registry / overmind-mcp / 3.2.6

overmind-mcp@3.2.6

Orchestrateur universel agents IA multi-modeles via MCP. Inclut le protocole 'Custom-Nickname' pour identifier vos agents avec des surnoms originaux (The Chaos Prophet, Shadow Sniper, etc.), l'isolation mémoire (Private Memory Context) et le support pour

AI Security Review

scanned 5h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Install-time code mutates a user-home MCP control file and installs/starts supporting services without an explicit user command. The package also defaults Claude runner execution to permission skipping at runtime.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm install / npm install -g lifecycle postinstall

Impact

Can register package-supplied MCP configuration and persistent local services in the user's home environment before the user invokes the CLI.

Mechanism

unconsented lifecycle creation of MCP config plus service installation

Policy narrative

Installing the package runs scripts/postinstall.mjs automatically. That script creates ~/.overmind, downloads a remote .mcp.json.example from GitHub, writes ~/.overmind/.mcp.json, globally installs overmind-postgres-mcp, and starts a Docker pgvector container with restart policy. The runtime config then launches Claude with --dangerously-skip-permissions by default when users invoke agent runs.

Rationale

The decisive issue is lifecycle-triggered mutation of a home MCP control surface and service setup, not scanner similarity alone. Under the install-control-surface policy, unconsented postinstall creation of .mcp.json is blockable even if the content is package-aligned.

Evidence

package.jsonscripts/postinstall.mjsdist/lib/config.jsdist/services/ClaudeRunner.js~/.overmind/.env.example~/.overmind/.mcp.json.example~/.overmind/.env~/.overmind/.env.postgres~/.overmind/.mcp.json

Network endpoints3

raw.githubusercontent.com/DeamonDev888/overmind-mcp/main/.env.exampleraw.githubusercontent.com/DeamonDev888/overmind-mcp/main/.mcp.json.examplepgvector/pgvector:pg16

Decision evidence

public snapshot

AI called this Malicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for policy block

package.json defines postinstall: node scripts/postinstall.mjs
scripts/postinstall.mjs lifecycle writes ~/.overmind/.mcp.json from package-fetched config
scripts/postinstall.mjs downloads mutable config from raw.githubusercontent.com during install
scripts/postinstall.mjs runs npm install -g overmind-postgres-mcp during install
scripts/postinstall.mjs starts Docker pgvector container with --restart unless-stopped
dist/lib/config.js defaults Claude permissions to --dangerously-skip-permissions

Evidence against

Writes target ~/.overmind package namespace rather than obvious Claude/Cursor home config
Agent names are validated before per-agent .claude file paths
Runtime runner spawning appears tied to explicit MCP/CLI agent actions
No direct credential exfiltration endpoint found in inspected source

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 88 file(s), 803 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.minimax.com, api.minimax.io, api.minimaxi.com, api.telegram.org, api.z.ai, deamondev888.github.io, discord.gg, docs.docker.com, github.com, openrouter.ai, podman.io, raw.githubusercontent.com, www.docker.com, www.npmjs.com, www.trae.ai, www.w3.org

Source & flagged code

13 flagged

package.jsonView file

Lines 36-76json

36 "bin",

37 ".mcp.json.example"

38 ],

39 "scripts": {

40 "build": "tsc",

41 "rebuild": "rimraf dist && tsc",

42 "clean": "rimraf dist",

43 "start": "node --max-old-space-size=256 --no-warnings --env-file=.env dist/bin/cli.js",

44 "dev": "node --max-old-space-size=256 --no-warnings --watch --env-file=.env dist/bin/cli.js",

45 "build:fix": "pnpm run clean && pnpm install && pnpm run build",

46 "lint": "eslint .",

47 "lint:fix": "eslint . --fix",

48 "format": "prettier --write .",

49 "check-types": "tsc --noEmit",

50 "test": "vitest run",

51 "test:install": "node scripts/test-installation.mjs",

52 "changeset": "changeset",

53 "version": "changeset version && node scripts/auto-changelog.mjs",

54 "release": "pnpm run build && changeset publish",

55 "prepublishOnly": "pnpm run rebuild",

56 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L56

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L56

57 "setup": "overmind-setup",

58 "setup:deps": "node scripts/install-dependencies.mjs",

59 "postgres:up": "overmind-postgres-mcp up",

60 "postgres:down": "overmind-postgres-mcp down",

61 "postgres:status": "overmind-postgres-mcp status",

62 "postgres:logs": "overmind-postgres-mcp logs",

63 "postgres:reset": "overmind-postgres-mcp reset",

64 "prebuild": "node -e \"try{require('fs').mkdirSync('dist/bin',{recursive:true});require('fs').copyFileSync('bin/launch.cjs','dist/bin/launch.cjs');console.log('Copied launch.cjs')}catch{console.log('dist/bin not ready yet')}\""

