opsfuse-ui
React component library (React 19, TypeScript, Tailwind CSS v4, shadcn-style primitives). Publish as an npm package and consume it from any app; you do **not** need to install shadcn in the host app.
This report shows the evidence for opsfuse-ui@0.1.21. 1 of 2 known versions is blocked or flagged. The newest version, 0.1.24, is flagged. See all versions.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection confirms unconsented lifecycle mutation of a host AI-agent control surface via postinstall, which is blocking behavior for the firewall even without credential theft or network exfiltration. The remaining package code appears to be a React UI library, but that does not remove the install-time control-surface write. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.
Decision evidence
public snapshot- package.json runs postinstall: node scripts/postinstall.mjs
- scripts/postinstall.mjs derives hostRoot from node_modules and writes outside package into host .claude/skills
- postinstall force-copies package-supplied Claude Code skills with cpSync(..., {recursive:true, force:true})
- Published package includes .claude/skills content; README confirms automatic install into consumer project
- No network endpoints, credential harvesting, child_process execution, or obfuscated payload found in inspected sources
- dist/*.js findings are UI/library code patterns and bundled dependency strings, not exfiltration or install-time code
Source & flagged code
3 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to opsfuse-ui@0.1.21.
The versions list below shows the verdict for each recorded version.
- Avoid installing opsfuse-ui@0.1.21. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.