Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

morphisms: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as agent extension risk

Allowed by default with warning: install-time first-party agent extension setup was detected.

View on npm All versions Policy details

registry / morphisms / 0.1.0-beta.13

morphisms@0.1.0-beta.13

Morphisms workflow runtime shim and onboarding wizard

AI Security Review

scanned 7h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious attack surface. Explicit setup installs Morphisms-owned agent skills into the current project and onboarding starts a local Workbench process.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `morphisms init` or `morphisms onboarding`.

Impact

Can influence participating agent harnesses within the initialized repository; no stealth install-time mutation or exfiltration is established.

Mechanism

Explicit project-scoped agent extension setup and local binary launch.

Rationale

This is not malicious, but it is an explicit project-scoped AI-agent extension setup that warrants a warning under the firewall policy. The behavior is user-invoked and package-aligned rather than stealthy.

Evidence

package.jsonlib/init.jslib/onboarding.jstemplates/manifest.jsontemplates/agent/skills/morphisms/SKILL.md{repo}/.claude/skills/morphisms/SKILL.md{repo}/.agent/skills/morphisms/SKILL.md{repo}/.mor/agent-manual.md{repo}/.morphisms-contract/

Decision evidence

public snapshot

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`lib/init.js` copies templates into `.claude/skills` and `.agent/skills` during `morphisms init`.
`templates/manifest.json` defines project agent-skill destinations.
`lib/onboarding.js` can detach a local `mor-workbench` process after explicit onboarding.

Evidence against

`package.json` has no preinstall, install, or postinstall hook.
Agent-skill writes require the explicit `morphisms init` command and preserve modified files unless replacement is confirmed.
Skills constrain workflow actions and prohibit bypassing workflow protections; no credential harvesting or exfiltration was found.
Network use is local Workbench health checks plus an explicit npm-registry update check; no remote payload loading was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

Manifest

NoLicense

scanned 15 file(s), 85.6 KB of source, external domains: 127.0.0.1, registry.npmjs.org

Source & flagged code

4 flagged · loading source

lib/onboarding.jsView file

1const { spawn, spawnSync } = require('node:child_process'); L2: const fs = require('node:fs');

High

Child Process

Package source references child process execution.

lib/onboarding.jsView on unpkg · L1

58function buildOnboardingUrl(port, thread) { L59: const base = `http://localhost:${port}/#workbench?onboarding=1`; L60: if (!thread) return base; ... L64: function startDetachedWorkbench(repoRoot, port) { L65: const workspaceRegistry = process.env.MORPHISMS_WORKBENCH_REGISTRY || undefined; L66: const child = spawn(resolveBinaryOrPath('mor-workbench'), buildWorkbenchArgv(repoRoot, { port, workspaceRegistry }), { L67: cwd: repoRoot,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/onboarding.jsView on unpkg · L58

•matchType = previous_version_dangerous_delta matchedPackage = morphisms@0.1.0-beta.1 matchedIdentity = npm:bW9ycGhpc21z:0.1.0-beta.1 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/onboarding.jsView on unpkg

bin/mor-thread.jsView file

1#!/usr/bin/env node L2: const { forwardSync } = require('../lib/forward'); L3: process.exit(forwardSync('mor-thread', process.argv.slice(2)));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/mor-thread.jsView on unpkg · L1

Findings

3 High3 Medium4 Low

HighChild Processlib/onboarding.js

HighSame File Env Network Executionlib/onboarding.js

HighPrevious Version Dangerous Deltalib/onboarding.js

MediumDynamic Requirebin/mor-thread.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowNo License

91%Warn

Verdict confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskLow

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

Maintainersblakesims

Version0.1.0-beta.14

PublishedJul 17, 2026

LicenseSEE LICENSE IN LICENSE

Dependencies2

Integrityverified

Package size47.0 KB

Files60

Runtime surface

package.json

Entrypointsbin → mor, mor-thread, mor-workbench +1

Runtimenode >=18

Artifact182 KB · 60 files1 signature(s)

Install lifecycleNo install hooks · other: test

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkUrlStringsNoLicense

LPM CLI

Source & flagged code

4 flagged

lib/onboarding.jsView file

Lines 1-21javascript

1const { spawn, spawnSync } = require('node:child_process');

2const fs = require('node:fs');

High

Child Process

Package source references child process execution.

lib/onboarding.jsView on unpkg · L1

3const net = require('node:net');

4const path = require('node:path');

5const { buildWorkbenchArgv } = require('./workbench');

6const { resolveBinaryOrPath } = require('./platform');

7const { loadOnboardingContext, onboardingError } = require('./onboarding-context');

8const {

9 DEFAULT_POLL_INTERVAL_MS,

10 DEFAULT_POLL_TIMEOUT_MS,

11 DEFAULT_PROBE_TIMEOUT_MS,

12 httpGet,

13 probeWorkbench,

14 safeReason,

15 selectionQuery,

16 waitForWorkbench,

17 watchChildProcess,

18} = require('./workbench-health');

19

20const GREETING = "👋 I'm your Morphisms agent. This thread is where we'll work — reply here and we'll get started.";

21

Lines 38-78javascript

38 help = true;

39 } else if (arg === '--thread') {

40 thread = argv[++i];

41 if (!thread) throw onboardingError('onboarding_invalid_argument'

•matchType = previous_version_dangerous_delta matchedPackage = morphisms@0.1.0-beta.1 matchedIdentity = npm:bW9ycGhpc21z:0.1.0-beta.1 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/onboarding.jsView on unpkg

bin/mor-thread.jsView file

Lines 1-4javascript

1#!/usr/bin/env node

2const { forwardSync } = require('../lib/forward');

3process.exit(forwardSync('mor-thread', process.argv.slice(2)));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/mor-thread.js

,

'--thread requires a value'

);

42 } else if (arg.startsWith('--thread=')) {

43 thread = arg.slice('--thread='.length);

44 if (!thread) throw onboardingError('onboarding_invalid_argument', '--thread requires a value');

45 } else {

46 throw onboardingError('onboarding_invalid_argument', `unknown onboarding argument: ${arg}`);

47 }

48 }

49 if (check && thread) {

50 throw onboardingError('onboarding_invalid_argument', '--check and --thread cannot be used together');

51 }

52 if (thread && !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(thread)) {

53 throw onboardingError('onboarding_invalid_thread', '--thread must be 1–64 letters, numbers, dots, underscores, or dashes');

54 }

55 return { thread, json, check: check || !thread, help };

56}

57

58function buildOnboardingUrl(port, thread) {

59 const base = `http://localhost:${port}/#workbench?onboarding=1`;

60 if (!thread) return base;

61 return `${base}&thread=${encodeURIComponent(thread)}`;

62}

63

64function startDetachedWorkbench(repoRoot, port) {

65 const workspaceRegistry = process.env.MORPHISMS_WORKBENCH_REGISTRY || undefined;

66 const child = spawn(resolveBinaryOrPath('mor-workbench'), buildWorkbenchArgv(repoRoot, { port, workspaceRegistry }), {

67 cwd: repoRoot,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/onboarding.jsView on unpkg · L58

68 detached: true,

69 stdio: 'ignore',

70 });

71 const childState = watchChildProcess(child);

72 child.unref();

73 return {

74 ...childState,

75 terminate() {

76 // detached:true makes the launcher a process-group leader on the supported

77 // Linux/macOS platforms; terminate only this onboarding-owned group.

78 try { process.kill(-child.pid, 'SIGTERM'); } catch (_) { /* already exited */ }

View on unpkg · L1

4