registry / octomux / 1.4.0

octomux@1.4.0

Broken install: the published manifest carried workspace:* dependencies npm cannot resolve (EUNSUPPORTEDPROTOCOL). Use octomux@1.4.1 or later.

[![CI](https://github.com/ShreyPaharia/octomux/actions/workflows/ci.yml/badge.svg)](https://github.com/ShreyPaharia/octomux/actions/workflows/ci.yml) [![npm version](https://img.shields.io/npm/v/octomux)](https://www.npmjs.com/package/octomux) [![license]

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package has a real install-time global provisioning risk, warranting a warning. Source inspection does not show concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install

Impact

Can unexpectedly install git and @anthropic-ai/claude-code globally.

Mechanism

postinstall global dependency provisioning and package-local binary replacement

AI rationale

The package has a real install-time global provisioning risk, warranting a warning. Source inspection does not show concrete malicious behavior.

Evidence

package.jsonscripts/postinstall.shscripts/install-binary.cjsplugin/skills/review-learnings/SKILL.mdbin/octomux

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Benign with low false-positive risk.

Evidence for warning

npm postinstall invokes a shell provisioning script.
That script automatically installs missing git via Homebrew and Claude Code globally via npm.
Lifecycle binary replacement is limited to the package’s own bin/octomux path.

Evidence against

No credential harvesting, hidden network exfiltration, eval, or remote payload loader was found in executable package files.
The Claude skills are shipped as a first-party plugin; their config/session actions are user-invoked instructions, not executed by postinstall.
The postinstall skill-copy branch targets a nonexistent root skills/ directory in this tarball, so it does not mutate ~/.claude/skills.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystem

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 4 file(s), 13.0 KB of source, external domains: github.com

Source & flagged code

6 flagged

package.jsonView file

Lines 38-78json

38 "build": "bun run build:diff-engine && bun run build:types && bun run build:test-fixtures && bun run build:api-client && bun run build:capabilities && bun run build:binary",

39 "build:diff-engine": "tsc -b packages/diff-engine",

40 "build:types": "tsc -b packages/types",

41 "build:test-fixtures": "tsc -b packages/test-fixtures",

42 "build:api-client": "tsc -b packages/api-client",

43 "start": "bun run bin/main.js start",

44 "test": "bun run test:server && bun run test:client && bun run test:units",

45 "bench:task-create": "NODE_ENV=test tsx scripts/bench-task-create.ts",

46 "test:watch": "NODE_ENV=test bun test ./server --watch",

47 "test:e2e": "playwright test",

48 "test:e2e:ui": "playwright test --ui",

49 "test:mobile-terminal": "playwright test e2e/mobile-terminal-scroll.spec.ts",

50 "test:mobile-terminal:watch": "playwright test e2e/mobile-terminal-scroll.spec.ts --ui",

51 "screenshots:docs": "tsx scripts/seed-docs-demo.ts && OCTOMUX_SCREENSHOTS=1 OCTOMUX_DB_PATH=./data/docs-demo/tasks.db playwright test e2e/docs-screenshots.spec.ts",

52 "lint": "eslint .",

53 "lint:fix": "eslint . --fix",

54 "format": "prettier --write .",

55 "format:check": "prettier --check .",

56 "typecheck": "tsc -b",

57 "prepublishOnly": "bun run build:npm",

58 "postinstall": "node scripts/install-binary.cjs && bash scripts/postinstall.sh",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L58

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L58

59 "prepare": "husky",

60 "changelog": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s",

61 "build:electron": "tsc -p electron/tsconfig.json",

62 "dist:electron": "bun run build && bun run build:electron && electron-builder",

63 "build:capabilities": "tsc -b packages/capabilities",

64 "test:server": "NODE_ENV=test bun test ./server ./cli/review --parallel --timeout 15000",

65 "test:client": "NODE_ENV=test bun test ./src --preload ./src/bun-test-setup.ts --parallel --timeout 15000",

66 "test:units": "NODE_ENV=test bun test ./cli/src ./packages ./bin --parallel --timeout 30000",

67 "build:assets": "bun scripts/bundle-assets.mjs",

68 "build:binary": "vite build && bun run build:assets && bun build --compile --minify bin/main.js --outfile dist-bin/octomux",

69 "build:binary:all": "vite build && bun run build:assets && bun build --compile --minify --target=bun-darwin-arm64 bin/main.js --outfile dist-bin/octomux-darwin-arm64 && bun build --compile --minify --target=bun-darwin-x64 bin/main.js --outfile dist-bin/octomux-darwin-x64 && bun build --compile --minify --target=bun-linux-arm64 bin/main.js --outfile dist-bin/octomux-linux-arm64 && bun build --compile --minify --target=bun-linux-x64 bin/main.js --outfile dist-bin/octomux-linux-x64 && bun build --compile --minify --target=bun-linux-arm64-musl bin/main.js --outfile dist-bin/octomux-linux-arm64 ...

70 "build:npm": "bun run build:binary:all && bun run sign:macos && bun scripts/build-npm-packages.mjs",

71 "sign:macos": "bash scripts/sign-macos.sh"

72 },

73 "lint-staged": {

74 "*.{ts,tsx}": [

75 "eslint --fix",

76 "prettier --write"

77 ],

78 "*.{json,md,css,html}": [

Long lines were clipped for display.

bin/cli-wrapper.cjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * Fallback launcher, used only when postinstall didn't replace `bin/octomux`

4 * with the native binary (`--ignore-scripts`, some pnpm configs).

5 *

6 * The normal path execs the binary directly with no Node process resident; this

7 * one keeps one alive for the session, so prefer `npm rebuild octomux`.

8 */

10const { spawnSync }

scripts/postinstall.shView file

•path = scripts/postinstall.sh kind = build_helper sizeBytes = 2253 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/postinstall.shView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-binary.cjs && bash scripts/postinstall.sh

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install-binary.cjs && bash scripts/postinstall.sh

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/cli-wrapper.cjsView file

9L10: const { spawnSync } = require('child_process'); L11: const { platformPackage } = require('./platform.cjs');

High

Child Process

Package source references child process execution.

bin/cli-wrapper.cjsView on unpkg · L9

Findings

3 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/cli-wrapper.cjs

HighRuntime Package Installbin/cli-wrapper.cjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/cli-wrapper.cjs

MediumShips Build Helperscripts/postinstall.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to octomux@1.4.0.

See all versions of octomux for other recorded verdicts.

Review the evidence and your use of octomux@1.4.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-16 12:56:37.478Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.