lemma-mcp: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

lemma-mcp: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/server/install-skill.jsView file

1/** L2: * Installs Lemma's SKILL.md to `~/.agents/skills/lemma/SKILL.md`. L3: * ... L19: import { VERSION } from "../version.js"; L20: export const SKILL_DIR = path.join(os.homedir(), ".agents", "skills", "lemma"); L21: export const SKILL_FILE = path.join(SKILL_DIR, "SKILL.md"); ... L28: * @param opts.skillDir Override the target directory (used by tests to sandbox L29: * writes away from the real `~/.agents/skills/lemma/`). Defaults to SKILL_DIR. L30: */ ... L49: if (!fs.existsSync(skillDir)) { L50: fs.mkdirSync(skillDir, { recursive: true }); L51: }

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/server/install-skill.jsView on unpkg · L1

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from "fs"; import os from "os"; import path from "path"; import { pathtofileurl } from "url"; import { buildskillcontent, parseskillversion } from "./sk[redacted]"; import { version } from "../version.js"; export const skill_dir = path.join(os.homedir(), ".agents", "skills", "lemma"); export const skill_file = path.join(skill_dir, "skill.md"); export function getskillpath() { return skill_file; } export function installskill(opts) { const s

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/server/install-skill.jsView on unpkg

Source & flagged code

4 flagged

package.jsonView file

Lines 8-48json

8 "lemma": "dist/index.js"

9 },

10 "exports": {

11 ".": "./dist/index.js",

12 "./memory": "./dist/memory/index.js",

13 "./guides": "./dist/guides/index.js",

14 "./server": "./dist/server/index.js"

15 },

16 "files": [

17 "dist",

18 "scripts/postinstall.mjs",

19 "assets/visualizer.html",

20 "assets/visualizer-demo.gif",

21 "README.md",

22 "docs/README.tr.md",

23 "LICENSE"

24 ],

25 "scripts": {

26 "build": "tsc && node -e \"const fs=require('fs');const p=require('path');const s=p.join('assets','visualizer.html');const d=p.join('dist','server','visualizer.html');if(fs.existsSync(s)){fs.mkdirSync(p.dirname(d),{recursive:true});fs.copyFileSync(s,d);console.log('Copied visualizer.html to dist/server/')}else{console.warn('Warning: assets/visualizer.html not found')}\"",

27 "prepare": "npm run build",

28 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 "typecheck": "tsc --noEmit --project tsconfig.test.json",

30 "start": "node dist/index.js",

31 "prepublishOnly": "npm run build",

32 "test": "node --import tsx --import ./tests/_setup.ts --test tests/*.test.ts tests/db/*.test.ts tests/memory/*.test.ts tests/guides/*.test.ts tests/sessions/*.test.ts tests/server/*.test.ts tests/intelligence/*.test.ts",

33 "test:memory": "node --import tsx --import ./tests/_setup.ts --test tests/memory/*.test.ts",

34 "test:guides": "node --import tsx --import ./tests/_setup.ts --test tests/guides/*.test.ts",

35 "test:sessions": "node --import tsx --import ./tests/_setup.ts --test tests/sessions/*.test.ts",

36 "test:server": "node --import tsx --import ./tests/_setup.ts --test tests/server/*.test.ts",

37 "test:backup": "node --import tsx --import ./tests/_setup.ts --test tests/db/backup.test.ts tests/db/backup-clients.test.ts tests/db/backup-legacy.test.ts tests/db/backup-upgrade.test.ts tests/server/backup.test.ts tests/server/tools.test.ts",

38 "test:mcp": "node tests/manual/mcp-smoke.mjs",

39 "test:mcp:explain": "node tests/manual/recall-explain-mcp.mjs",

40 "test:mcp:c2": "node tests/manual/c2-quality-mcp.mjs",

41 "test:mcp:wave2": "node tests/manual/wave2-mcp.mjs",

42 "test:mcp:wave3": "node tests/manual/wave3-mcp.mjs",

43 "test:mcp:glm": "node tests/manual/glm-agent-mcp.mjs"

44 },

45 "keywords": [

46 "mcp",

47 "memory",

48 "llm",

dist/server/install-skill.jsView file

Lines 1-21javascript

1/**

2 * Installs Lemma's SKILL.md to `~/.agents/skills/lemma/SKILL.md`.

3 *

4 * Used in two places:

5 * - npm `postinstall` (and `lemma --install-skill`): writes on install/upgrade.

6 * - Server startup (runtime safety net): re-checks every launch so the file

7 * stays current even for users who run via `npx` or never reinstall.

8 *

9 * Idempotent + version-aware: if the installed file's version stamp already

10 * matches the running VERSION, it is left untouched. On upgrade the stamp