psypi@0.4.1
A standalone, evidence-grounded social-science research agent — a conversation-driven agent that bundles the Pi runtime with psypi's research contracts, evidence gates, and workflows
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a real install-time agent-runtime mutation, but the inspected code is limited to rebranding/configuration changes and does not establish malicious behavior. Warn rather than block under the legacy CLI shim migration policy.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
npm postinstall
Impact
Mutates an AI-agent runtime dependency without an explicit user command.
Mechanism
automatic bundled Pi runtime rebranding
AI rationale
This is a real install-time agent-runtime mutation, but the inspected code is limited to rebranding/configuration changes and does not establish malicious behavior. Warn rather than block under the legacy CLI shim migration policy.
Evidence
package.jsonscripts/rebrand-pi.mjsnode_modules/@earendil-works/pi-coding-agent/package.jsonnode_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/interactive-mode.js
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- `postinstall` automatically runs the rebranding script.
- The hook resolves and rewrites its bundled Pi dependency's package metadata and interactive-mode source.
Evidence against
- The hook's patches are limited to `piConfig` and named display/banner strings.
- No credential collection, exfiltration, remote payload retrieval, or shell execution appears in the install hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/rebrand-pi.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/src/setup.jsView file
160const entry = fileURLToPath(import.meta.resolve("@earendil-works/pi-coding-agent"));
L161: const { AuthStorage } = await import(pathToFileURL(join(dirname(entry), "core", "auth-storage.js")).href);
L162: const auth = AuthStorage.create(join(agentDir, "auth.json"));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/src/setup.jsView on unpkg · L160dist/src/cli.jsView file
•matchType = normalized_sha256
matchedPackage = psypi@0.3.2
matchedPath = dist/src/cli.js
matchedIdentity = npm:cHN5cGk:0.3.2
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
6 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similaritydist/src/cli.js
HighKnown Malware Source Similaritydist/src/panel/extension.js
HighKnown Malware Source Similaritydist/src/panel/server.js
HighKnown Malware Source Similaritydist/src/adapters/pi/rpc.js
HighKnown Malware Source Similaritydist/src/chat.js
MediumDynamic Requiredist/src/setup.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to psypi@0.4.1.
See all versions of psypi for other recorded verdicts.
- Review the evidence and your use of psypi@0.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.