registry / your-ai-workflow-firebase-os / 2.0.3

your-ai-workflow-firebase-os@2.0.3

Your AI Firebase — a complete Firebase-powered admin app in one React component.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

The postinstall hook is noisy but only scaffolds this package's own React and Vite app, and the inspected bundles do not harvest secrets or load a remote payload. There is no self-dependency, obfuscated installer, or unconsented write to a foreign AI-agent control surface.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall, or later use of the server and UI entrypoints by the app.

Impact

A consumer Vite project is rewritten to host this library. No credential theft, remote payload, or agent-control write was found.

Mechanism

The installer copies owned entry files and local config into the consumer project. The server validates Firebase tokens and calls the configured product APIs. Media helpers turn user video links into embed URLs.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

postinstall runs only for a consumer project that has src and is not this package itself, then scaffolds the library entry files, theme, Tailwind, and an empty Firebase .env template.
The bundled server checks Firebase ID tokens against Google's securetoken issuer. Schedule admin, media-kind, and the Vite validate chunk are local UI, embed URL, and config-discovery code with no install-time network or shell use.

Evidence against

Every install rewrites the consumer src/main.tsx and src/App.tsx and may edit package.json and vite.config.ts. Those writes stay inside the stated app scaffold and do not write agent instruction files or send credentials.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

Source & flagged code

10 flagged

package.jsonView file

Lines 39-79json

39 "server.template.ts",

40 "scripts/postinstall.js",

41 "scripts/patchViteConfig.js",

42 "src/index.css",

43 "src/pages/Home.tsx",

44 "src/microcomponents/registry.ts",

45 "src/configs/theme.config.ts",

46 "src/configs/forms/registry.ts",

47 "src/configs/forms/contactForm.config.ts",

48 "src/configs/forms/supportForm.config.ts",

49 "src/configs/pages/registry.ts"

50 ],

51 "scripts": {

52 "dev": "vite",

53 "test": "vitest run",

54 "test:watch": "vitest",

55 "build": "tsc -b && vite build",

56 "build:lib": "node scripts/writePackageExports.js && vite build",

57 "lint": "eslint .",

58 "preview": "vite preview",

59 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L59

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L59

60 "release": "npm version patch && npm run build:lib && npm pack",

61 "verify:dist": "node scripts/verifyDist.js",

62 "prepack": "node scripts/verifyDist.js",

63 "postinstall:content": "node scripts/dumpPostinstallContent.js"

64 },

65 "dependencies": {

66 "@eslint/js": "^9.39.4",

67 "@tailwindcss/vite": "^4.2.2",

68 "@types/node": "^24.12.0",

69 "@types/react": "^19.2.14",

70 "@types/react-dom": "^19.2.3",

71 "@vitejs/plugin-react": "^6.0.1",

72 "clsx": "^2.1.1",

73 "framer-motion": "^12.38.0",

74 "fuse.js": "^7.3.0",

75 "iconoir": "^7.11.0",

76 "iconoir-react": "^7.11.0",

77 "lucide-react": "^1.47.0",

78 "react-dropzone": "^15.0.0",

79 "react-international-phone": "^4.8.0",

dist/roles-DQUFFBQe.cjsView file

Lines 1-1javascript

1require(`./chunk-CiTBaPhY.cjs`);const e=require(`./PageTitle-CZhgmmDT.cjs`),t=require(`./TimeZoneField-qs7NPR30.cjs`),n=require(`./DashboardNav-CXa_ci-_.cjs`),r=require(

scripts/postinstall.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2/**

3 * your-ai-workflow-firebase-os postinstall script

4 *

5 * Runs automatically after `npm install your-ai-workflow-firebase-os`.

6 * Patches the consumer project so that <FirebaseOS /> renders correctly

7 * out of the box — no manual cleanup required.

8 *

9 * What it does:

10 * 1. Clears src/index.css and src/App.css to remove Vite default styling

dist/ScheduleAdmin-DwK36GAZ.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/ScheduleAdmin-DwK36GAZ.cjs#virtual:normalized:round1View on unpkg

dist/server.cjs.jsView file

•matchType = token_shingles matchedPackage = your-ai-workflow-firebase-os@1.14.68 matchedPath = dist/server.cjs.js matchedIdentity = npm:[redacted]:1.14.68 similarity = 1.000 shingleOverlap = 48 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/server.cjs.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = your-ai-workflow-firebase-os@1.14.67 matchedIdentity = npm:[redacted]:1.14.67 similarity = 0.407 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server.cjs.jsView on unpkg

dist/validate-CmC_tLK-.jsView file

•matchType = normalized_sha256 matchedPackage = your-ai-workflow-firebase-os@1.14.68 matchedPath = dist/validate-DHdK7h-c.js matchedIdentity = npm:[redacted]:1.14.68 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/validate-CmC_tLK-.jsView on unpkg

dist/mediaKind-D0MWyv6b.cjsView file

•matchType = normalized_sha256 matchedPackage = your-ai-workflow-firebase-os@1.14.68 matchedPath = dist/mediaKind-dk396a03.cjs matchedIdentity = npm:[redacted]:1.14.68 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mediaKind-D0MWyv6b.cjsView on unpkg

dist/mediaKind-DmKMsjeY.jsView file

•matchType = normalized_sha256 matchedPackage = your-ai-workflow-firebase-os@1.14.68 matchedPath = dist/mediaKind-De2Cx_kB.js matchedIdentity = npm:[redacted]:1.14.68 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/mediaKind-DmKMsjeY.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/roles-DQUFFBQe.cjsView file

1require(`./chunk-CiTBaPhY.cjs`);const e=require(`./PageTitle-CZhgmmDT.cjs`),t=require(`./TimeZoneField-qs7NPR30.cjs`),n=require(`./DashboardNav-CXa_ci-_.cjs`),r=require(`./verified...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/roles-DQUFFBQe.cjsView on unpkg · L1

Findings

1 Critical7 High5 Medium6 Low

CriticalAi Agent Control Hijackscripts/postinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limiteddist/ScheduleAdmin-DwK36GAZ.cjs#virtual:normalized:round1

HighKnown Malware Source Similaritydist/server.cjs.js

HighKnown Malware Source Similaritydist/validate-CmC_tLK-.js

HighKnown Malware Source Similaritydist/mediaKind-D0MWyv6b.cjs

HighKnown Malware Source Similaritydist/mediaKind-DmKMsjeY.js

HighPrevious Version Dangerous Deltadist/server.cjs.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/roles-DQUFFBQe.cjs

MediumNetwork

Affected versions and remediation

This report applies to your-ai-workflow-firebase-os@2.0.3.

See all versions of your-ai-workflow-firebase-os for other recorded verdicts.

Review the evidence and your use of your-ai-workflow-firebase-os@2.0.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-27 15:53:58.550Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.