your-ai-workflow-firebase-os@1.14.29
Your AI Firebase — a complete Firebase-powered admin app in one React component.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe lifecycle hook performs broad, unconsented consumer-project mutation and installs a plugin that discards later edits. It is a concrete install-hook abuse risk, though no self-dependency or confirmed data exfiltration was found.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
npm installation runs the postinstall hook; later Vite builds run the injected plugin.
Impact
Consumer application code, styling, dependencies, and build configuration can be changed or have user edits discarded.
Mechanism
Install-time consumer-project overwrite and build-time source restoration.
AI rationale
The lifecycle hook performs broad, unconsented consumer-project mutation and installs a plugin that discards later edits. It is a concrete install-hook abuse risk, though no self-dependency or confirmed data exfiltration was found.
Evidence
package.jsonscripts/postinstall.jsdist/vite.es.jssrc/index.csssrc/App.csssrc/main.tsxsrc/App.tsxsrc/your-ai-workflow-firebase-os/theme.csssrc/your-ai-workflow-firebase-os/configssrc/your-ai-workflow-firebase-os/microcomponentsvite.config.ts.env
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Its postinstall hook runs automatically on installation.
- The hook clears consumer CSS and overwrites consumer src/main.tsx and src/App.tsx.
- The hook modifies the consumer package.json and vite.config.ts without an explicit command.
- Its Vite plugin rewrites changed App.tsx and main.tsx during builds, making the takeover persistent.
- Postinstall comments mention prior blocking for prompt injection, which is reviewer-directed evasion context.
Evidence against
- No runtime self-dependency is declared.
- No child-process execution, remote payload loading, or credential exfiltration was found in the inspected lifecycle code.
- The inspected server endpoints target Firebase, AI providers, Stripe, and Resend features rather than an unexplained collection endpoint.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/your-ai-workflow-firebase-os.cjs.jsView file
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./chunk-CiTBaPhY.cjs`),t=require(`./ContactPopup-CeQ_CFd7.cjs`),n=require(`./verifiedAccount-BlE...
L2: `);return a?null:(0,s.jsxs)(`div`,{className:`flex flex-col gap-2 min-w-0 max-w-full rounded-2xl border border-[var(--panel-border)] bg-[var(--panel-bg)] ${i?`px-4 py-3.5`:`px-5 py...
Medium
Findings
1 Critical5 High5 Medium5 Low
CriticalAi Agent Control Hijackscripts/postinstall.js
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/vite.cjs.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/vite.cjs.js
HighKnown Malware Source Similaritydist/vite.es.js
HighPrevious Version Dangerous Deltadist/server.cjs.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/your-ai-workflow-firebase-os.cjs.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to your-ai-workflow-firebase-os@1.14.29.
See all versions of your-ai-workflow-firebase-os for other recorded verdicts.
- Review the evidence and your use of your-ai-workflow-firebase-os@1.14.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.