triflux@10.82.2
CLI-first multi-model orchestrator for Claude Code — route tasks to Codex, Antigravity, and Claude
AI Security Review
scanned 21h ago · by lpm-firewall-aiSource inspection confirms automatic first-party agent setup during npm postinstall, which carries residual configuration risk. The inspected behavior does not establish a concrete attack warranting a block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package through npm where its postinstall hook runs.
Impact
Agent configuration or installed skills may change without a separate setup command.
Mechanism
The setup routine syncs package skills and applies agent profile configuration.
AI rationale
Source inspection confirms automatic first-party agent setup during npm postinstall, which carries residual configuration risk. The inspected behavior does not establish a concrete attack warranting a block.
Evidence
package.jsonscripts/setup.mjs
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs scripts/setup.mjs from its npm postinstall hook.
- When installed under node_modules, the postinstall path reaches runDeferred; setup syncs package skills and applies Codex profile setup.
- The setup also works with Claude, Codex, and Antigravity configuration, while the cited runtime locations concern local session state, route-script lookup, and text formatting.
Evidence against
- The inspected setup code shows first-party package setup and profile configuration, not a concrete credential transfer, destructive action, or remote payload execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
25 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/setup.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/tfx-live.mjsView file
1#!/usr/bin/env node
L2: import { execFile } from "node:child_process";
L3: import { randomBytes } from "node:crypto";
High
bin/triflux.mjsView file
1540});
L1541: // ── psmux 기본 셸 자동 수정 (cmd.exe → PowerShell) ──
L1542: if (process.platform === "win32" && which("psmux")) {
High
Shell
Package source references shell execution.
Findings
1 Critical20 High6 Medium5 Low
CriticalAi Agent Control Hijackscripts/setup.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/tfx-live.mjs
HighShellbin/triflux.mjs
HighExternal Ai Agent Control Surface Mutationscripts/mcp-check.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/ensure-codex-hooks.mjs
HighTrigger Reachable Persistencescripts/setup.mjs
HighRuntime Package Installbin/triflux.mjs
HighSemantic Analysis Limitedhub/team/headless.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritybin/triflux.mjs
HighKnown Malware Source Similarityhub/team/headless.mjs
Affected versions and remediation
This report applies to triflux@10.82.2.
See all versions of triflux for other recorded verdicts.
- Review the evidence and your use of triflux@10.82.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.