65 },

66 "keywords": [

67 "mcp",

68 "model-context-protocol",

69 "claude-code",

70 "ai-agent",

71 "llm",

72 "orchestration",

73 "automation",

74 "pgvector",

75 "docker",

76 "auto-installation"

bin/launch.cjsView file

Lines 1-24javascript

1process.title = "MCP-OVERMIND"; // [V16] Window identification

2// launch.js — compiled launcher for Workflow

3// Prebuild copies this to dist/bin/launch.js

5const { exec, spawn } = require("child_process");

6const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/launch.cjsView on unpkg · L4

7const path = require("path");

9const SCRIPT_DIR = path.resolve(__dirname, "..");

10const LOG_DIR = path.join(SCRIPT_DIR, "logs");

11const PORT = "3099";

12const NAME = "Workflow";

13const BUILD_CMD = "npm run build";

15function log(msg) {

16 console.log(`[{new Date().toISOString()}] [{NAME}] ${msg}`);

17}

19function ensureDir(dir) {

20 if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });

21}

23function killPort(port) {

24 return new Promise((resolve) => {

•matchType = normalized_sha256 matchedPackage = overmind-mcp@3.2.2 matchedPath = bin/launch.cjs matchedIdentity = npm:b3Zlcm1pbmQtbWNw:3.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/launch.cjsView on unpkg

dist/lib/InstallHelper.jsView file

Lines 1-22javascript

1import { exec } from 'child_process';

2import { promisify } from 'util';

3const execAsync = promisify(exec);

4export const CLIS_METADATA = {

High

Shell

Package source references shell execution.

dist/lib/InstallHelper.jsView on unpkg · L2

5 claude: {

6 name: 'Claude Code',

7 command: 'claude',

8 versionCmd: 'claude --version',

9 installCmd: 'npm install -g @anthropic-ai/claude-code',

10 url: 'https://www.npmjs.com/package/@anthropic-ai/claude-code',

11 },

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lib/InstallHelper.jsView on unpkg · L1

12 kilo: {

13 name: 'Kilo Code',

14 command: 'kilo',

15 versionCmd: 'kilo --version',

16 installCmd: 'npm install -g kilo-auto',

17 url: 'https://github.com/Kilo-Org/kilocode',

18 requiredVersion: '7.2.14',

19 },

20 qwencli: {

21 name: 'Qwen Code CLI',

22 command: 'qwen',

scripts/postinstall.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * ═══════════════════════════════════════════════════════════════════════════════

4 * OVERMIND-MCP - POST-INSTALL AUTOMATIQUE (SIMPLIFIÉ)

5 * ═══════════════════════════════════════════════════════════════════════════════

6 * Script exécuté automatiquement après npm install -g overmind-mcp

7 * INSTALLE UNIQUEMENT :

8 * - Vérifie Docker

9 * - Installe PostgreSQL + pgvector (si absent)

10 * - Copie .env.example → .env

11 * - Copie .mcp.json.example → .mcp.json

12 * ═══════════════════════════════════════════════════════════════════════════════

13 */

15import { execSync, spawn } from 'child_process';

16import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';

17import { join } from 'path';

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.mjsView on unpkg · L10

18import { fileURLToPath } from 'url';

19import { dirname } from 'path';

20import { randomBytes } from 'crypto';

22const __filename = fileURLToPath(import.meta.url);

23const __dirname = dirname(__filename);

25const INSTALL_DIR = join(

26 process.env.HOME || process.env.USERPROFILE || process.env.HOMEPATH,

27 '.overmind'

28);

30// ═══════════════════════════════════════════════════════════════════════════════

scripts/setup-windows.jsView file

Lines 35-75javascript

35 } catch (error) {

36 console.error(`❌ Erreur: ${error.message}`);

37 return false;

38 }

39}

41function logSection(title) {

42 console.log('\n╔══════════════════════════════════════════════════════════════════╗');

43 console.log(`║ ${title.padEnd(64)} ║`);

44 console.log('╚══════════════════════════════════════════════════════════════════╝');

45}

47// ═══════════════════════════════════════════════════════════════════════════════

