Loading npm security reports…

morphyagent@0.3.8: Clean npm security report (Allow) | LPM Firewall

registry / morphyagent / 0.3.8

morphyagent@0.3.8

Self-hosted, self-evolving AI agent with its own dashboard.

AI Security Review

scanned 16d ago · by lpm-firewall-ai

No confirmed malicious attack surface; observed install-time writes and runtime shell/network features are aligned with a self-hosted AI agent CLI. Risk is dual-use and broad, but gated by user install/runtime configuration rather than hidden exfiltration.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install/postinstall or user runs morphy commands/agent tools

Impact

Installs and updates Morphy under ~/.morphy; user-invoked agent can run shell commands in workspace

Mechanism

self-hosted AI agent installer, updater, relay tunnel, and workspace-scoped tools

Rationale

Static source inspection found powerful installer/updater and AI-agent capabilities, but they are visible, package-aligned, integrity-checked where remote code is downloaded, and constrained or user-invoked. I found no hidden credential theft, unrelated persistence, destructive behavior, or exfiltration path warranting a block.

Evidence

package.jsonscripts/postinstall.jsbin/cli.jssupervisor/relay-tunnel.tsshared/relay.tssupervisor/harnesses/pi/tools/bash.tssupervisor/harnesses/pi/tools/path-safety.ts~/.morphy~/.morphy/.npmrc~/.morphy/workspace/usr/local/bin/morphy~/.local/bin/morphy

Network endpoints3

/morphyagent/latest

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist-chat/assets/cobol-hBjMZW-R.jsView file

1import{t as e}from"./html-CzX0w7K_.js";import{t}from"./java-BqKEu7zh.js";var n=Object.freeze(JSON.parse(`{"displayName":"COBOL","fileTypes":["ccp","scbl","cobol","cbl","cblle","cbl...

High

Child Process

Package source references child process execution.

dist-chat/assets/cobol-hBjMZW-R.jsView on unpkg · L1

dist-chat/assets/codeql-DlIhJTR7.jsView file

1var e=[Object.freeze(JSON.parse(`{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\b...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-chat/assets/codeql-DlIhJTR7.jsView on unpkg · L1

supervisor/index.tsView file

1import http from 'http'; L2: import net from 'net'; ... L26: import { ensureFileDirs, saveAttachment, saveAudio, MAX_ATTACHMENTS_PER_MESSAGE, MAX_TOTAL_ATTACHMENT_BYTES, type SavedFile } from './file-saver.js'; L27: import { approxBase64Bytes } from './harnesses/attachment-policy.js'; L28: import { startViteDevServers, stopViteDevServers } from './vite-dev.js'; L29: import { startScheduler, stopScheduler, readPulseConfig, readCronsConfig, nextRunISO, describeCron } from './scheduler.js'; L30: import { execSync, spawn as cpSpawn } from 'child_process'; L31: import crypto from 'crypto'; ... L83: // fixed token budget. Auto-compaction stays on as the in-turn safety net. L84: const CONTEXT_RECYCLE_TOKENS = Number(process.env.MORPHY_CONTEXT_RECYCLE_TOKENS) || 140_000; L85: const CONTEXT_REC

Low

Weak Crypto

Package source references weak cryptographic algorithms.

supervisor/index.tsView on unpkg · L1

bin/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = morphyagent@0.3.7 matchedIdentity = npm:bW9ycGh5YWdlbnQ:0.3.7 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.jsView on unpkg

99ensureNpmrc(ROOT); L100: execSync('npm install --omit=dev', { cwd: ROOT, stdio: 'inherit' }); L101: } catch {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.jsView on unpkg · L99

12// - The supervisor writes ~/.morphy/supervisor.json at boot (pid/startedAt/ L13: // version/port). That pidfile — not launchctl/systemctl alone — is the L14: // source of truth for "is Morphy running", so status/logs can never show a ... L20: // hosted provisioning: `cli.js init --hosted` → __HOSTED_READY__=<json>. L21: // foreground boot parses supervisor stdout markers __READY__, L22: // __TUNNEL_URL__=, __RELAY_URL__=, __VITE_WARM__, __TUNNEL_FAILED__. ... L25: L26: import { spawn, spawnSync, execSync, execFileSync } from 'child_process'; L27: import fs from 'fs'; ... L32: L33: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L34:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/cli.jsView on unpkg · L12

workspace/client/public/morphy_bounce.webmView file

•path = workspace/client/public/morphy_bounce.webm kind = high_entropy_blob sizeBytes = 645337 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

workspace/client/public/morphy_bounce.webmView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 25-65json

