projecta-rrr@1.25.0: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

projecta-rrr@1.25.0: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/install.js --global --yes --sk[redacted] && node scripts/register-mcp.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/install.js --global --yes --sk[redacted] && node scripts/register-mcp.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/hosted-setup.jsView file

27const readline = require('readline'); L28: const { execSync, spawnSync } = require('child_process'); L29:

High

Child Process

Package source references child process execution.

bin/hosted-setup.jsView on unpkg · L27

23L24: const fs = require('fs'); L25: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hosted-setup.jsView on unpkg · L23

bin/install.jsView file

135* Detect if running inside the projecta-rrr source repository root L136: * This prevents creating duplicate .claude/ when developing RRR itself L137: */ ... L319: function runDetectShimConflicts() { L320: const configDir = expandTilde(explicitConfigDir) || expandTilde(process.env.CLAUDE_CONFIG_DIR); L321: const userClaudeDir = configDir || path.join(os.homedir(), '.claude'); L322: const userRegistryPath = path.join(userClaudeDir, 'mcp.registry.json'); ... L354: const raw = JSON.parse(fs.readFileSync(userSettingsPath, 'utf8')); L355: const servers = (raw && raw.mcpServers) || {}; L356: Object.keys(servers).forEach((k) => { ... L425: // Resolve user config dir — same precedence as the main flow. L426: const configDir = expandTilde(explicitConfigDir) || expandTilde(process.env.CLAUDE_CO

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/install.jsView on unpkg · L135

105${yellow}Recommended: Install WSL2 (Windows Subsystem for Linux)${reset} L106: 1. Open PowerShell as Administrator L107: 2. Run: ${cyan}wsl --install${reset}

High

Shell

Package source references shell execution.

bin/install.jsView on unpkg · L105

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. onsole.error(` ${yellow}⚠ could not parse ${usersettingspath}: ${err.message}${reset}`); } } if (conflicts.length === 0) { console.log(` ${green}✓${reset} no shim conflicts detected`); return; } console.log(` ${yellow}⚠${reset} ${conflicts.length} shim conflict(s) detected:`); conflicts.foreach((c) => { console.log(` • ${c.source} → name="${c.name}" type=${c.type} url=${c.url}`); }); console.log(` ${yellow}how to fix:${reset} the legacy 'rrr-search' entry with type:'http' + fly.dev url will collide with the new shim-wrapped 'rrr-search-hosted' entry (claude-code#29688 double-spawn). to resolve: 1. rename your hand-edited

rrr/lib/search/index-manifest.jsView file

51const content = fs.readFileSync(manifestPath, 'utf8'); L52: const manifest = JSON.parse(content); L53:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

rrr/lib/search/index-manifest.jsView on unpkg · L51

hooks/rrr-update-cache-stats.shView file

•path = hooks/rrr-update-cache-stats.sh kind = build_helper sizeBytes = 3705 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/rrr-update-cache-stats.shView on unpkg

rrr/skills/upstream/anthropic/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = [redacted]-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

rrr/skills/upstream/anthropic/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

rrr/skills/upstream/anthropic/theme-factory/theme-showcase.pdfView file

•path = [redacted]-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

rrr/skills/upstream/anthropic/theme-factory/theme-showcase.pdfView on unpkg

Source & flagged code

15 flagged

package.jsonView file

Lines 1-30json

1{

2 "name": "projecta-rrr",

3 "version": "1.25.0",

4 "description": "A meta-prompting, context engineering and spec-driven development system for Claude Code by Projecta.ai",

5 "bin": {

6 "projecta-rrr": "bin/install.js",

7 "projecta-rrr-hosted-setup": "bin/hosted-setup.js"

8 },

9 "scripts": {

10 "postinstall": "node bin/install.js --global --yes --skip-optimization && node scripts/register-mcp.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 "watch": "node watcher/index.js",

12 "watch:verbose": "node watcher/index.js --verbose",

13 "watch:claude-code": "node watcher/watchers/claude-code.js --verbose",

14 "watch:gsd": "node watcher/watchers/github-release.js --repo=gsd-build/get-shit-done --verbose",

15 "watch:gsd-browser": "node watcher/watchers/github-release.js --repo=gsd-build/gsd-browser --verbose",

16 "watch:superpowers": "node watcher/watchers/github-release.js --repo=obra/superpowers --verbose",

17 "watch:agent-browser": "node watcher/watchers/github-release.js --repo=vercel-labs/agent-browser --verbose",

18 "watch:taches": "node watcher/watchers/github-release.js --repo=glittercowboy/taches-cc-resources --verbose",

19 "test": "node --test tests/*.test.js && jest",

20 "test:node": "node --test tests/*.test.js",

21 "test:jest": "jest",

22 "codex:rrr": "bash scripts/codex-rrr.sh",

23 "test:browser": "vitest --browser",

24 "test:ui": "vitest --ui",

25 "mcp:setup": "bash scripts/mcp-setup.sh",

26 "jarvis": "bash scripts/jarvis.sh",

27 "visual:proof": "bash scripts/visual-proof.sh",

28 "test:e2e": "playwright test",

29 "test:e2e:ui": "playwright test --ui",

30 "e2e": "playwright test",

bin/hosted-setup.jsView file

Lines 3-47javascript

3 * bin/hosted-setup.js — one-command wizard for hosted-search onboarding.