48// CHECKS

49// ═══════════════════════════════════════════════════════════════════════════════

51function checkPrerequisites() {

52 logSection('VÉRIFICATION PRÉREQUIS');

54 // Check Node.js

55 try {

56 const nodeVersion = execSync('node --version', { encoding: 'utf8' }).trim();

57 console.log(`✅ Node.js: ${nodeVersion}`);

58 } catch {

59 console.error('❌ Node.js non trouvé. Installez Node.js 20+');

60 return false;

61 }

63 // Check pnpm

64 try {

65 const pnpmVersion = execSync('pnpm --version', { encoding: 'utf8' }).trim();

66 console.log(`✅ pnpm: ${pnpmVersion}`);

67 } catch {

68 console.error('❌ pnpm non trouvé. Installez pnpm:');

69 console.error(' npm install -g pnpm');

70 return false;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/setup-windows.jsView on unpkg · L55

71 }

73 // Check Docker

74 try {

75 const dockerVersion = execSync('docker --version', { encoding: 'utf8' }).trim();

bin/test_mcp.batView file

•path = bin/test_mcp.bat kind = build_helper sizeBytes = 170 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/test_mcp.batView on unpkg

scripts/verify-install.mjsView file

•matchType = normalized_sha256 matchedPackage = overmind-mcp@3.2.2 matchedPath = scripts/verify-install.mjs matchedIdentity = npm:b3Zlcm1pbmQtbWNw:3.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/verify-install.mjsView on unpkg

dist/services/ClaudeRunner.jsView file

•matchType = normalized_sha256 matchedPackage = overmind-mcp@3.2.2 matchedPath = dist/services/ClaudeRunner.js matchedIdentity = npm:b3Zlcm1pbmQtbWNw:3.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/ClaudeRunner.jsView on unpkg

dist/services/KiloRunner.jsView file

•matchType = normalized_sha256 matchedPackage = overmind-mcp@3.2.2 matchedPath = dist/services/KiloRunner.js matchedIdentity = npm:b3Zlcm1pbmQtbWNw:3.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/KiloRunner.jsView on unpkg

scripts/auto-install.mjsView file

•matchType = normalized_sha256 matchedPackage = overmind-mcp@3.2.2 matchedPath = scripts/auto-install.mjs matchedIdentity = npm:b3Zlcm1pbmQtbWNw:3.2.2 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/auto-install.mjsView on unpkg

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/launch.cjsView file

4L5: const { exec, spawn } = require("child_process"); L6: const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/launch.cjsView on unpkg · L4

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/launch.cjsView on unpkg

dist/lib/InstallHelper.jsView file

2import { promisify } from 'util'; L3: const execAsync = promisify(exec); L4: export const CLIS_METADATA = {

High

Shell

Package source references shell execution.

dist/lib/InstallHelper.jsView on unpkg · L2

1import { exec } from 'child_process'; L2: import { promisify } from 'util'; ... L9: installCmd: 'npm install -g @anthropic-ai/claude-code', L10: url: 'https://www.npmjs.com/package/@anthropic-ai/claude-code', L11: }, ... L30: versionCmd: 'hermes --version', L31: installCmd: process.platform === 'win32' L32: ? 'powershell -Command "irm https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.ps1 | iex"' ... L82: try { L83: const { stdout } = await execAsync(meta.versionCmd); L84: const version = stdout.trim();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lib/InstallHelper.jsView on unpkg · L1

scripts/postinstall.mjsView file

10Install-time AI-agent control hijack evidence: L10: * - Copie .env.example → .env L11: * - Copie .mcp.json.example → .mcp.json L12: * ═══════════════════════════════════════════════════════════════════════════════ ... L15: import { execSync, spawn } from 'child_process'; L16: import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs'; L17: import { join } from 'path'; ... L239: L240: mkdirSync(INSTALL_DIR, { recursive: true }); L241: ... L244: const envExampleUrl = 'https://raw.githubusercontent.com/DeamonDev888/overmind-mcp/main/.env.example'; L245: const mcpExampleUrl = 'https://raw.githubusercontent.com/DeamonDev888/overmind-mcp/main/.mcp.json.example'; L246: Payload evidence from dist/services/AgentManager.js: L48: const content = await fs.readFile(mcpPath, 'utf-8'); L49: const json = JSON.parse(content); L50: return Object.keys(json.mcpServers || {}); ... L492: // Resolve auth token: prefer ANTHROPIC_AUTH_TOKEN, fallback to any ANTHROPIC_AUTH_TOKEN_<N> L493: let authToken = process.env.ANTHROPIC_AUTH_TOKEN; L494: if (!authToken) { ... L516: ANTHROPIC_AUTH_TOKEN: authToken, L517: ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL || 'https://api.anthropic.com',…

