registry / patchloom / 0.15.1

patchloom@0.15.1

Structured file editing library and CLI for AI agents: parser-backed JSON/YAML/TOML edits, AST-aware code operations, multi-file batching, markdown operations, and MCP server

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Install time downloads an OS-specific executable archive into the package's private `node_modules/.bin_real` directory. The archive is not integrity-verified by the reviewed JavaScript before later CLI execution.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall, then an explicit `patchloom` CLI invocation

Impact

A compromised release artifact can obtain code execution when the CLI is invoked.

Mechanism

remote native-binary download, extraction, and execution

Rationale

No concrete malicious behavior is present in the reviewed source, but the postinstall remote binary delivery chain lacks artifact verification and leaves executable behavior outside the inspected package source.

Evidence

package.jsoninstall.jsbinary.jsbinary-install.jsnode_modules/.bin_real

Network endpoints1

github.com/patchloom/patchloom/releases/download/patchloom-v0.15.1

Decision evidence

public snapshot

AI called this Suspicious at 83.0% confidence as Unknown with low false-positive risk.

Evidence for warning

`package.json` runs `node ./install.js` as `postinstall`.
`binary.js` builds a GitHub release URL from package metadata.
`binary-install.js` downloads and extracts a platform archive without checksum/signature verification.
`binary-install.js` later executes the extracted binary with `spawnSync`.

Evidence against

The release host is fixed in `package.json` and package-aligned.
Source contains no credential/env harvesting or exfiltration.
No AI-agent configuration, project-file mutation, or persistence is performed by the installer.
Shell commands use fixed executables and controlled archive paths.

Behavioral surface

Source

ChildProcessFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 10.0 KB of source, external domains: example.com

Source & flagged code

2 flagged

package.jsonView file

Lines 28-68json

28 "homepage": "https://patchloom.github.io/patchloom/",

29 "keywords": [

30 "command-line-utilities",

31 "development-tools",

32 "config",

33

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High2 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowFilesystem

LowUrl Strings

LPM CLI

Source & flagged code

2 flagged

package.jsonView file

Lines 28-68json

28 "homepage": "https://patchloom.github.io/patchloom/",

29 "keywords": [

30 "command-line-utilities",

31 "development-tools",

32 "config",

33

"text-processing"

,

34 "parser-implementations",

35 "mcp",

36 "ai-agents",

37 "tree-sitter",

38 "yaml",

39 "toml"

40 ],

41 "license": "MIT OR Apache-2.0",

42 "name": "patchloom",

43 "preferUnplugged": true,

44 "repository": "https://github.com/patchloom/patchloom",

45 "scripts": {

46 "fmt": "prettier --write **/*.js",

47 "fmt:check": "prettier --check **/*.js",

48 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 },

50 "supportedPlatforms": {

51 "aarch64-apple-darwin": {

52 "artifactName": "patchloom-aarch64-apple-darwin.tar.xz",

53 "bins": {

54 "patchloom": "patchloom"

55 },

56 "zipExt": ".tar.xz"

57 },

58 "aarch64-pc-windows-gnu": {

59 "artifactName": "patchloom-aarch64-pc-windows-msvc.zip",

60 "bins": {

61 "patchloom": "patchloom.exe"

62 },

63 "zipExt": ".zip"

64 },

65 "aarch64-pc-windows-msvc": {

66 "artifactName": "patchloom-aarch64-pc-windows-msvc.zip",

67 "bins": {

68 "patchloom": "patchloom.exe"