Loading npm security reports…

lean-ctx-bin@3.10.5: AI-agent control-surface risk | LPM Firewall

registry / lean-ctx-bin / 3.10.5

lean-ctx-bin@3.10.5

LeanCTX — a local Context SDK for AI agents. Select, shape, reuse, recover, and measure context before inference. No Rust required.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation fetches an externally supplied executable and automatically runs its AI-tool onboarding action. This is an unconsented install-time AI-agent control-surface action.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall execution.

Impact

The opaque downloaded executable can alter AI-tool integration or configuration during dependency installation.

Mechanism

The lifecycle script downloads a release asset, extracts it, and executes its onboard command by default.

Policy narrative

A normal npm install runs postinstall. That script retrieves a release-selected executable rather than relying on package-contained code, installs it, then automatically runs its onboarding command described as connecting AI tools. The package supplies no user command or affirmative opt-in before this action; disabling requires a pre-set environment variable. This creates an unconsented install-time path for an opaque binary to modify AI-tool integrations.

AI rationale

The package performs automatic installation-time execution of a remotely supplied binary and invokes AI-tool onboarding by default. That is a concrete unconsented AI-agent control-surface risk.

Evidence

package.jsonpostinstall.js

Network endpoints1

api.github.com/repos/yvgude/lean-ctx/releases/latest

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.preinstall = node preinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

3scripts.postinstall = node postinstall.js Install-time code downloads an unverified remote native archive, stages it locally, activates an executable path, and exposes it to process execution. L3: L4: const { execFileSync, execSync } = require("child_process"); L5: const fs = require("fs"); L6: const path = require("path"); L7: const https = require("https"); L8: const { createGunzip } = require("zlib"); L9: const crypto = require("crypto"); ... L31: L32: function getTarget() { L33: const platform = process.platform; ... L42: const archMap = { x64: "x86_64", arm64: "aarch64" }; L43: const rustArch = archMap[arch];

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L3

•scripts.preinstall = node preinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

3L4: const { execFileSync, execSync } = require("child_process"); L5: const fs = require("fs"); L6: const path = require("path"); L7: const https = require("https"); L8: const { createGunzip } = require("zlib"); L9: const crypto = require("crypto"); ... L11: const REPO = "yvgude/lean-ctx"; L12: const BIN_DIR = path.join(__dirname, "bin"); L13: const IS_WIN = process.platform === "win32"; L14: const BINARY_NAME = IS_WIN ? "lean-ctx.exe" : "lean-ctx"; ... L128: lastPct = pct;

High

Install Named Payload File

Install-named source file stages remote content through filesystem writes and execution.

postinstall.jsView on unpkg · L3

postinstall.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

postinstall.js#virtual:normalized:round1View on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-43json

1{

2 "name": "lean-ctx-bin",

3 "version": "3.10.5",

4 "description": "LeanCTX \u2014 a local Context SDK for AI agents. Select, shape, reuse, recover, and measure context before inference. No Rust required.",

5 "keywords": [

6 "lean-ctx",

7 "context-sdk",

8 "context-engineering",

9 "mcp",

10 "llm",

11 "context",

12 "claude",

13 "cursor",

14 "ai",

15 "ai-agents",

16 "code-graph",

17 "token-optimization"

18 ],

19 "homepage": "https://leanctx.com",

20 "repository": {

21 "type": "git",

22 "url": "https://github.com/yvgude/lean-ctx.git",

23 "directory": "packages/lean-ctx-bin"

24 },

25 "license": "Apache-2.0",

26 "bin": {

27 "lean-ctx": "./bin/lean-ctx.js"

28 },

29 "scripts": {

30 "preinstall": "node preinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L30

31 "postinstall": "node postinstall.js"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 },

33 "files": [

34 "bin/",

35 "preinstall.js",

36 "postinstall.js",

37 "README.md"

38 ],

39 "engines": {

40 "node": ">=16"

41 }

42}

43

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L3

postinstall.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2"use strict";

3

4const { execFileSync, execSync } = require("child_process");

5const fs = require(

postinstall.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

postinstall.js#virtual:normalized:round1View on unpkg