registry / @byteplus/ark-cli / 1.0.25

@byteplus/ark-cli@1.0.25

BytePlus Ark command-line interface

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is an automatic install-time execution path that invokes an opaque remote native program to refresh agent skills. Integrity and HTTPS checks reduce tampering risk but do not establish the behavior of the downloaded binary.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall

Impact

The opaque binary can modify local CLI or agent integration state during installation.

Mechanism

Remote native binary download followed by automatic skill-refresh execution

AI rationale

Evidence

package.jsonscripts/postinstall.jsmanifest.jsonbin/arkcli-${platform}-${arch}${ext}~/.arkcli-bp

Network endpoints2

sf16-sg.tiktokcdn.comgithub.com/byteplus-sdk/ark-cli/releases/download/

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The postinstall hook downloads a platform binary and then executes it.
Installation automatically invokes the downloaded binary's +connect skill-refresh command, which may change local AI-agent integrations.
The binary is fetched from remote CDN or release URLs; its behavior is not available in this package source.

Evidence against

The installer checks the downloaded binary against a manifest SHA-256 digest.
The JavaScript installer restricts downloads to HTTPS and limits the GitHub fallback path.
No credential harvesting or data-exfiltration logic appears in the shipped JavaScript.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 20.4 KB of source

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

15"scripts": { "postinstall": "node scripts/postinstall.js" },

Medium

Suspicious Lifecycle Evidence

The postinstall hook downloads a platform binary and then executes it.

package.jsonView on unpkg · L15

scripts/postinstall.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/postinstall.js#virtual:normalized:round1View on unpkg

scripts/postinstall.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @byteplus/ark-cli@1.0.20 matchedIdentity = npm:QGJ5dGVwbHVzL2Fyay1jbGk:1.0.20 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall.jsView on unpkg

320async function downloadVerifiedBinary(sources, destination, expectedSHA) { const errors = []; for (const source of sources) { fs.rmSync(destination, { force: true }); try { console.log(`${PACKAGE_NAME}: downloading ${key} binary from ${source.kind}...`); await download(source.url, destination, source.kind); const actual = await sha256(destination); if (actual !== expectedSHA.toLowerCase()) { throw new Error(`sha256 mismatch (expected ${expectedSHA}, actual ${actual})`); } return source; } catch (err) { fs.rmSync(destination, {

Medium

Suspicious Lifecycle Evidence

The postinstall hook downloads a platform binary and then executes it.

scripts/postinstall.jsView on unpkg · L320

526let tty = null; try { tty = fs.openSync("/dev/tty", "r+"); } catch (_) { // A controlling terminal is optional; +connect is still non-interactive. } const stdio = tty === null ? "inherit" : ["ignore", tty, tty]; try { execFileSync(binPath, ["+connect", "--refresh"], { stdio });

Medium

manifest.jsonView file

14"darwin-arm64": { "kind": "cdn", "url": "https://sf16-sg.tiktokcdn.com/obj/eden-[redacted].0.25/arkcli-1.0.25-darwin-arm64", "sha256": "[redacted]", "fallback": { "kind": "github-release", "url": "https://github.com/byteplus-sdk/ark-cli/releases/download/v1.0.25/arkcli-1.0.25-darwin-arm64" } }

Medium

Ai Review Evidence

The binary is fetched from remote CDN or release URLs; its behavior is not available in this package source.

manifest.jsonView on unpkg · L14

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

15"scripts": { "postinstall": "node scripts/postinstall.js" },

Medium

Suspicious Lifecycle Evidence

The postinstall hook downloads a platform binary and then executes it.

package.jsonView on unpkg · L15

scripts/postinstall.js#virtual:normalized:round1View file

Findings

3 High7 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedscripts/postinstall.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltascripts/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumSuspicious Lifecycle Evidencepackage.json

MediumSuspicious Lifecycle Evidencescripts/postinstall.js

MediumAi Review Evidencescripts/postinstall.js

MediumAi Review Evidencemanifest.json

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @byteplus/ark-cli@1.0.25.

See all versions of @byteplus/ark-cli for other recorded verdicts.

Review the evidence and your use of @byteplus/ark-cli@1.0.25 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-04 04:41:07.351Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.