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.mjsView on unpkg · L10

scripts/setup-windows.jsView file

55try { L56: const nodeVersion = execSync('node --version', { encoding: 'utf8' }).trim(); L57: console.log(`✅ Node.js: ${nodeVersion}`); ... L68: console.error('❌ pnpm non trouvé. Installez pnpm:'); L69: console.error(' npm install -g pnpm'); L70: return false;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/setup-windows.jsView on unpkg · L55

bin/test_mcp.batView file

•path = bin/test_mcp.bat kind = build_helper sizeBytes = 170 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/test_mcp.batView on unpkg

scripts/verify-install.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/verify-install.mjsView on unpkg

dist/services/ClaudeRunner.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/ClaudeRunner.jsView on unpkg

dist/services/KiloRunner.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/KiloRunner.jsView on unpkg

scripts/auto-install.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/auto-install.mjsView on unpkg

Findings

1 Critical10 High5 Medium5 Low

CriticalAi Agent Control Hijackscripts/postinstall.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/launch.cjs

HighShelldist/lib/InstallHelper.js

HighSandbox Evasion Gated Capabilitydist/lib/InstallHelper.js

HighRuntime Package Installscripts/setup-windows.js

HighKnown Malware Source Similarityscripts/verify-install.mjs

HighKnown Malware Source Similaritybin/launch.cjs

HighKnown Malware Source Similaritydist/services/ClaudeRunner.js

HighKnown Malware Source Similaritydist/services/KiloRunner.js

HighKnown Malware Source Similarityscripts/auto-install.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperbin/test_mcp.bat

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

93%Block

Verdict confidence

IntentDangerous Capability

TypeAI-agent control-surface policy

False-positive riskLow

Review stagesource_first_review

Firewall policyAI-agent policy block

Package metadata

npm

AuthorDeaMoN888

Version3.2.6

PublishedJul 4, 2026

LicenseMIT

Dependencies10

Integrityverified

Package size1.02 MB

Files341

Keywordsmcpmodel-context-protocolclaude-codeai-agentllmorchestrationautomationpgvector

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.jstypes → dist/index.d.tsexports mapbin → overmind, overmind-bridge, overmind-install-native +6

Runtimenode >=24.18.0

Artifact2.44 MB · 341 files1 signature(s)

Install lifecyclepostinstallprepublishOnly

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

13 flagged

package.jsonView file

Lines 36-76json

36 "bin",

37 ".mcp.json.example"

38 ],

39 "scripts": {

40 "build": "tsc",

41 "rebuild": "rimraf dist && tsc",

42 "clean": "rimraf dist",

43 "start": "node --max-old-space-size=256 --no-warnings --env-file=.env dist/bin/cli.js",

44 "dev": "node --max-old-space-size=256 --no-warnings --watch --env-file=.env dist/bin/cli.js",

45 "build:fix": "pnpm run clean && pnpm install && pnpm run build",

46 "lint": "eslint .",

47 "lint:fix": "eslint . --fix",

48 "format": "prettier --write .",

49 "check-types": "tsc --noEmit",

50 "test": "vitest run",

51 "test:install": "node scripts/test-installation.mjs",

52 "changeset": "changeset",

53 "version": "changeset version && node scripts/auto-changelog.mjs",

54 "release": "pnpm run build && changeset publish",

55 "prepublishOnly": "pnpm run rebuild",

56 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L56

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L56

57 "setup": "overmind-setup",

58 "setup:deps": "node scripts/install-dependencies.mjs",

59 "postgres:up": "overmind-postgres-mcp up",

60 "postgres:down": "overmind-postgres-mcp down",

61 "postgres:status": "overmind-postgres-mcp status",

62 "postgres:logs": "overmind-postgres-mcp logs",

63 "postgres:reset": "overmind-postgres-mcp reset",

65 },

66 "keywords": [

67 "mcp",

68 "model-context-protocol",

69 "claude-code",

70 "ai-agent",

71 "llm",

72 "orchestration",

73 "automation",

74 "pgvector",

75 "docker",

76 "auto-installation"

bin/launch.cjsView file

Lines 1-24javascript

1process.title = "MCP-OVERMIND"; // [V16] Window identification

2// launch.js — compiled launcher for Workflow

3// Prebuild copies this to dist/bin/launch.js

5const { exec, spawn } = require("child_process");

