@alumbwe/anvil@1.0.41
A Terminal User Interface (TUI) package built with OpenTUI and React.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe automatic global install is an unexpected user-invoked side effect, so a warning is appropriate. The inspected source does not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user runs anvil without a usable Bun runtime, or invokes a bundled coding agent.
Impact
Global package state may change, and an agent can affect the project within its granted tools.
Mechanism
Automatic runtime installation and user-invoked coding-agent tools.
AI rationale
The automatic global install is an unexpected user-invoked side effect, so a warning is appropriate. The inspected source does not establish malicious behavior.
Evidence
bin/anvil.jssrc/agents/bundled-agents.generated.ts
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI launcher automatically runs a global npm installation of Bun when the user invokes anvil and Bun is unavailable.
- Bundled AI-agent definitions include tool-directed instructions, creating a user-project modification capability that warrants caution.
Evidence against
- package.json has no preinstall, install, or postinstall hook; the only lifecycle script is prepublishOnly.
- No runtime self-dependency, secret harvesting, covert exfiltration, remote payload loader, or foreign agent-control-surface mutation was found.
- Sensitive project files are explicitly filtered from agent reads.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
17 flagged · loading sourcebin/anvil.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @alumbwe/anvil@1.0.38
matchedIdentity = npm:QGFsdW1id2UvYW52aWw:1.0.38
similarity = 0.983
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/anvil.jsView on unpkg17L18: import { spawnSync } from 'child_process'
L19: import fs from 'fs'
High
5* Runs on plain Node.js (Bun is NOT required upfront) and works from cmd,
L6: * PowerShell and POSIX shells: npm generates a shim for each shell that all
L7: * execute this file with `node`.
High
99if (process.versions.bun) {
L100: await import(pathToFileURL(ENTRY).href)
L101: } else {
Findings
2 Critical11 High6 Medium8 Low
CriticalTrojan Source Unicodevendor/@anvil/sdk/dist/index.cjs
CriticalPrevious Version Dangerous Deltabin/anvil.js
HighChild Processbin/anvil.js
HighShellbin/anvil.js
HighObfuscated Payload Loadervendor/@anvil/sdk/dist/index.cjs
HighRemote Agent Bridgevendor/@anvil/sdk/dist/index.cjs
HighSemantic Analysis Limitedsrc/hooks/use-gravity-ad.ts#virtual:normalized:round1
HighKnown Malware Source Similaritysrc/utils/terminal-command-broker.ts
HighKnown Malware Source Similaritysrc/utils/clipboard.ts
HighKnown Malware Source Similaritysrc/utils/terminal-watchdog.ts
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @alumbwe/anvil@1.0.41.
See all versions of @alumbwe/anvil for other recorded verdicts.
- Review the evidence and your use of @alumbwe/anvil@1.0.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.