4 *

5 * Walks a user through:

6 * 1. Prerequisite check (claude

bin/install.jsView file

Lines 3-43javascript

3// Subcommand dispatch — v1.21.4+. Routes `projecta-rrr <sub> ...` to

4// dedicated scripts. Empty / --hud-only / --global fall through to the

5// default install flow below for back-compat.

6(function dispatch () {

7 const sub = process.argv[2];

8 if (sub

rrr/lib/search/index-manifest.jsView file

Lines 31-71javascript

31 * Load manifest from disk.

32 *

33 * @param {string} projectPath - Root path of the project

34 * @returns {Promise<{files: Object, lastSync: number|null

hooks/rrr-update-cache-stats.shView file

•path = hooks/rrr-update-cache-stats.sh kind = build_helper sizeBytes = 3705 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/rrr-update-cache-stats.shView on unpkg

rrr/skills/upstream/anthropic/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = [redacted]-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

rrr/skills/upstream/anthropic/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

rrr/skills/upstream/anthropic/theme-factory/theme-showcase.pdfView file

•path = [redacted]-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

rrr/skills/upstream/anthropic/theme-factory/theme-showcase.pdfView on unpkg

Lines 85-155javascript

85 .trim();

86 return { available: true, version };

87 } catch (e) {

88 // codex not in PATH — not an error, just not installed

89 return { available: false };

90 }

91}

92

93/**

94 * Print Windows bash remediation message

95 */

96function printWindowsBashWarning() {

97 console.log(`

98 ${orange}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${reset}

99 ${orange}⚠ BASH NOT FOUND${reset}

100 ${orange}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${reset}

101

102 RRR hooks and scripts require ${cyan}bash${reset} to run.

103 Without bash, hooks (statusline, notifications) will be skipped.

104

105 ${yellow}Recommended: Install WSL2 (Windows Subsystem for Linux)${reset}

106 1. Open PowerShell as Administrator

107 2. Run: ${cyan}wsl --install${reset}

High

Shell

Package source references shell execution.

bin/install.jsView on unpkg · L105

108 3. Restart your computer

109 4. Launch Ubuntu from Start menu

110 5. Run RRR inside Ubuntu: ${cyan}cd /mnt/c/your/project && claude${reset}

111

112 ${yellow}Alternative: Install Git for Windows${reset}

113 1. Download from: ${cyan}https://git-scm.com/download/win${reset}

114 2. Install with "Git Bash" option enabled

115 3. Run Claude Code from "Git Bash" terminal

116 4. Verify: ${cyan}bash --version${reset}

117

118 ${dim}Note: Core RRR commands (/rrr:help, /rrr:new-project, etc.) will

119 still work, but hooks and shell scripts will not run.${reset}

120`);

121}

122

123// Colors

124const cyan = '\x1b[36m';

125const green = '\x1b[32m';

126const yellow = '\x1b[33m';

127const orange = '\x1b[91m'; // bright red (more compatible than 256-color)

128const dim = '\x1b[2m';

129const reset = '\x1b[0m';

130

131// Get version from package.json

132const pkg = require('../package.json');

133

134/**

135 * Detect if running inside the projecta-rrr source repository root

136 * This prevents creating duplicate .claude/ when developing RRR itself

137 */

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

bin/install.jsView on unpkg · L135

138function isRrrSourceRepo() {

139 const cwd = process.cwd();

140 const src = path.join(__dirname, '..');

141

142 // Check if cwd is the source repo root

143 if (path.resolve(cwd) !== path.resolve(src)) {

144 return false;

145 }

146

147 // Verify it's actually the RRR source repo by checking package.json name

148 // and presence of key source directories

149 try {

150 const cwdPkgPath = path.join(cwd, 'package.json');

151 if (!fs.existsSync(cwdPkgPath)) return false;

152

153 const cwdPkg = JSON.parse(fs.readFileSync(cwdPkgPath, 'utf8'));

154 if (cwdPkg.name !== 'projecta-rrr') return false;

155