your-ai-workflow-firebase-os@1.6.5
Your AI Firebase — a complete Firebase-powered admin app in one React component.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a high-risk install hook that silently takes ownership of core consumer files and build configuration. It does not meet the policy's publish-block boundary for foreign or broad AI-agent control-surface mutation, but warrants a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm install runs the postinstall hook in a Vite/React consumer project.
Impact
Existing application source and CSS can be destroyed or replaced, and future builds load package-controlled code.
Mechanism
Automatic consumer-project rewriting and build-plugin injection.
AI rationale
This is a high-risk install hook that silently takes ownership of core consumer files and build configuration. It does not meet the policy's publish-block boundary for foreign or broad AI-agent control-surface mutation, but warrants a warning.
Evidence
scripts/postinstall.jsscripts/patchViteConfig.jsdist/vite.es.jssrc/index.csssrc/App.csssrc/main.tsxsrc/App.tsxpackage.jsonvite.config.ts.envsrc/your-ai-workflow-firebase-os
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The automatic postinstall hook rewrites consumer CSS, main.tsx, and App.tsx.
- The hook modifies the consumer package manifest and Vite configuration to load its build plugin.
- The installed Vite plugin restores package-controlled files when their contents differ.
Evidence against
- No package self-dependency or nested lifecycle chain is declared.
- No credential harvesting, shell execution, or install-time network request was found.
- The postinstall script explicitly avoids writing AI-agent instruction files.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/ContactPopup-C8ZOI56C.cjsView file
1const e=require(`./chunk-DYteiM-1.cjs`),t=require(`./assetUpload-yZ5bNDUH.cjs`);let n=require(`react`);n=e.i(n,1);let r=require(`firebase/firestore`),i=require(`react/jsx-runtime`)...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/ContactPopup-C8ZOI56C.cjsView on unpkg · L1Findings
1 Critical2 High5 Medium5 Low
CriticalAi Agent Control Hijackscripts/postinstall.js
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/your-ai-workflow-firebase-os.css
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/ContactPopup-C8ZOI56C.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to your-ai-workflow-firebase-os@1.6.5.
See all versions of your-ai-workflow-firebase-os for other recorded verdicts.
- Review the evidence and your use of your-ai-workflow-firebase-os@1.6.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.