Loading npm security reports…

your-ai-workflow-firebase-os@1.14.27: Malicious npm security | LPM Firewall

registry / your-ai-workflow-firebase-os / 1.14.27

your-ai-workflow-firebase-os@1.14.27

Your AI Firebase — a complete Firebase-powered admin app in one React component.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

Installing the package mutates a consumer Vite project and installs a plugin that reclaims its entry files. This is destructive, persistent consumer-project modification.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm installation runs postinstall; later Vite configuration resolves or watches the injected plugin.

Impact

Consumer CSS, entry points, manifest, Vite configuration, and environment template can be replaced or altered without a separate setup command.

Mechanism

Automatic overwrite and persistent build-plugin injection.

Attack narrative

The install hook locates the consumer project, clears CSS, overwrites App.tsx and main.tsx, edits package.json and vite.config.ts, and creates a .env file. The Vite plugin then rewrites the owned entry files whenever their contents differ, making the consumer-project modification persistent during normal development and builds.

AI rationale

The package performs broad, automatic, and persistent mutation of unrelated consumer-project source and build control files at install time. Although no install-time secret exfiltration was found, this concrete destructive lifecycle behavior warrants blocking.

Evidence

package.jsonscripts/postinstall.jsdist/vite.es.jssrc/index.csssrc/App.csssrc/main.tsxsrc/App.tsxsrc/your-ai-workflow-firebase-os/vite.config.ts.env

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/your-ai-workflow-firebase-os.cjs.jsView file

1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./chunk-CiTBaPhY.cjs`),t=require(`./ContactPopup-DiC2VtcP.cjs`),n=require(`./access-VS8lxzWe.cjs... L2: `);return a?null:(0,s.jsxs)(`div`,{className:`flex flex-col gap-2 min-w-0 max-w-full rounded-2xl border border-[var(--panel-border)] bg-[var(--panel-bg)] ${i?`px-4 py-3.5`:`px-5 py...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/your-ai-workflow-firebase-os.cjs.jsView on unpkg · L1

scripts/postinstall.jsView file

17* L18: * It does NOT write GEMINI.md / AGENTS.md any more: AI Studio reserves those L19: * filenames for the developer's own instructions, and a package writing them ... L114: if (current.includes(CLEARED_MARKER)) continue; L115: fs.writeFileSync(filePath, `/* ${CLEARED_MARKER} postinstall */\n`); L116: console.log(` ✓ Cleared ${file} (was conflicting with your-ai-workflow-firebase-os styles)`); ... L149: const mainPath = path.join(srcDir, 'main.tsx'); L150: fs.writeFileSync(mainPath, withBanner(canonical ? canonical.main : FALLBACK_MAIN_TSX)); L151: console.log(' ✓ Wrote main.tsx (owned by Your AI Firebase — the build discards edits to it)'); ... L154: const fbosDir = path.join(srcDir, 'your-ai-workflow-firebase-os'); L155: if (!fs.existsSync(fbosDir)) fs.mkdirSync(fbosDir, { recur

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L17

dist/vite.cjs.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/vite.cjs.js#virtual:string-array:round1View on unpkg

dist/server.cjs.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = your-ai-workflow-firebase-os@1.14.23 matchedIdentity = npm:[redacted]:1.14.23 similarity = 0.407 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server.cjs.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 39-79json

39 "server.template.ts",

40 "scripts/postinstall.js",

41 "scripts/patchViteConfig.js",

42 "src/index.css",

43 "src/pages/Home.tsx",

44 "src/microcomponents/registry.ts",

45 "src/configs/theme.config.ts",

46 "src/configs/forms/registry.ts",

47 "src/configs/forms/contactForm.config.ts",

48 "src/configs/forms/supportForm.config.ts",

49 "src/configs/pages/registry.ts"

50 ],

51 "scripts": {

52 "dev": "vite",

53 "test": "vitest run",

54 "test:watch": "vitest",

55 "build": "tsc -b && vite build",

56 "build:lib": "vite build",

57 "lint": "eslint .",

58 "preview": "vite preview",

59 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L59

60 "release": "npm version patch && npm run build:lib && npm pack",

61 "verify:dist": "node scripts/verifyDist.js",

62 "prepack": "node scripts/verifyDist.js"

63 },

64 "dependencies": {

65 "@eslint/js": "^9.39.4",

66 "@tailwindcss/vite": "^4.2.2",

67 "@types/node": "^24.12.0",

68 "@types/react": "^19.2.14",

69 "@types/react-dom": "^19.2.3",

70 "@vitejs/plugin-react": "^6.0.1",

71 "clsx": "^2.1.1",

72 "firebase": ">=10",

73 "framer-motion": "^12.38.0",

74 "fuse.js": "^7.3.0",

75 "iconoir": "^7.11.0",

76 "iconoir-react": "^7.11.0",

77 "lucide-react": "^1.7.0",

78 "react": ">=18",

79 "react-dom": ">=18",

dist/your-ai-workflow-firebase-os.cjs.jsView file

1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./chunk-CiTBaPhY.cjs`),t=require(`./ContactPopup-DiC2VtcP.cjs`),n=require(`./access-VS8lxzWe.cjs... L2: `);return a?null:(0,s.jsxs)(`div`,{className:`flex flex-col gap-2 min-w-0 max-w-full rounded-2xl border border-[var(--panel-border)] bg-[var(--panel-bg)] ${i?`px-4 py-3.5`:`px-5 py...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/your-ai-workflow-firebase-os.cjs.jsView on unpkg · L1

scripts/postinstall.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2/**

3 * your-ai-workflow-firebase-os postinstall script

4 *

5 * Runs automatically after `npm install your-ai-workflow-firebase-os`.

6 * Patches the consumer project so that <FirebaseOS /> renders correctly

7 * out of the box — no manual cleanup required.

8 *

9 * What it does:

10 * 1. Clears src/index.css and src/App.css to remove Vite default styling

11

dist/vite.cjs.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/vite.cjs.js#virtual:string-array:round1View on unpkg

dist/server.cjs.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = your-ai-workflow-firebase-os@1.14.23 matchedIdentity = npm:[redacted]:1.14.23 similarity = 0.407 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server.cjs.jsView on unpkg