Loading npm security reports…

nanocorp@0.3.1: AI-agent control-surface risk | LPM Firewall

registry / nanocorp / 0.3.1

nanocorp@0.3.1

NanoCorp CLI: create and run your autonomous company from the terminal.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically invokes a native binary to install skills into third-party coding-agent control surfaces. The operation is silent and defaults to enabled.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation

Impact

It can alter Claude Code, Codex, and other installed coding agents without an explicit setup command.

Mechanism

silent automatic installation of agent skills through a bundled native binary

Policy narrative

On installation, npm runs scripts/postinstall.js. Unless an opt-out environment variable is already set, it suppresses output and launches the bundled CLI with skills install --quiet. The launcher executes an opaque native binary. Package text states that this writes into the skill directories of multiple unrelated coding agents, including Claude Code and Codex. This is an unconsented install-time mutation of a broad AI-agent control surface.

AI rationale

The automatic postinstall hook silently delegates to an opaque native binary to modify several foreign coding-agent skill directories. This meets the install-control-surface block policy.

Evidence

package.jsonscripts/postinstall.jsbin/nanocorp.jsREADME.mdvendor/nanocorp-darwin-arm64~/.claude/skills/~/.codex/skills/~/.cursor/skills/~/.gemini/skills/~/.copilot/skills/

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

15"scripts": { "postinstall": "node scripts/postinstall.js", "test": "node --test" },

High

Suspicious Lifecycle Evidence

The package runs a postinstall lifecycle hook automatically.

package.jsonView on unpkg · L15

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

vendor/nanocorp-darwin-arm64View file

•path = vendor/nanocorp-darwin-arm64 kind = native_binary sizeBytes = 7379906 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

vendor/nanocorp-darwin-arm64View on unpkg

bin/nanocorp.jsView file

•matchType = malicious_source_fingerprint_signature signature = 2543233e9551b135 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = nanocorp@0.3.0 matchedPath = bin/nanocorp.js matchedIdentity = npm:bmFub2NvcnA:0.3.0 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/nanocorp.jsView on unpkg

16const bin = join(__dirname, "..", "vendor", name); try { fs.chmodSync(bin, 0o755); } catch { /* best effort: npm does not reliably preserve +x on vendored files */ } const res = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });

High

Ai Review Evidence

The launcher executes a vendored native binary.

bin/nanocorp.jsView on unpkg · L16

scripts/postinstall.jsView file

9if (!process.env.NANOCORP_NO_AGENT_SKILLS) { const { spawnSync } = require("node:child_process"); const { join } = require("node:path"); spawnSync( process.execPath, [join(__dirname, "..", "bin", "nanocorp.js"), "skills", "install", "--quiet"], { stdio: "ignore", timeout: 15000 } );

High

Ai Review Evidence

The hook silently launches the bundled CLI with a skills-install command.

scripts/postinstall.jsView on unpkg · L9