@ansstory/hias
CLI scaffolding tool with project templates and component generators for Vue/React/uni-app
This report shows the evidence for @ansstory/hias@1.0.31. 2 of 6 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiAlthough its automatic hook only initializes package-owned configuration, the package contains a direct, functional third-party entitlement and gate-bypass capability. That concrete tampering behavior warrants blocking publication.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Run the hias gitlens activator command.
Impact
GitLens installations can be changed to grant Enterprise-like access or disable permission gates.
Mechanism
Third-party extension binary modification for entitlement bypass.
Attack narrative
The package registers a GitLens command whose activator finds installed GitLens extension files and rewrites them. Its replacement rules turn Community and Pro checks into Enterprise checks, and another routine replaces a graph permission condition with a constant false value. These are deliberate modifications of a third-party extension to bypass controls, not ordinary scaffolding behavior.
AI rationale
Although its automatic hook only initializes package-owned configuration, the package contains a direct, functional third-party entitlement and gate-bypass capability. That concrete tampering behavior warrants blocking publication.
Evidence
dist/index.js~/.vscode/extensions/eamodio.gitlens-*/dist/gitlens.js~/.vscode/extensions/eamodio.gitlens-*/dist/browser/gitlens.js~/.vscode/extensions/eamodio.gitlens-*/dist/webviews/graph.js
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The CLI exposes a GitLens action that dispatches an activator routine.
- The activator overwrites GitLens extension files to convert Community or Pro checks into Enterprise checks.
- It also replaces a GitLens permission gate with an unconditional false value and saves the altered file.
Evidence against
- The postinstall hook creates only the package's own configuration directory; it does not invoke the GitLens activator.
- The extension tampering is reached through an explicit CLI command rather than automatically during installation.
- No credential collection or secret exfiltration was found in the inspected package-specific code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./dist/index.js global-config
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./dist/index.js global-config
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
78\v\f\r\x1B !"#\xA5%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}\u203E\x7F\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\u...
L79: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\xA5]^_\`abcdefghijklmnopqrstuvwxyz{|}\u203E\x7F\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uFFFD\uF...
L80: `;ue.DEFAULT_CONTENT_TYPE="application/octet-stream";ue.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=v6.prototype.append.bind(this);if((typeo...
...
L90: `;let d=rCe.default(a);a.write(`${c}\r
L91: `);let{statusCode:m,buffered:h}=yield d;if(m===200){if(t.once("socket",nCe),r.secureEndpoint){dl("Upgrading socket connection to TLS");let b=r.servername||r.host;return gL.default.
Findings
1 Critical7 High5 Medium7 Low
CriticalAi Agent Control Hijackdist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Fingerprint Signaturedist/index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @ansstory/hias@1.0.31.
The versions list below shows the verdict for each recorded version.
- Avoid installing @ansstory/hias@1.0.31. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.