teammesh@0.30.0
TeamMesh CLI: connects AI coding agents to your team
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe postinstall script conditionally replaces the CLI shim with a bundled native binary after a version check. Since the CLI delegates execution to native binaries that remain materially unresolved, the package warrants a warning, but the inspected evidence does not establish an attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the tm command invokes the platform-specific native binary; npm postinstall may replace the JavaScript shim after a version check.
Impact
The native program's effects cannot be determined from the available source evidence; no specific harmful effect is established.
Mechanism
The JavaScript entrypoint passes the caller's arguments to the native program. Available offline analyses could not inspect several binaries and only partially inspected the Windows x64 binary.
AI rationale
The postinstall script conditionally replaces the CLI shim with a bundled native binary after a version check. Since the CLI delegates execution to native binaries that remain materially unresolved, the package warrants a warning, but the inspected evidence does not establish an attack.
Evidence
.lpm-inspection-RNKxCE/0-30bc712594d9.txt.lpm-inspection-RNKxCE/1-1672500e295b.txt.lpm-inspection-RNKxCE/2-2e2aa53a5381.txt.lpm-inspection-RNKxCE/3-2f3b32e33df6.txt.lpm-inspection-RNKxCE/4-8f62f80a11c1.txt.lpm-inspection-RNKxCE/5-2528fc5246c1.txtpackage.jsoninstall.jsbin/tm.jsnative/win32-arm64/tm.exenative/linux-arm64/tmnative/darwin-x64/tmnative/win32-x64/tm.exenative/darwin-arm64/tmnative/linux-x64/tm
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Unknown with high false-positive risk.
Evidence for warning
- package.json declares a postinstall hook; the installer gates it by platform and npm, then stages a native binary and checks it with a version command before replacing the CLI shim.
- The CLI forwards its arguments to a platform-specific native binary, so its main runtime behavior is outside the JavaScript source.
- Offline analyses could not inspect the Linux, macOS, Windows ARM64, and Linux x64 binaries; the Windows x64 analysis is partial and leaves call targets uninspected.
Evidence against
- The inspected installer performs a conditional CLI shim replacement; it does not establish unrelated project or agent configuration changes.
- No concrete malicious behavior was confirmed in the inspected JavaScript or available artifact analyses.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
NoLicense
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg18"postinstall": "node install.js"
},
"files": [
"bin",
Medium
Suspicious Lifecycle Evidence
package.json declares a postinstall hook; the installer gates it by platform and npm, then stages a native binary and checks it with a version command before replacing the CLI shim.
package.jsonView on unpkg · L18native/win32-arm64/tm.exeView file
Findings
1 High8 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Native Binarynative/win32-arm64/tm.exe
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumSuspicious Lifecycle Evidenceinstall.js
MediumSuspicious Lifecycle Evidenceinstall.js
MediumAi Review Evidencebin/tm.js
LowScripts Present
LowFilesystem
LowNo License
Affected versions and remediation
This report applies to teammesh@0.30.0.
See all versions of teammesh for other recorded verdicts.
- Review the evidence and your use of teammesh@0.30.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.