triflux@10.59.0
CLI-first multi-model orchestrator for Claude Code — route tasks to Codex, Antigravity, and Claude
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe source confirms automatic postinstall setup that includes first-party agent-related configuration and Codex hook registration. This supports a warning for agent extension lifecycle risk, but does not establish malicious attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package through npm runs its postinstall hook.
Impact
Installation can change agent-related configuration or hook state in the user's home directory.
Mechanism
The setup script proceeds into its normal setup flow for the installed package and can register Codex hooks.
AI rationale
The source confirms automatic postinstall setup that includes first-party agent-related configuration and Codex hook registration. This supports a warning for agent extension lifecycle risk, but does not establish malicious attack behavior.
Evidence
package.jsonscripts/setup.mjs
Decision evidence
public snapshotAI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs scripts/setup.mjs automatically on postinstall.
- For a registry installation, the setup entrypoint continues into its normal setup flow; checkout installs take a separate message-only branch.
- The setup flow registers Codex hooks and reports when they are not yet approved.
- The flagged entrypoints and helper locations concern CLI, session, team-state, or cache behavior; they do not establish a separate attack.
Evidence against
- The inspected source shows first-party setup behavior, not an unrelated payload or credential transfer.
- The setup flow can report that Codex hooks still need approval.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
25 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/setup.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/tfx-live.mjsView file
1#!/usr/bin/env node
L2: import { execFile } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
•matchType = normalized_sha256
matchedPackage = triflux@10.55.1
matchedPath = bin/tfx-live.mjs
matchedIdentity = npm:dHJpZmx1eA:10.55.1
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/tfx-live.mjsView on unpkgFindings
1 Critical20 High6 Medium5 Low
CriticalAi Agent Control Hijackscripts/setup.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/tfx-live.mjs
HighShellbin/triflux.mjs
HighExternal Ai Agent Control Surface Mutationscripts/mcp-check.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/ensure-codex-hooks.mjs
HighTrigger Reachable Persistencescripts/setup.mjs
HighRuntime Package Installbin/triflux.mjs
HighSemantic Analysis Limitedhub/team/headless.mjs#virtual:normalized:round1
HighKnown Malware Source Similarityhub/team/headless.mjs
HighKnown Malware Source Similarityscripts/lib/legacy-mcp-cleanup.mjs
Affected versions and remediation
This report applies to triflux@10.59.0.
See all versions of triflux for other recorded verdicts.
- Review the evidence and your use of triflux@10.59.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.