novahiz@0.3.7: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

novahiz@0.3.7: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node install/install.mjs --dry-run || exit 0

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node install/install.mjs --dry-run || exit 0

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/novahiz.mjsView file

34L35: await import(pathToFileURL(target).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/novahiz.mjsView on unpkg · L34

install/bootstrap.mjsView file

5import { join, resolve } from "node:path"; L6: import { spawnSync } from "node:child_process"; L7: import { fileURLToPath } from "node:url"; ... L9: L10: const REPO_URL = "https://github.com/novahiz/novahiz.git"; L11: // Was hardcoded to ~/.config/novahiz, ignoring NOVAHIZ_HOME/NOVAHIZ_HOME. ... L15: function log(msg) { L16: process.stdout.write(`[Novahiz] ${msg}\n`); L17: } ... L28: function hostInvocation(cmd, args) { L29: if (process.platform === "win32" && HOST_CMDS.has(cmd)) { L30: return { command: [cmd, ...args].join(" "), spawnArgs: undefined, opts: { shell: true } };

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

install/bootstrap.mjsView on unpkg · L5

install/install.mjsView file

1#!/usr/bin/env node L2: import { cpSync, existsSync, mkdirSync, readdirSync, statSync, writeFileSync } from "node:fs"; L3: import { homedir } from "node:os"; ... L51: const home = NovahizHome(flags); L52: const configDir = flags.scope === "project" ? resolve(".opencode") : opencodeConfigDir(); L53: const skillsDir = join(configDir, "skills"); ... L72: L73: const claudeDir = process.env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude"); L74: const codexDir = process.env.CODEX_HOME || join(homedir(), ".codex"); L75: const harnessDirs = { opencode: configDir, claude: claudeDir, codex: codexDir }; ... L176: for (const name of configured) { L177: if (!existsSync(harnessDirs[name])) mkdirSync(harnessDirs[name], { recursive: true });

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

install/install.mjsView on unpkg · L1

install/hooks.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: readfilesync(path, "utf8").replace(/^\ufeff/, "")); } catch (error) { process.stderr.write(`refus: ${path} n'est pas un json valide (${error.message}). rien ecrit.\n`); return false; } const backup = `${path}.novahiz-bak`; if (!existssync(backup)) cpsync(path, backup); tracked.backups.push({ path, backup }); } else { tracked.created.push(path); } mkdirsync(dirname(path), { recursive: true }); writefilesync(path, `${json.stringify(mergehooks(base, generated), null, 2)}\n`, "utf8"); return true; } function registermcp(name, args, label) { if (!which(name)) { process.stdout.write(` ${label}: cli '${name}' introuvable, enregistrement mcp ignore\n`);

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

install/hooks.mjsView on unpkg

install/install.shView file

•path = install/install.sh kind = build_helper sizeBytes = 124 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install/install.shView on unpkg

adapters/opencode/novahiz.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

adapters/opencode/novahiz.ts#virtual:normalized:round1View on unpkg

skills/llm-threat-review/scripts/llm_risk_lint.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/llm-threat-review/scripts/llm_risk_lint.mjs matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/llm-threat-review/scripts/llm_risk_lint.mjsView on unpkg

skills/secrets-hygiene/scripts/secret_scan.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/secrets-hygiene/scripts/secret_scan.mjs matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/secrets-hygiene/scripts/secret_scan.mjsView on unpkg

skills/skill-authoring/scripts/skill_frontmatter_lint.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/sk[redacted]/scripts/sk[redacted] matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/skill-authoring/scripts/skill_frontmatter_lint.mjsView on unpkg

skills/skill-eval-loop/scripts/skill_structure_check.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/sk[redacted]/scripts/sk[redacted] matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/skill-eval-loop/scripts/skill_structure_check.mjsView on unpkg

skills/ui-slop-remover/scripts/slop_lint.mjsView file

•matchType = normalized_sha256 matchedPackage = novahiz@0.2.5 matchedPath = skills/ui-slop-remover/scripts/slop_lint.mjs matchedIdentity = npm:bm92YWhpeg:0.2.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/ui-slop-remover/scripts/slop_lint.mjsView on unpkg

dist/commands/doctor.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = novahiz@0.3.5 matchedIdentity = npm:bm92YWhpeg:0.3.5 similarity = 0.810 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/doctor.jsView on unpkg