25 "postcss.config.js",

26 "components.json"

27 ],

28 "keywords": [

29 "ai",

30 "bot",

31 "self-hosted",

32 "assistant",

33 "chatbot",

34 "raspberry-pi",

35 "morphy"

36 ],

37 "engines": {

38 "node": ">=18"

39 },

40 "scripts": {

41 "dev": "concurrently \"tsx watch supervisor/index.ts\" \"vite\"",

42 "build": "vite build && vite build --config vite.chat.config.ts",

43 "build:chat": "vite build --config vite.chat.config.ts",

44 "start": "node --import tsx/esm supervisor/index.ts",

45 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L45

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L45

46 "dev:workspace": "vite",

47 "dev:docs": "cd ./docs && npx fumapress",

48 "sync:pi-models": "tsx scripts/sync-pi-models.ts",

49 "prepublishOnly": "vite build --config vite.chat.config.ts"

50 },

51 "dependencies": {

52 "@anthropic-ai/claude-agent-sdk": "^0.3.198",

53 "@anthropic-ai/sdk": "^0.100.0",

54 "@clack/prompts": "^1.1.0",

55 "@modelcontextprotocol/sdk": "^1.29.0",

56 "@openai/codex": "^0.142.5",

57 "@streamdown/code": "^1.1.1",

58 "@tailwindcss/vite": "^4.2.0",

59 "@vitejs/plugin-react": "^6.0.1",

60 "@whiskeysockets/baileys": "7.0.0-rc13",

61 "better-sqlite3": "^12.6.2",

62 "class-variance-authority": "^0.7.1",

63 "clsx": "^2.1.1",

64 "commander": "^14.0.3",

65 "cron-parser": "^5.5.0",

dist-chat/assets/cobol-hBjMZW-R.jsView file

Lines 1-1javascript

1import{t as e}from"./html-CzX0w7K_.js";import{t}from"./java-BqKEu7zh.js";var n=Object.freeze(JSON.parse(`{"displayName":"COBOL","fileTypes":["ccp","scbl","cobol","cbl","cblle","cblsrce","cblcpy","lks","pdv","cpy","copybook","cobcopy","fd","sel","scb","scbl","sqlcblle","cob","dds","def","src","ss","wks","bib","pco"],"name":"cobol","patterns":[{"match":"^([ *][ *][ *][ *][ *][ *])([Dd]\\\\s.*)$","name":"token.info-token.cobol"},{"captures":{"1":{"name":"constant.numeric.cobol"},"2":{"name":"comment.line.cobol.newpage"}},"match":"^([ *][ *][ *][ *][ *][ *])(/.*)$"},{"captures":{"1":{"name":"const ...

dist-chat/assets/codeql-DlIhJTR7.jsView file

Lines 1-1javascript

1var e=[Object.freeze(JSON.parse(`{"displayName":"CodeQL","fileTypes":["ql","qll"],"name":"codeql","patterns":[{"include":"#module-member"}],"repository":{"abstract":{"match":"\\\\babstract(?![0-9A-Z_a-z])","name":"storage.modifier.abstract.ql"},"additional":{"match":"\\\\badditional(?![0-9A-Z_a-z])","name":"storage.modifier.additional.ql"},"and":{"match":"\\\\band(?![0-9A-Z_a-z])","name":"keyword.other.and.ql"},"annotation":{"patterns":[{"include":"#bindingset-annotation"},{"include":"#language-annotation"},{"include":"#pragma-annotation"},{"include":"#annotation-keyword"}]},"annotation-keywor ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-chat/assets/codeql-DlIhJTR7.jsView on unpkg · L1

supervisor/index.tsView file

Lines 1-21typescript

1import http from 'http';

2import net from 'net';

Low

Weak Crypto

Package source references weak cryptographic algorithms.

supervisor/index.tsView on unpkg · L1

3import fs from 'fs';

4import os

bin/cli.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2

3// ─────────────────────────────────────────────────────────────────────────────

4// Morphy CLI — single entry point for the morphy command.

5//

6// Design rules (load-bearing — do not break):

7// - ZERO npm deps at top level. This file must run even when ~/.morphy's

8// node_modules is broken, because it IS the recovery tool (self-heal below).

9// - Every command daemonizes and returns the terminal. The only foreground

10// paths are `start --foreground` (debug) and platforms with no daemon

11

workspace/client/public/morphy_bounce.webmView file

•path = workspace/client/public/morphy_bounce.webm kind = high_entropy_blob sizeBytes = 645337 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

workspace/client/public/morphy_bounce.webmView on unpkg