registry / your-ai-workflow-firebase-os / 1.14.31
your-ai-workflow-firebase-os@1.14.31
Your AI Firebase — a complete Firebase-powered admin app in one React component.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has a real, automatic, persistent consumer-project mutation path, so it is unsafe to silently publish. It lacks the self-dependency, opaque payload, and install-time exfiltration needed for a malware block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm installation of the package in a Vite-style consumer project
Impact
Consumer source, dependency metadata, and build configuration can be changed without an explicit setup command.
Mechanism
postinstall project rewrite and forced Vite-plugin insertion
AI rationale
The package has a real, automatic, persistent consumer-project mutation path, so it is unsafe to silently publish. It lacks the self-dependency, opaque payload, and install-time exfiltration needed for a malware block.
Evidence
package.jsonscripts/postinstall.jsscripts/patchViteConfig.jssrc/index.csssrc/App.csssrc/main.tsxsrc/App.tsxsrc/your-ai-workflow-firebase-osvite.config.ts.env
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Installation automatically runs a package script.
- The install script clears consumer CSS and overwrites the consumer entry files.
- It modifies the consumer manifest and Vite configuration to load its own build plugin.
- Package comments discuss avoiding an AI-instruction-file block, which is reviewer-facing social engineering.
Evidence against
- No runtime dependency on the package itself is declared.
- The postinstall source does not perform network requests, start subprocesses, or read credentials.
- The observed network code is in the optional application server and targets Firebase, Stripe, and Resend functions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/lucide-react-DCNbQTK3.cjsView file
1const e=require(`./chunk-CiTBaPhY.cjs`);let t=require(`react`);var n=(...e)=>e.filter((e,t,n)=>!!e&&e.trim()!==``&&n.indexOf(e)===t).join(` `).trim(),ee=e=>e.replace(/([a-z0-9])([A...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/lucide-react-DCNbQTK3.cjsView on unpkg · L1Findings
1 Critical3 High5 Medium5 Low
CriticalAi Agent Control Hijackscripts/postinstall.js
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/your-ai-workflow-firebase-os.css
HighPrevious Version Dangerous Deltadist/server.cjs.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/lucide-react-DCNbQTK3.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to your-ai-workflow-firebase-os@1.14.31.
See all versions of your-ai-workflow-firebase-os for other recorded verdicts.
- Review the evidence and your use of your-ai-workflow-firebase-os@1.14.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.