Loading npm security reports…

langcli-com@0.1.50: AI-agent control-surface risk | LPM Firewall

registry / langcli-com / 0.1.50

langcli-com@0.1.50

Langcli - interactive AI coding assistant in the terminal

AI Security Review

scanned 27d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically runs an MCP bridge setup. It changes browser/agent integration state through permission fixing and Chrome registration without an explicit user command.

Static reason

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation.

Impact

Creates or alters a Chrome MCP agent control surface in the installing user's environment.

Mechanism

Automatic execution of MCP bridge permission and registration commands.

Policy narrative

The manifest runs scripts/setup-chrome-mcp.mjs automatically after installation. Unless an opt-out environment variable is already set, that script resolves and executes an external MCP bridge CLI, first requesting permission changes and then registering Chrome integration. This is an unconsented install-time change to an AI-agent/browser control surface, rather than a user-invoked setup action.

AI rationale

The package has a concrete postinstall chain that automatically alters an MCP Chrome integration and invokes a permission-changing command. This meets the install-time foreign agent control-surface mutation block policy.

Evidence

package.jsonscripts/setup-chrome-mcp.mjs

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 97.0% confidence with false-positive risk.

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/setup-chrome-mcp.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/setup-chrome-mcp.mjsView file

11import { execFileSync } from 'node:child_process' L12: import { mkdirSync } from 'node:fs' L13: import { createRequire } from 'node:module' ... L16: L17: if (process.env.CLAUDE_CODE_SKIP_CHROME_MCP_SETUP === '1') { L18: process.exit(0) ... L57: L58: mkdirSync(getChromeMcpLogDir(), { recursive: true }) L59:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/setup-chrome-mcp.mjsView on unpkg · L11

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: #!/usr/bin/env node import { execfilesync } from 'node:child_process' import { mkdirsync } from 'node:fs' import { createrequire } from 'node:module' import { homedir } from 'node:os' import { join } from 'node:path' if (process.env.claude_code_skip_chrome_mcp_setup === '1') { process.exit(0) } const require = createrequire(import.meta.url) const clipath = require.resolve( '@claude-code-best/mcp-chrome-bridge/dist/cli.js', ) const userargs = process.argv.

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/setup-chrome-mcp.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 08a6c625ca84325c signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = langcli-com@0.1.49 matchedPath = scripts/setup-chrome-mcp.mjs matchedIdentity = npm:bGFuZ2NsaS1jb20:0.1.49 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/setup-chrome-mcp.mjsView on unpkg

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_source_file sizeBytes = 27900157 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 27900157 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 45-85json

45 "sdk-tools.d.ts",

46 "bun.lock",

47 "scripts/setup-chrome-mcp.mjs"

48 ],

49 "scripts": {

50 "build": "bun run build.ts",

51 "dev": "bun run scripts/dev.ts",

52 "dev:inspect": "bun run scripts/dev-debug.ts",

53 "prepublishOnly": "bun run build",

54 "lint": "biome lint src/",

55 "lint:fix": "biome lint --fix src/",

56 "format": "biome format --write src/",

57 "prepare": "git config core.hooksPath .githooks",

58 "test": "bun test",

59 "check:unused": "knip-bun",

60 "health": "bun run scripts/health-check.ts",

61 "docs:dev": "npx mintlify dev",

62 "changeset": "changeset",

63 "changeset-version": "changeset version",

64 "changeset-publish": "bun run build && changeset publish",

65 "postinstall": "node scripts/setup-chrome-mcp.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L65

66 },

67 "dependencies": {

68 "@agentclientprotocol/sdk": "^0.19.0",

69 "@claude-code-best/mcp-chrome-bridge": "^3.0.1"

70 },

71 "devDependencies": {

72 "openai": "^6.49.0",

73 "@alcalzone/ansi-tokenize": "^0.3.0",

74 "@ant/model-provider": "1.0.0",

75 "@ant/claude-for-chrome-mcp": "1.0.0",

76 "@ant/computer-use-input": "1.0.0",

77 "@ant/computer-use-mcp": "1.0.0",

78 "@ant/computer-use-swift": "1.0.0",

79 "@anthropic-ai/bedrock-sdk": "^0.26.4",

80 "@anthropic-ai/claude-agent-sdk": "^0.2.87",

81 "@anthropic-ai/foundry-sdk": "^0.2.3",

82 "@anthropic-ai/mcpb": "^2.1.2",

83 "@anthropic-ai/sandbox-runtime": "^0.0.44",

84 "@anthropic-ai/sdk": "^0.80.0",

85 "@anthropic-ai/vertex-sdk": "^0.14.4",

scripts/setup-chrome-mcp.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2

3/**

4 * Unified Chrome MCP setup script.

5 *

6 * Usage:

7 * node scripts/setup-chrome-mcp.mjs # Run full setup (fix-permissions → register → doctor)

8 * node scripts/setup-chrome-mcp.mjs doctor # Run a single sub-command

9 */

10

11import { execFileSync } from

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView file

•path = dist/vendor/audio-capture/x64-darwin/audio-capture.node kind = native_binary sizeBytes = 439076 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/vendor/audio-capture/x64-darwin/audio-capture.nodeView on unpkg

dist/cli.jsView file

•path = dist/cli.js kind = oversized_source_file sizeBytes = 27900157 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.jsView on unpkg

•path = dist/cli.js kind = oversized_cli_entrypoint sizeBytes = 27900157 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.jsView on unpkg