6const fs = require("fs");

High

Child Process

Package source references child process execution.

bin/launch.cjsView on unpkg · L4

7const path = require("path");

9const SCRIPT_DIR = path.resolve(__dirname, "..");

10const LOG_DIR = path.join(SCRIPT_DIR, "logs");

11const PORT = "3099";

12const NAME = "Workflow";

13const BUILD_CMD = "npm run build";

15function log(msg) {

16 console.log(`[{new Date().toISOString()}] [{NAME}] ${msg}`);

17}

19function ensureDir(dir) {

20 if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });

21}

23function killPort(port) {

24 return new Promise((resolve) => {

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/launch.cjsView on unpkg

dist/lib/InstallHelper.jsView file

Lines 1-22javascript

1import { exec } from 'child_process';

2import { promisify } from 'util';

3const execAsync = promisify(exec);

4export const CLIS_METADATA = {

High

Shell

Package source references shell execution.

dist/lib/InstallHelper.jsView on unpkg · L2

5 claude: {

6 name: 'Claude Code',

7 command: 'claude',

8 versionCmd: 'claude --version',

9 installCmd: 'npm install -g @anthropic-ai/claude-code',

10 url: 'https://www.npmjs.com/package/@anthropic-ai/claude-code',

11 },

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/lib/InstallHelper.jsView on unpkg · L1

12 kilo: {

13 name: 'Kilo Code',

14 command: 'kilo',

15 versionCmd: 'kilo --version',

16 installCmd: 'npm install -g kilo-auto',

17 url: 'https://github.com/Kilo-Org/kilocode',

18 requiredVersion: '7.2.14',

19 },

20 qwencli: {

21 name: 'Qwen Code CLI',

22 command: 'qwen',

scripts/postinstall.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

4 * OVERMIND-MCP - POST-INSTALL AUTOMATIQUE (SIMPLIFIÉ)

6 * Script exécuté automatiquement après npm install -g overmind-mcp

7 * INSTALLE UNIQUEMENT :

8 * - Vérifie Docker

9 * - Installe PostgreSQL + pgvector (si absent)

10 * - Copie .env.example → .env

11 * - Copie .mcp.json.example → .mcp.json

13 */

15import { execSync, spawn } from 'child_process';

16import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';

17import { join } from 'path';

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/postinstall.mjsView on unpkg · L10

18import { fileURLToPath } from 'url';

19import { dirname } from 'path';

20import { randomBytes } from 'crypto';

22const __filename = fileURLToPath(import.meta.url);

23const __dirname = dirname(__filename);

25const INSTALL_DIR = join(

26 process.env.HOME || process.env.USERPROFILE || process.env.HOMEPATH,

27 '.overmind'

28);

scripts/setup-windows.jsView file

Lines 35-75javascript

35 } catch (error) {

36 console.error(`❌ Erreur: ${error.message}`);

37 return false;

38 }

39}

41function logSection(title) {

43 console.log(`║ ${title.padEnd(64)} ║`);

45}

48// CHECKS

51function checkPrerequisites() {

52 logSection('VÉRIFICATION PRÉREQUIS');

54 // Check Node.js

55 try {

56 const nodeVersion = execSync('node --version', { encoding: 'utf8' }).trim();

57 console.log(`✅ Node.js: ${nodeVersion}`);

58 } catch {

59 console.error('❌ Node.js non trouvé. Installez Node.js 20+');

60 return false;

61 }

63 // Check pnpm

64 try {

65 const pnpmVersion = execSync('pnpm --version', { encoding: 'utf8' }).trim();

66 console.log(`✅ pnpm: ${pnpmVersion}`);

67 } catch {

68 console.error('❌ pnpm non trouvé. Installez pnpm:');

69 console.error(' npm install -g pnpm');

70 return false;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/setup-windows.jsView on unpkg · L55

71 }

73 // Check Docker

74 try {

75 const dockerVersion = execSync('docker --version', { encoding: 'utf8' }).trim();

bin/test_mcp.batView file

•path = bin/test_mcp.bat kind = build_helper sizeBytes = 170 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/test_mcp.batView on unpkg

scripts/verify-install.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/verify-install.mjsView on unpkg

dist/services/ClaudeRunner.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/ClaudeRunner.jsView on unpkg

dist/services/KiloRunner.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/services/KiloRunner.jsView on unpkg

scripts/auto-install.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/auto-install.mjsView on unpkg