novahiz@0.3.5: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

novahiz@0.3.5: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node install/install.mjs --dry-run || exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install/install.mjs --dry-run || exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/novahiz.mjsView file

34L35: await import(pathToFileURL(target).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/novahiz.mjsView on unpkg · L34

install/install.mjsView file

1import { cpSync, existsSync, mkdirSync, readdirSync, statSync, writeFileSync } from "node:fs"; L2: import { homedir } from "node:os"; ... L49: const home = NovahizHome(flags); L50: const configDir = flags.scope === "project" ? resolve(".opencode") : opencodeConfigDir(); L51: const skillsDir = join(configDir, "skills"); ... L128: note(`Copying core to ${home}`); L129: if (!dryRun) mkdirSync(home, { recursive: true }); L130: for (const item of CORE_ITEMS) { ... L153: if (existsSync(skillsSource)) { L154: const externalRoots = [join(homedir(), ".agents", "skills")]; L155: const alreadyInstalled = skillNamesIn(externalRoots); ... L233: const backup = `${configPath}.novahiz-bak`;

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install/install.mjsView on unpkg · L1

3Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network L3: import { join, resolve } from "node:path"; L4: import { spawnSync } from "node:child_process"; L5: import { ... L34: "docs", L35: "package.json", L36: "tsconfig.json", ... L53: L54: const note = (message) => process.stdout.write(`${dryRun ? "[dry-run] " : ""}${message}\n`); L55: ... L153: if (existsSync(skillsSource)) { L154: const externalRoots = [join(homedir(), ".agents", "skills")]; L155: const alreadyInstalled = skillNamesIn(externalRoots);

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

install/install.mjsView on unpkg · L3

install/bootstrap.mjsView file

5import { join, resolve } from "node:path"; L6: import { spawnSync } from "node:child_process"; L7: import { fileURLToPath } from "node:url"; ... L9: L10: const REPO_URL = "https://github.com/novahiz/novahiz.git"; L11: // Was hardcoded to ~/.config/novahiz, ignoring NOVAHIZ_HOME/NOVAHIZ_HOME. ... L15: function log(msg) { L16: process.stdout.write(`[Novahiz] ${msg}\n`); L17: } ... L28: function hostInvocation(cmd, args) { L29: if (process.platform === "win32" && HOST_CMDS.has(cmd)) { L30: return { command: [cmd, ...args].join(" "), spawnArgs: undefined, opts: { shell: true } };

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

install/bootstrap.mjsView on unpkg · L5

•matchType = previous_version_dangerous_delta matchedPackage = novahiz@0.3.4 matchedIdentity = npm:bm92YWhpeg:0.3.4 similarity = 0.952 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

install/bootstrap.mjsView on unpkg

install/install.shView file

•path = install/install.sh kind = build_helper sizeBytes = 124 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install/install.shView on unpkg

adapters/opencode/novahiz.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

adapters/opencode/novahiz.ts#virtual:normalized:round1View on unpkg

skills/llm-threat-review/scripts/llm_risk_lint.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/llm-threat-review/scripts/llm_risk_lint.mjs matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/llm-threat-review/scripts/llm_risk_lint.mjsView on unpkg

skills/secrets-hygiene/scripts/secret_scan.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/secrets-hygiene/scripts/secret_scan.mjs matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/secrets-hygiene/scripts/secret_scan.mjsView on unpkg

skills/skill-authoring/scripts/skill_frontmatter_lint.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/sk[redacted]/scripts/sk[redacted] matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/skill-authoring/scripts/skill_frontmatter_lint.mjsView on unpkg

skills/skill-eval-loop/scripts/skill_structure_check.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/sk[redacted]/scripts/sk[redacted] matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/skill-eval-loop/scripts/skill_structure_check.mjsView on unpkg

skills/ui-slop-remover/scripts/slop_lint.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/ui-slop-remover/scripts/slop_lint.mjs matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/ui-slop-remover/scripts/slop_lint.mjsView on unpkg