registry / patchloom / 0.15.2

patchloom@0.15.2

Structured file editing library and CLI for AI agents: parser-backed JSON/YAML/TOML edits, AST-aware code operations, multi-file batching, markdown operations, and MCP server

AI Security Review

scanned 2h ago · by lpm-firewall-ai

`postinstall` fetches and extracts an externally hosted native executable. The downloaded executable is run only when the user invokes `patchloom`. No confirmed credential theft, persistence outside package files, or agent-control mutation is present.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install triggers the download; invoking `patchloom` triggers the downloaded binary.

Impact

A compromised or substituted release artifact could execute with the installing user's privileges when the CLI runs.

Mechanism

unverified remote native-binary bootstrap and execution

Rationale

The shipped source is not malicious, but its install-time download and later execution of an unverified native artifact is a real staged-payload supply-chain risk. Warn rather than block because the endpoint and behavior are package-aligned and no concrete attack chain is present.

Evidence

package.jsoninstall.jsbinary.jsbinary-install.jsrun-patchloom.jsREADME.mdnode_modules/.bin_real

Network endpoints1

github.com/patchloom/patchloom/releases/download/patchloom-v0.15.2

Decision evidence

public snapshot

patchloom@0.15.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code