twintest@0.1.0

Windows desktop application test automation framework — Appium 2.x + appium-windows-driver + WebDriverIO + Cucumber-js.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The automatic global Claude configuration change leaves a persistent, package-owned agent integration, so it warrants a warning. The inspected behavior does not establish a concrete attack requiring publication blocking.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package with npm runs its postinstall script.

Impact

Claude sessions may invoke the installed commands, creating persistent agent integration. The inspected hooks show no credential transfer or remote execution.

Mechanism

The script copies skills and hook files, then registers two Bash PreToolUse commands in the user’s global Claude settings. The hook installer has an opt-out environment variable; the hook code checks test or commit commands.

AI rationale

Evidence

package.jsonscripts/postinstall.cjshooks/winappdriver-session-guard.shhooks/commit-message-gate.shhooks/lib/twintest-activation.sh~/.claude/settings.json~/.claude/hooks/~/.claude/skills/

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package manifest runs scripts/postinstall.cjs after installation.
The install script targets skills directories in both the consumer project and the user’s home directory.
The script registers two package hooks for every Bash PreToolUse event in Claude settings.
Hook installation has an environment-variable opt-out, but no affirmative consent check.
The script reads and rewrites the user’s global Claude settings file to add hook registrations.
The hook scripts use an activation helper and check test or commit commands; no data transfer or remote execution was identified in the inspected code.

Evidence against

The hooks are package-owned and limited to testing and commit-message checks.
The inspected install and hook code contains no credential collection or network send.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

Source & flagged code

6 flagged

package.jsonView file

Lines 4-44json

4 "description": "Windows desktop application test automation framework — Appium 2.x + appium-windows-driver + WebDriverIO + Cucumber-js.",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "exports": {

9 ".": {

10 "import": "./dist/index.js",

11 "types": "./dist/index.d.ts"

12 },

13 "./config": {

14 "import": "./dist/config.js",

15 "types": "./dist/config.d.ts"

16 }

17 },

18 "scripts": {

19 "test": "wdio run wdio.conf.ts",

20 "test:repair": "node bin/self-repair.mjs",

21 "appium:setup": "ts-node scripts/setup-appium.ts",

22 "appium:start": "appium --address 127.0.0.1 --port 4723 --allow-cors",

23 "appium:doctor": "appium driver doctor windows",

24 "postinstall": "node scripts/postinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L24

25 "build": "tsc -p tsconfig.build.json",

26 "prepublishOnly": "npm run build"

27 },

28 "bin": {

29 "twintest-self-repair": "bin/self-repair.mjs"

30 },

31 "files": [

32 "dist",

33 "bin",

34 "hooks",

35 "skills",

36 "schemas",

37 "scripts/postinstall.cjs"

38 ],

39 "dependencies": {

40 "dotenv": "^16.0.0"

41 },

42 "peerDependencies": {

43 "@wdio/appium-service": "^9.0.0",

44 "@wdio/cli": "^9.0.0",

scripts/postinstall.cjsView file

Lines 1-26javascript

1#!/usr/bin/env node

3/**

4 * postinstall.js — auto-install twintest skills and hooks.

5 *

6 * Adapted from the achilles postinstall pattern:

7 * - Copies skills to ~/.claude/skills/ and <project>/.claude/skills/

8 * - Copies hooks to ~/.claude/hooks/ and registers them in settings.json

9 * - Idempotent: safe to run multiple times

10 */

hooks/winappdriver-session-guard.shView file

•path = hooks/winappdriver-session-guard.sh kind = build_helper sizeBytes = 1758 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/winappdriver-session-guard.shView on unpkg

bin/self-repair.mjsView file

•matchType = normalized_sha256 matchedPackage = twintest@1.0.5 matchedPath = bin/self-repair.mjs matchedIdentity = npm:dHdpbnRlc3Q:1.0.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/self-repair.mjsView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.cjsView file

6* Adapted from the achilles postinstall pattern: L7: * - Copies skills to ~/.claude/skills/ and <project>/.claude/skills/ L8: * - Copies hooks to ~/.claude/hooks/ and registers them in settings.json L9: * - Idempotent: safe to run multiple times ... L23: if (require.main === module && !packageDir.includes('node_modules')) { L24: // For local dev, still install skills to project-level .claude/skills/ L25: installLocalSkills(); ... L31: const destinations = [ L32: path.join(projectRoot, '.claude', 'skills'), L33: path.join(homeDir, '.claude', 'skills'), L34: ]; ... L44: function copyDirRecursive(src, dest) {

Findings

1 Critical3 High4 Medium4 Low

CriticalAi Agent Control Hijackscripts/postinstall.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighTrigger Reachable External Ai Agent Control Surface Mutationscripts/postinstall.cjs

HighKnown Malware Source Similaritybin/self-repair.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helperhooks/winappdriver-session-guard.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to twintest@0.1.0.

See all versions of twintest for other recorded verdicts.

Review the evidence and your use of twintest@0.1.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 03:47:29.818Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.