registry / patchloom / 0.15.0

patchloom@0.15.0

Structured file editing library and CLI for AI agents: parser-backed JSON/YAML/TOML edits, AST-aware code operations, multi-file batching, markdown operations, and MCP server

AI Security Review

scanned 1d ago · by lpm-firewall-ai

The install hook fetches a platform-specific release archive and writes its contents under the package directory. The downloaded executable runs only when the user invokes the patchloom CLI.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall; later explicit patchloom command

Impact

A compromised or substituted release artifact could execute with the invoking user's privileges.

Mechanism

Remote binary download, extraction, and user-invoked execution

Rationale

Source inspection found an unverified remote native-binary delivery path activated by postinstall, but no concrete malicious behavior in the JavaScript wrapper. Treat it as a supply-chain payload carrier risk rather than a publish-blocking malware finding.

Evidence

package.jsoninstall.jsbinary.jsbinary-install.jsrun-patchloom.jsnode_modules/.bin_real

Network endpoints1

github.com/patchloom/patchloom/releases/download/patchloom-v0.15.0

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with false-positive risk.

low

Evidence for warning

package.json defines postinstall: node ./install.js.
binary.js builds GitHub release artifact URLs from package metadata.
binary-install.js downloads and extracts a platform archive without checksum/signature verification.
run-patchloom.js later executes the extracted binary via spawnSync.

Evidence against

Install source contains no credential/env harvesting or exfiltration.
No AI-agent configuration, prompt, or broad control-surface writes found.
Postinstall extracts but does not execute the downloaded artifact.

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 10.0 KB of source, external domains: example.com

Source & flagged code

2 flagged

package.jsonView file

Lines 28-68json

28 "homepage": "https://patchloom.github.io/patchloom/",

29 "keywords": [

30 "command-line-utilities",

31 "development-tools",

32 "config",

33 "text-processing",

34 "parser-implementations",

35 "mcp",

36 "ai-agents",

37 "tree-sitter",

38 "yaml",

39 "toml"

40 ],

41 "license": "MIT OR Apache-2.0",

42 "name": "patchloom",

43 "preferUnplugged": true,

44 "repository": "https://github.com/patchloom/patchloom",

45 "scripts": {

46 "fmt": "prettier --write **/*.js",

47 "fmt:check": "prettier --check **/*.js",

48 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 },

50 "supportedPlatforms": {

51 "aarch64-apple-darwin": {

52 "artifactName": "patchloom-aarch64-apple-darwin.tar.xz",

53 "bins": {

54 "patchloom": "patchloom"

55 },

56 "zipExt": ".tar.xz"

57 },

58 "aarch64-pc-windows-gnu": {

59 "artifactName": "patchloom-aarch64-pc-windows-msvc.zip",

60 "bins": {

61 "patchloom": "patchloom.exe"

62 },

63 "zipExt": ".zip"

64 },

65 "aarch64-pc-windows-msvc": {

66 "artifactName": "patchloom-aarch64-pc-windows-msvc.zip",

67 "bins": {

68 "patchloom": "patchloom.exe"

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High2 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowFilesystem

LowUrl Strings

LPM CLI

Source & flagged code

2 flagged

package.jsonView file

Lines 28-68json

28 "homepage": "https://patchloom.github.io/patchloom/",

29 "keywords": [

30 "command-line-utilities",

31 "development-tools",

32 "config",

33 "text-processing",

34 "parser-implementations",

35 "mcp",

36 "ai-agents",

37 "tree-sitter",

38 "yaml",

39 "toml"

40 ],

41 "license": "MIT OR Apache-2.0",

42 "name": "patchloom",

43 "preferUnplugged": true,

44 "repository": "https://github.com/patchloom/patchloom",

45 "scripts": {

46 "fmt": "prettier --write **/*.js",

47 "fmt:check": "prettier --check **/*.js",

48 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 },

50 "supportedPlatforms": {

51 "aarch64-apple-darwin": {

52 "artifactName": "patchloom-aarch64-apple-darwin.tar.xz",

53 "bins": {

54 "patchloom": "patchloom"

55 },

56 "zipExt": ".tar.xz"

57 },

58 "aarch64-pc-windows-gnu": {

59 "artifactName": "patchloom-aarch64-pc-windows-msvc.zip",

60 "bins": {

61 "patchloom": "patchloom.exe"

62 },

63 "zipExt": ".zip"

64 },

65 "aarch64-pc-windows-msvc": {

66 "artifactName": "patchloom-aarch64-pc-windows-msvc.zip",

67 "bins": {

68 "patchloom": "patchloom.exe"