent-sdk": "^0.2.87",

81 "@anthropic-ai/foundry-sdk": "^0.2.3",

82 "@anthropic-ai/mcpb": "^2.1.2",

83 "@anthropic-ai/sandbox-runtime": "^0.0.44",

84 "@anthropic-ai/sdk": "^0.80.0",

85 "@anthropic-ai/vertex-sdk": "^0.14.4",

scripts/setup-chrome-mcp.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2

3/**

4 * Unified Chrome MCP setup script.

5 *

6 * Usage:

7 * node scripts/setup-chrome-mcp.mjs # Run full setup (fix-permissions → register → doctor)

8 * node scripts/setup-chrome-mcp.mjs doctor # Run a single sub-command

9 */

10

11import { execFileSync } from

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_source_file sizeBytes = 27808391 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 27808391 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg