overmind-mcp@3.10.5
Orchestrateur universel agents IA multi-modeles via MCP. Inclut le protocole 'Custom-Nickname' pour identifier vos agents avec des surnoms originaux (The Chaos Prophet, Shadow Sniper, etc.), l'isolation mémoire (Private Memory Context) et le support pour
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe package’s automatic postinstall mutates and redirects a broad AI-agent control surface without a consent guard in the inspected call path. This meets the policy for blocking unconsented lifecycle mutation; the evidence does not establish credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm install invokes the package postinstall hook.
Impact
This changes a broad agent configuration surface and redirects later Hermes access through package-managed files.
Mechanism
The hook copies Hermes configuration and state, renames the existing home directory, and creates a symlink in its place without a consent guard in the inspected caller.
Policy narrative
During npm installation, the postinstall script automatically migrates Hermes configuration and state files, including authentication-related files, then replaces ~/.hermes with a symlink to ~/.overmind/hermes. The inspected call path shows no consent guard for this change to the Hermes agent home.
AI rationale
The package’s automatic postinstall mutates and redirects a broad AI-agent control surface without a consent guard in the inspected call path. This meets the policy for blocking unconsented lifecycle mutation; the evidence does not establish credential exfiltration.
Evidence
package.jsonscripts/postinstall.mjs
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 97.0% confidence with low false-positive risk.
Evidence for policy risk
- The package lifecycle runs scripts/postinstall.mjs after installation.
- The postinstall unconditionally calls alignHermesHome during setup.
- It copies existing Hermes auth, environment, MCP, and state files into the package’s managed home.
- It renames the existing ~/.hermes directory and replaces it with a symlink to ~/.overmind/hermes.
Evidence against
- No evidence inspected shows a consent prompt guarding the Hermes migration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
19 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/lib/InstallHelper.jsView file
1import { exec } from 'child_process';
L2: import { promisify } from 'util';
...
L9: installCmd: 'npm install -g @anthropic-ai/claude-code',
L10: url: 'https://www.npmjs.com/package/@anthropic-ai/claude-code',
L11: },
...
L30: versionCmd: 'hermes --version',
L31: installCmd: process.platform === 'win32'
L32: ? 'powershell -Command "irm https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.ps1 | iex"'
...
L82: try {
L83: const { stdout } = await execAsync(meta.versionCmd);
L84: const version = stdout.trim();
Findings
1 Critical16 High5 Medium5 Low
CriticalAi Agent Control Hijackscripts/postinstall.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitydist/lib/InstallHelper.js
HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/postinstall.mjs
HighSemantic Analysis Limitedbin/overmind_keygen2000.py
HighKnown Malware Source Similarityscripts/verify-install.mjs
HighKnown Malware Source Similaritydist/services/ClaudeRunner.js
HighKnown Malware Source Similarityscripts/install-dependencies.mjs
HighKnown Malware Source Similarityscripts/postinstall.mjs
HighKnown Malware Source Similarityscripts/setup.mjs
Affected versions and remediation
This report applies to overmind-mcp@3.10.5.
See all versions of overmind-mcp for other recorded verdicts.
- Avoid installing overmind-mcp@3.10.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.