registry / Install hook abuse / your-ai-workflow-firebase-os / 1.14.16

your-ai-workflow-firebase-os@1.14.16

Your AI Firebase — a complete Firebase-powered admin app in one React component.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package has a concrete automatic install-hook abuse risk because it broadly changes consumer-controlled files and restores its own code at build time. The evidence does not meet the stricter publish-block conditions for malicious lifecycle behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install runs the postinstall hook; a Vite build or dev session activates the added plugin.

Impact

Consumer CSS, application entry points, package metadata, Vite configuration, and environment template can be changed without a separate setup command.

Mechanism

Automatic consumer-project rewriting and build-time restoration of package-owned entry files.

AI rationale

Evidence

scripts/postinstall.jsscripts/patchViteConfig.jsdist/vite.es.jssrc/index.csssrc/App.csssrc/main.tsxsrc/your-ai-workflow-firebase-os/package.jsonvite.config.ts.env

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The automatic postinstall hook runs package code during installation.
The hook clears consumer CSS and overwrites the consumer's src/main.tsx and src/App.tsx.
The hook edits the consumer package.json, vite.config.ts, and creates .env.
The bundled Vite plugin later discards changes to the same consumer entry files.
Comments referring to prior install blocking and prompt injection address the review context and are reviewer manipulation.

Evidence against

No runtime dependency on this package name was found.
No child-process execution, shell command, secret harvesting, or exfiltration was found.
The server network calls implement Firebase token and Firestore access plus Resend email delivery using supplied environment credentials.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinified

Source & flagged code

7 flagged

package.jsonView file

Lines 39-79json

39 "server.template.ts",

40 "scripts/postinstall.js",

41 "scripts/patchViteConfig.js",

42 "src/index.css",

43 "src/pages/Home.tsx",

44 "src/microcomponents/registry.ts",

45 "src/configs/theme.config.ts",

46 "src/configs/forms/registry.ts",

47 "src/configs/forms/contactForm.config.ts",

48 "src/configs/forms/supportForm.config.ts",

49 "src/configs/pages/registry.ts"

50 ],

51 "scripts": {

52 "dev": "vite",

53 "test": "vitest run",

54 "test:watch": "vitest",

55 "build": "tsc -b && vite build",

56 "build:lib": "vite build",

57 "lint": "eslint .",

58 "preview": "vite preview",

59 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L59

60 "release": "npm version patch && npm run build:lib && npm pack",

61 "verify:dist": "node scripts/verifyDist.js",

62 "prepack": "node scripts/verifyDist.js"

63 },

64 "dependencies": {

65 "@eslint/js": "^9.39.4",

66 "@tailwindcss/vite": "^4.2.2",

67 "@types/node": "^24.12.0",

68 "@types/react": "^19.2.14",

69 "@types/react-dom": "^19.2.3",

70 "@vitejs/plugin-react": "^6.0.1",

71 "clsx": "^2.1.1",

72 "firebase": ">=10",

73 "framer-motion": "^12.38.0",

74 "fuse.js": "^7.3.0",

75 "iconoir": "^7.11.0",

76 "iconoir-react": "^7.11.0",

77 "lucide-react": "^1.7.0",

78 "react": ">=18",

79 "react-dom": ">=18",

dist/your-ai-workflow-firebase-os.cjs.jsView file

1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./chunk-DYteiM-1.cjs`),t=require(`./ContactPopup-Fj9bm7eL.cjs`),n=require(`./PhoneInputField-CkA... L2: `);return s?null:(0,i.jsxs)(`div`,{className:`flex flex-col gap-2 min-w-0 max-w-full rounded-2xl border border-[var(--panel-border)] bg-[var(--panel-bg)] ${o?`px-4 py-3.5`:`px-5 py...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/your-ai-workflow-firebase-os.cjs.jsView on unpkg · L1

scripts/postinstall.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2/**

3 * your-ai-workflow-firebase-os postinstall script

4 *

5 * Runs automatically after `npm install your-ai-workflow-firebase-os`.

6 * Patches the consumer project so that <FirebaseOS /> renders correctly

7 * out of the box — no manual cleanup required.

8 *

9 * What it does:

10 * 1. Clears src/index.css and src/App.css to remove Vite default styling

dist/your-ai-workflow-firebase-os.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/your-ai-workflow-firebase-os.cssView on unpkg

dist/server.cjs.jsView file

•matchType = normalized_sha256 matchedPackage = your-ai-workflow-firebase-os@1.14.18 matchedPath = dist/server.cjs.js matchedIdentity = npm:[redacted]:1.14.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server.cjs.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = your-ai-workflow-firebase-os@1.14.23 matchedIdentity = npm:[redacted]:1.14.23 similarity = 0.556 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server.cjs.jsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/your-ai-workflow-firebase-os.cjs.jsView file

Medium

Findings

1 Critical4 High5 Medium5 Low

CriticalAi Agent Control Hijackscripts/postinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limiteddist/your-ai-workflow-firebase-os.css

HighKnown Malware Source Similaritydist/server.cjs.js

HighPrevious Version Dangerous Deltadist/server.cjs.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/your-ai-workflow-firebase-os.cjs.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to your-ai-workflow-firebase-os@1.14.16.

See all versions of your-ai-workflow-firebase-os for other recorded verdicts.

Review the evidence and your use of your-ai-workflow-firebase-os@1.14.16 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-13 00:44:36.529Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.