registry / octomux / 1.6.2

octomux@1.6.2

[![CI](https://github.com/ShreyPaharia/octomux/actions/workflows/ci.yml/badge.svg)](https://github.com/ShreyPaharia/octomux/actions/workflows/ci.yml) [![npm version](https://img.shields.io/npm/v/octomux)](https://www.npmjs.com/package/octomux) [![license]

AI Security Review

scanned 13d ago · by lpm-firewall-ai

The package’s postinstall hook makes global software and Claude skill configuration changes automatically, so a warning is warranted. The inspected behavior does not meet the evidence threshold for a block.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package with lifecycle scripts enabled, when the Claude CLI is missing or bundled skill files are present.

Impact

The installation changes the user's global software environment and Claude skill configuration without a separate per-action prompt.

Mechanism

The postinstall helper invokes global npm installation for Claude Code when needed and copies skill files into `~/.claude/skills`.

AI rationale

Evidence

package.jsonscripts/postinstall.sh~/.claude/skillsglobal npm installation

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The npm postinstall hook runs the binary installer and then the shell helper automatically.
The shell helper installs the Claude Code CLI globally through npm when the `claude` command is missing.
The same hook copies bundled skills into the user’s `~/.claude/skills` directory when those files exist.

Evidence against

The binary installer resolves a platform-specific optional dependency and replaces the package’s launcher with that binary.
The fallback wrapper runs the selected binary with the caller’s arguments and inherited standard I/O.
The inspected installer behavior does not show credential collection, data exfiltration, or a remote payload download.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 13.0 KB of source, external domains: github.com

Source & flagged code

7 flagged

package.jsonView file

Lines 40-80json

40 "build:diff-engine": "tsc -b packages/diff-engine",

41 "build:types": "tsc -b packages/types",

42 "build:test-fixtures": "tsc -b packages/test-fixtures",

43 "build:api-client": "tsc -b packages/api-client",

44 "build:plugin-api": "tsc -b packages/plugin-api",

45 "start": "bun run bin/main.js start",

46 "test": "bun run test:server && bun run test:client && bun run test:units",

47 "bench:task-create": "NODE_ENV=test tsx scripts/bench-task-create.ts",

48 "test:watch": "NODE_ENV=test bun test ./server --watch",

49 "test:e2e": "playwright test",

50 "test:e2e:ui": "playwright test --ui",

51 "test:mobile-terminal": "playwright test e2e/mobile-terminal-scroll.spec.ts",

52 "test:mobile-terminal:watch": "playwright test e2e/mobile-terminal-scroll.spec.ts --ui",

53 "screenshots:docs": "tsx scripts/seed-docs-demo.ts && OCTOMUX_SCREENSHOTS=1 OCTOMUX_DB_PATH=./data/docs-demo/tasks.db playwright test e2e/docs-screenshots.spec.ts",

54 "lint": "eslint .",

55 "lint:fix": "eslint . --fix",

56 "format": "prettier --write .",

57 "format:check": "prettier --check .",

58 "typecheck": "tsc -b",

59 "prepublishOnly": "bun run build:npm",

60 "postinstall": "node scripts/install-binary.cjs && bash scripts/postinstall.sh",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "prepare": "husky",

62 "changelog": "conventional-changelog -p conventionalcommits -i CHANGELOG.md -s",

63 "build:electron": "tsc -p electron/tsconfig.json",

64 "dist:electron": "bun run build && bun run build:electron && electron-builder",

65 "build:capabilities": "tsc -b packages/capabilities",

66 "test:server": "NODE_ENV=test bun test ./server ./cli/review --parallel --timeout 15000",

67 "test:client": "NODE_ENV=test bun test ./src --preload ./src/bun-test-setup.ts --parallel --timeout 15000",

68 "test:units": "NODE_ENV=test bun test ./cli/src ./packages ./bin --parallel --timeout 30000",

69 "build:assets": "bun scripts/bundle-assets.mjs",

70 "build:binary": "vite build && bun run build:assets && bun build --compile --minify bin/main.js --outfile dist-bin/octomux",

71 "build:binary:all": "vite build && bun run build:assets && bun build --compile --minify --target=bun-darwin-arm64 bin/main.js --outfile dist-bin/octomux-darwin-arm64 && bun build --compile --minify --target=bun-darwin-x64 bin/main.js --outfile dist-bin/octomux-darwin-x64 && bun build --compile --minify --target=bun-linux-arm64 bin/main.js --outfile dist-bin/octomux-linux-arm64 && bun build --compile --minify --target=bun-linux-x64 bin/main.js --outfile dist-bin/octomux-linux-x64 && bun build --compile --minify --target=bun-linux-arm64-musl bin/main.js --outfile dist-bin/octomux-linux-arm64 ...

72 "build:npm": "bun run build:binary:all && bun run sign:macos && bun scripts/build-npm-packages.mjs",

73 "publish:npm": "bash scripts/publish-npm.sh",

74 "publish:npm:dry": "bash scripts/publish-npm.sh --dry-run",

75 "sign:macos": "bash scripts/sign-macos.sh"

76 },

77 "lint-staged": {

78 "*.{ts,tsx}": [

79 "eslint --fix",

80 "prettier --write"

Long lines were clipped for display.

bin/cli-wrapper.cjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * Fallback launcher, used only when postinstall didn't replace `bin/octomux`

4 * with the native binary (`--ignore-scripts`, some pnpm configs).

5 *

6 * The normal path execs the binary directly with no Node process resident; this

7 * one keeps one alive for the session, so prefer `npm rebuild octomux`.

8 */

10const { spawnSync }

scripts/postinstall.shView file

•path = scripts/postinstall.sh kind = build_helper sizeBytes = 2253 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/postinstall.shView on unpkg

bin/octomuxView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/octomuxView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-binary.cjs && bash scripts/postinstall.sh

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install-binary.cjs && bash scripts/postinstall.sh

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/cli-wrapper.cjsView file

9L10: const { spawnSync } = require('child_process'); L11: const { platformPackage } = require('./platform.cjs');

High

Child Process

Package source references child process execution.

bin/cli-wrapper.cjsView on unpkg · L9

Findings

4 High4 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/cli-wrapper.cjs

HighRuntime Package Installbin/cli-wrapper.cjs

HighSemantic Analysis Limitedbin/octomux

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/cli-wrapper.cjs

MediumShips Build Helperscripts/postinstall.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to octomux@1.6.2.

See all versions of octomux for other recorded verdicts.

Review the evidence and your use of octomux@1.6.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 18:37:19.669Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.