your-ai-workflow-firebase-os@1.8.0
Your AI Firebase — a complete Firebase-powered admin app in one React component.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe source confirms automatic, broad consumer-project mutation and persistent build-plugin injection. It lacks the foreign AI-agent control-surface write or self-dependency chain required for a block under the stated policy.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm installation runs postinstall.
Impact
It can replace the host application's entry points and make later builds load package-controlled plugin code.
Mechanism
Postinstall rewrites consumer source, configuration, manifest, and environment-template files.
AI rationale
The source confirms automatic, broad consumer-project mutation and persistent build-plugin injection. It lacks the foreign AI-agent control-surface write or self-dependency chain required for a block under the stated policy.
Evidence
package.jsonscripts/postinstall.jsscripts/patchViteConfig.jssrc/index.csssrc/App.csssrc/main.tsxsrc/App.tsxsrc/your-ai-workflow-firebase-osvite.config.ts.env
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- An automatic postinstall hook runs on every npm installation.
- The hook overwrites consumer CSS and application entry files, including src/main.tsx and src/App.tsx.
- It modifies the consumer package manifest and Vite configuration to load its build plugin.
- It creates a consumer .env file and installs persistent project-level integration without an explicit user command.
- The install script contains review-oriented text about prompt injection and a prior block, which is reviewer manipulation.
Evidence against
- No install-time network request, shell command, credential harvesting, or external payload download was found.
- The server bundle's network use is for declared Firebase, Stripe, and Resend application features rather than the install hook.
- No runtime dependency on this package's own name was declared.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/assetUpload-BfoXOB7t.cjsView file
1const e=require(`./chunk-DYteiM-1.cjs`);let t=require(`react`);t=e.i(t,1);let n=require(`firebase/firestore`),r=require(`firebase/app`),i=require(`firebase/auth`),a=require(`fireba...
L2: [data-motion-pop-id="${c}"] {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/assetUpload-BfoXOB7t.cjsFindings
1 Critical3 High5 Medium5 Low
CriticalAi Agent Control Hijackscripts/postinstall.js
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/your-ai-workflow-firebase-os.css
HighPrevious Version Dangerous Deltadist/server.cjs.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/assetUpload-BfoXOB7t.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to your-ai-workflow-firebase-os@1.8.0.
See all versions of your-ai-workflow-firebase-os for other recorded verdicts.
- Review the evidence and your use of your-ai-workflow-firebase-os@1.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.