u-foo@3.0.25: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

u-foo@3.0.25: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/ufoo.jsView file

94L95: const { execSync } = require("child_process"); L96: const path = require("path");

High

Child Process

Package source references child process execution.

bin/ufoo.jsView on unpkg · L94

bin/ukimi.jsView file

13L14: const AgentLauncher = require("../src/agents/launch/launcher"); L15: const { resolveDefaultManualBootstrap } = require("../[redacted]");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ukimi.jsView on unpkg · L13

src/runtime/projects/projectId.jsView file

1const crypto = require("crypto"); L2: const fs = require("fs");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/runtime/projects/projectId.jsView on unpkg · L1

src/coordination/bus/inject.jsView file

1const { spawn, spawnSync } = require("child_process"); L2: const fs = require("fs"); L3: const net = require("net"); L4: const path = require("path"); ... L7: L8: const SHOULD_LOG_INJECT = process.env.UFOO_INJECT_DEBUG === "1"; L9: const logInject = (message) => {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/coordination/bus/inject.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = u-foo@3.0.24 matchedPath = src/coordination/bus/inject.js matchedIdentity = npm:dS1mb28:3.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/coordination/bus/inject.jsView on unpkg

src/agents/providers/claudeThreadProvider.jsView file

31package = u-foo; repositoryIdentity = ufoo; dependency = @anthropic-ai/claude-agent-sdk L31: try { L32: return await import("@anthropic-ai/claude-agent-sdk"); L33: } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

src/agents/providers/claudeThreadProvider.jsView on unpkg · L31

scripts/postinstall.jsView file

74function installSkillDirs(targetDir, sources, label) { L75: fs.mkdirSync(targetDir, { recursive: true }); L76: ... L84: // Install ufoo skills for Claude and Codex at npm install time. L85: // - Claude skills: ~/.claude/skills/<name> -> skill dir L86: // - Codex skills: ${CODEX_HOME:-~/.codex}/skills/<name> -> skill dir L87: try { ... L90: const sources = collectSkillSources(pkgRoot); L91: const codexHome = process.env.CODEX_HOME || path.join(home, ".codex"); L92: const retiredLinks = [redacted]({ pkgRoot, home, codexHome }); ... L98: if (sources.length > 0) { L99: installSkillDirs(path.join(home, ".claude", "skills"), sources, "~/.claude/skills");

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L74

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. es", "node-pty", "prebuilds", platform, "spawn-helper" ); if (fs.existssync(spawnhelperpath)) { const stats = fs.statsync(spawnhelperpath); if ((stats.mode & 0o111) === 0) { fs.chmodsync(spawnhelperpath, 0o755); console.log(`[postinstall] fixed node-pty spawn-helper permissions (${platform})`); } } } catch { } } try { const plat = `${process.platform}-${process.arch}`; const tuibin = path.join(__dirname, "..", "dist", "tui", plat, "ufoo-tui"); if (

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/postinstall.jsView on unpkg

dist/tui/darwin-arm64/ufoo-tuiView file

•path = dist/tui/darwin-arm64/ufoo-tui kind = native_binary sizeBytes = 1888288 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/tui/darwin-arm64/ufoo-tuiView on unpkg

src/agents/launch/launcher.jsView file

•matchType = normalized_sha256 matchedPackage = u-foo@3.0.24 matchedPath = src/agents/launch/launcher.js matchedIdentity = npm:dS1mb28:3.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/agents/launch/launcher.jsView on unpkg

src/coordination/bus/index.jsView file

•matchType = normalized_sha256 matchedPackage = u-foo@3.0.24 matchedPath = src/coordination/bus/index.js matchedIdentity = npm:dS1mb28:3.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/coordination/bus/index.jsView on unpkg

src/runtime/daemon/mcpServer.jsView file

•matchType = normalized_sha256 matchedPackage = u-foo@3.0.24 matchedPath = src/runtime/daemon/mcpServer.js matchedIdentity = npm:dS1mb28:3.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/daemon/mcpServer.jsView on unpkg

src/runtime/daemon/ops.jsView file

•matchType = normalized_sha256 matchedPackage = u-foo@3.0.24 matchedPath = src/runtime/daemon/ops.js matchedIdentity = npm:dS1mb28:3.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/daemon/ops.jsView on unpkg