registry  /  @100xprompt/cli-darwin-x64  /  0.1.26

@100xprompt/cli-darwin-x64@0.1.26

AI Security Review

scanned 2h ago · by lpm-firewall-ai

On npm install, the manifest re-signs only `./bin/100xprompt` and suppresses signing failures. The bundled native CLI contains runtime networking and credential-related functionality, but readable evidence does not establish an install-time or unconsented malicious chain.

Static reason
One or more suspicious static signals were detected.
Trigger
npm installation for signature mutation; explicit CLI commands for runtime behavior
Impact
Package signature changes at install; runtime capability cannot be fully source-audited from the native binary.
Mechanism
postinstall re-signing of package-owned Mach-O; opaque bundled CLI runtime
Rationale
No concrete malicious install-time behavior was found, and the signing hook is package-aligned. However, the opaque native executable contains credential-sensitive and network-capable runtime logic that cannot be fully resolved through static source inspection.
Evidence
package.jsonbin/100xprompt
Network endpoints3
100xprompt.com/installproxy.100xprompt.com/modelsapi.github.com

Decision evidence

public snapshot
AI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • `package.json` runs a `postinstall` hook.
  • The hook removes and ad-hoc signs `bin/100xprompt`.
  • `bin/100xprompt` embeds commands that can invoke curl/bash during explicit upgrade flows.
  • The native binary contains credential-path matching and provider API configuration strings.
Evidence against
  • The postinstall hook targets only the package-owned binary and does not execute it.
  • No readable JavaScript sources, dependencies, or extra package files exist.
  • No source-backed install-time network request, credential exfiltration, persistence, destructive action, or foreign AI-agent config mutation was found.
  • The embedded executable identifies itself as `100xprompt` and contains product-aligned config paths and endpoints.
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.
Manifest
NoLicense
scanned 0 file(s), 0 B of source

Source & flagged code

3 flagged · loading source
package.jsonView file
•scripts.postinstall = codesign --remove-signature ./bin/100xprompt || true; codesign --sign - --force --preserve-metadata=entitlements,requirements,flags,runtime ./bin/100xprompt || true
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = codesign --remove-signature ./bin/100xprompt || true; codesign --sign - --force --preserve-metadata=entitlements,requirements,flags,runtime ./bin/100xprompt || true
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
bin/100xpromptView file
•path = bin/100xprompt kind = native_binary sizeBytes = 120600656 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

bin/100xpromptView on unpkg

Findings

1 High2 Medium2 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumShips Native Binarybin/100xprompt
LowScripts Present
LowNo License