@byteplus/ark-cli@1.0.24: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@byteplus/ark-cli@1.0.24: AI-agent control-surface risk | LPM Firewall

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

15"scripts": { "postinstall": "node scripts/postinstall.js" },

High

Suspicious Lifecycle Evidence

The manifest runs scripts/postinstall.js automatically after npm installation.

package.jsonView on unpkg · L15

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/postinstall.js#virtual:normalized:round1View on unpkg

scripts/postinstall.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @byteplus/ark-cli@1.0.20 matchedIdentity = npm:QGJ5dGVwbHVzL2Fyay1jbGk:1.0.20 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall.jsView on unpkg

367fs.mkdirSync(binDir, { recursive: true }); recoverInterruptedInstall(binPath, backupPath); let installedFrom; try { const sources = [{ kind: "cdn", url: entry.url }]; if (!isNonStable) { sources.push({ kind: "github-release", url: entry.fallback.url }); } installedFrom = await downloadVerifiedBinary( sources, tempPath, entry.sha256, );

High

Suspicious Lifecycle Evidence

The install hook downloads a native binary, verifies it, and places it under bin.

scripts/postinstall.jsView on unpkg · L367

513let tty = null; try { tty = fs.openSync("/dev/tty", "r+"); } catch (_) { // A controlling terminal is optional; +connect is still non-interactive. } const stdio = tty === null ? "inherit" : ["ignore", tty, tty]; try { execFileSync(binPath, ["+connect", "--refresh"], { stdio }); } catch (err) { const message = `${PACKAGE_NAME}: Skill sync skipped (${err.message || err}). ` + "Run `arkcli +connect --refresh` to retry.";

High

Suspicious Lifecycle Evidence

manifest.jsonView file

14"darwin-arm64": { "kind": "cdn", "url": "https://sf16-sg.tiktokcdn.com/obj/eden-[redacted].0.24/arkcli-1.0.24-darwin-arm64", "sha256": "[redacted]", "fallback": { "kind": "github-release", "url": "https://github.com/byteplus-sdk/ark-cli/releases/download/v1.0.24/arkcli-1.0.24-darwin-arm64" } }

High

Suspicious Lifecycle Evidence

The install hook downloads a native binary, verifies it, and places it under bin.

manifest.jsonView on unpkg · L14

Lines 493-533javascript

493 );

494 } else if (automaticSupported === false) {

495 writeInstallNotice(`${PACKAGE_NAME}: update notices/manual update remain active by default; silent automatic update is not enabled for this product and platform.`);

496 } else if (enrollmentPhase === "fresh_pending") {

497 writeInstallNotice(`${PACKAGE_NAME}: silent stable patch updates are enabled by default for this new install; the first successful eligible human business command may schedule a background update. Disable with \`arkcli config set update.mode disabled\`.`);

498 } else if (enrollmentPhase === "manual_reinstall_suspended") {

499 writeInstallNotice(`${PACKAGE_NAME}: a manual npm install or version change was detected, so silent automatic updates are paused. Keep this version with \`arkcli config set update.mode disabled\`; resume with \`arkcli config set update.mode automatic\`.`);

500 } else if (enrollmentPhase === "disabled" || mode === "disabled" || mode === "notify") {

501 if (mode === "notify") {

502 writeInstallNotice(`${PACKAGE_NAME}: the legacy notify-only update policy was preserved; silent automatic update is not active. Resume with \`arkcli config set update.mode automatic\`.`);

503 } else {

504 writeInstallNotice(`${PACKAGE_NAME}: the disabled update policy was preserved; update notices remain active and silent automatic update is not active.`);

505 }

506 } else if (enrollmentPhase === "grace_completed") {

507 writeInstallNotice(`${PACKAGE_NAME}: a legacy first-run grace state was detected; the next successful eligible human business command may activate consent and schedule a background update. Disable with \`arkcli config set update.mode disabled\`.`);

508 } else if (enrollmentPhase === "automatic_active") {

509 writeInstallNotice(`${PACKAGE_NAME}: silent stable patch update consent remains active for this exact install. Disable with \`arkcli config set update.mode disabled\`.`);

510 }

511 }

512

513 let tty = null;

514 try {

515 tty = fs.openSync("/dev/tty", "r+");

516 } catch (_) {

517 // A controlling terminal is optional; +connect is still non-interactive.

518 }

519 const stdio = tty === null ? "inherit" : ["ignore", tty, tty];

520 try {

521 execFileSync(binPath, ["+connect", "--refresh"], { stdio });

522 } catch (err) {

523 const message =

524 `${PACKAGE_NAME}: Skill sync skipped (${err.message || err}). ` +

High

Suspicious Lifecycle Evidence

The install hook executes that downloaded binary with +connect --refresh even when no terminal is available.

scripts/postinstall.jsView on unpkg · L513

525 "Run `arkcli +connect --refresh` to retry.";

526 if (tty === null) {

527 console.warn(message);

528 } else {

529 try {

530 fs.writeSync(tty, `${message}\n`);

531 } catch (_) {}

532 }

533 } finally {