Loading npm security reports…

your-ai-workflow-firebase-os@1.2.59: Malicious npm security | LPM Firewall

registry / your-ai-workflow-firebase-os / 1.2.59

your-ai-workflow-firebase-os@1.2.59

Your AI Firebase — a complete Firebase-powered admin app in one React component.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Installing the package automatically takes over multiple files in a consumer React/Vite project and adds AI-agent instructions at the project root. The package declares the resulting application entrypoints owned and subject to restoration by its build plugin.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs the postinstall lifecycle hook in a project with src/.

Impact

Existing application styles and entrypoints can be overwritten, build configuration and dependencies changed, and AI coding agents directed by package-authored rules.

Mechanism

Install-time consumer-project and AI-agent control-surface mutation.

Attack narrative

On npm installation, the postinstall script locates the consuming project, clears CSS, replaces App.tsx and main.tsx, adds dependencies and a Vite plugin, and writes GEMINI.md and AGENTS.md. The installed plugin is designed to keep those entrypoints canonical, making the package persistently control the consumer application and its AI-agent instructions without an explicit setup command.

Rationale

This is an unconsented postinstall mutation of both a broad consumer project and AI-agent control surfaces. The behavior is concrete and automatic, so it meets the install-hook abuse blocking threshold.

Evidence

package.jsonscripts/postinstall.jssrc/index.csssrc/App.csssrc/main.tsxGEMINI.mdAGENTS.mdvite.config.ts.env

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/your-ai-workflow-firebase-os.cjs.jsView file

1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./chunk-DYteiM-1.cjs`),t=require(`./ContactPopup-BykgWURi.cjs`),n=require(`./PhoneInputField-CQ7... L2: `);return o?null:(0,s.jsxs)(`div`,{className:`flex flex-col gap-2 min-w-0 max-w-full rounded-2xl border border-[var(--panel-border)] bg-[var(--panel-bg)] ${a?`px-4 py-3.5`:`px-5 py...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/your-ai-workflow-firebase-os.cjs.jsView on unpkg · L1

scripts/postinstall.jsView file

16* 3. Loads that plugin from the project's vite.config.ts, next to Tailwind. L17: * 4. Writes GEMINI.md / AGENTS.md: the contract the AI assistant works from. L18: */ ... L108: if (current.includes(CLEARED_MARKER)) continue; L109: fs.writeFileSync(filePath, `/* ${CLEARED_MARKER} postinstall */\n`); L110: console.log(` ✓ Cleared ${file} (was conflicting with your-ai-workflow-firebase-os styles)`); ... L143: const mainPath = path.join(srcDir, 'main.tsx'); L144: fs.writeFileSync(mainPath, withBanner(canonical ? canonical.main : FALLBACK_MAIN_TSX)); L145: console.log(' ✓ Wrote main.tsx (owned by Your AI Firebase — the build discards edits to it)'); ... L148: const fbosDir = path.join(srcDir, 'your-ai-workflow-firebase-os'); L149: if (!fs.existsSync(fbosDir)) fs.mkdirSync(fbosDir, { r

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L16

25Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, sensitive-file+network L25: // Walk up from node_modules/your-ai-workflow-firebase-os/scripts/ to find the consumer project root L26: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L27: // __dirname = <consumer>/node_modules/your-ai-workflow-firebase-os/scripts ... L34: // rewrite that project's files. L35: const initCwd = process.env.INIT_CWD; L36: const initIsConsumer = initCwd L37: && fs.existsSync(path.join(initCwd, 'package.json')) L38: && fs.existsSync(path.join(initCwd, 'node_modules', 'your-ai-workflow-firebase-os')); ... L49: try { L50: pkgJson = JSON.parse(fs.readFileSync(consumerPkg, 'utf8')); L51: } catch { ... L1109: tabName: 'Invoices',

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

scripts/postinstall.js

dist/your-ai-workflow-firebase-os.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/your-ai-workflow-firebase-os.cssView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 33-73json

33 "dist",

34 "scripts/postinstall.js",

35 "scripts/patchViteConfig.js",

36 "src/index.css",

37 "src/pages/Home.tsx",

38 "src/microcomponents/registry.ts",

39 "src/configs/theme.config.ts",

40 "src/configs/forms/registry.ts",

41 "src/configs/forms/contactForm.config.ts",

42 "src/configs/forms/supportForm.config.ts",

43 "src/configs/pages/registry.ts"

44 ],

45 "scripts": {

46 "dev": "vite",

47 "test": "vitest run",

48 "test:watch": "vitest",

49 "build": "tsc -b && vite build",

50 "build:lib": "vite build",

51 "lint": "eslint .",

52 "preview": "vite preview",

53 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 "release": "npm version patch && npm run build:lib && npm pack"

55 },

56 "dependencies": {

57 "@eslint/js": "^9.39.4",

58 "@tailwindcss/vite": "^4.2.2",

59 "@types/node": "^24.12.0",

60 "@types/react": "^19.2.14",

61 "@types/react-dom": "^19.2.3",

62 "@vitejs/plugin-react": "^6.0.1",

63 "clsx": "^2.1.1",

64 "firebase": ">=10",

65 "framer-motion": "^12.38.0",

66 "fuse.js": "^7.3.0",

67 "iconoir": "^7.11.0",

68 "iconoir-react": "^7.11.0",

69 "lucide-react": "^1.7.0",

70 "react": ">=18",

71 "react-dom": ">=18",

72 "react-dropzone": "^15.0.0",

73 "react-international-phone": "^4.8.0",

dist/your-ai-workflow-firebase-os.cjs.jsView file

Lines 1-21javascript

1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./chunk-DYteiM-1.cjs`),t=require(`./ContactPopup-BykgWURi.cjs`),n=require(`./PhoneInputField-CQ7ylxOC.cjs`);

scripts/postinstall.jsView file

Lines 1-45javascript

1#!/usr/bin/env node

2/**

3 * your-ai-workflow-firebase-os postinstall script

4 *

5 * Runs automatically after `npm install your-ai-workflow-firebase-os`.

6 * Patches the consumer project so that <FirebaseOS /> renders correctly

7 * out of the box — no manual cleanup required.

8 *

9 * What it does:

10 * 1. Clears src/index.css and src/App.css to remove Vite default styling

11

dist/your-ai-workflow-firebase-os.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/your-ai-workflow-firebase-os.cssView on unpkg