Loading npm security reports…

@capgo/cli@8.39.0: Clean npm security report (Allow) | LPM Firewall

registry / @capgo/cli / 8.39.0

@capgo/cli@8.39.0

A CLI to upload to capgo servers

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No malicious install-time or import-time attack surface was confirmed. The package is a user-invoked Capgo CLI with authenticated cloud, build, support-upload, and optional MCP functionality.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Running Capgo CLI commands, including the explicit mcp command.

Impact

Normal CLI operations may access supplied credentials, invoke build tools, or perform requested cloud actions.

Mechanism

User-directed Capgo cloud and project automation.

Rationale

Scanner findings conflated bundled dependency primitives with package behavior: source inspection found no lifecycle hook, decoded remote payload execution, credential exfiltration, stealth persistence, or unconsented agent-control mutation. The capability-heavy operations are exposed through explicit CLI commands and align with the package's stated purpose.

Evidence

package.jsondist/index.jsdist/src/sdk.js

Network endpoints3

api.capgo.appfiles.capgo.appconsole.capgo.app

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence with false-positive risk.

Source & flagged code

18 flagged · loading source

dist/src/sdk.jsView file

1import{createRequire as l20}from"node:module";var module={exports:{}};var h20=Object.create;var{getPrototypeOf:b20,defineProperty:PF,getOwnPropertyNames:tu}=Object;var Rw=Object.pr... L2: `)}var Eq="\x1B",qf="",XR0=39,Iw="\x07",zf="[",YR0="]",Hf="m",Tw,Ff,Gf=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let Z=0;Z<X;Z++)J[Z]!==Q[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function B1($){return $==... L9: `).map((F,G,U)=>{let W=Y?Y(F,G):F;return G===0?`${Q}${W}`:G===U.length-1?`${X}${W}`:`${J}${W}`}).join(` ... L14: `).slice(Y);this.output.write(Z.join(` L15: `)),this._prevFrame=$;return}}this.output.write(nD.e

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/src/sdk.jsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @capgo/cli@8.37.2 matchedIdentity = npm:QGNhcGdvL2NsaQ:8.37.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/sdk.jsView on unpkg

259L260: see https://github.com/jprichardson/node-fs-extra/issues/269`);VU.checkPaths($,D,"copy",(X,Y)=>{if(X)return Q(X);let{srcStat:Z,destStat:F}=Y;VU.checkParentPaths($,Z,D,"copy",(G)=>{... L261: `)}G70.check=be0;async function ge0($){var D;if((D=$.app.extConfig.server)===null||D===void 0?void 0:D.url)return null;if(["",".","..","../","./"].includes($.app.webDir))return`"${...

High

Child Process

Package source references child process execution.

dist/src/sdk.jsView on unpkg · L259

119L120: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:Q,destStat:X}=await fG.checkPaths($,D,"copy",J);if(await fG.checkParentPath... L121: L122: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:Q,destStat:X}=bG.checkPathsSync($,D,"copy",J);if(bG.checkParentPathsSync($,... L123: `,finalEOL:J=!0,replacer:Q=null,spaces:X}={}){let Y=J?D:"",Z=JSON.stringify($,Q,X);if(Z===void 0)throw TypeError(`Converting ${typeof $} value to JSON is not supported`);return Z.r... L124: `)];for(let[U,W]of G.entries()){if(Q+=W,PH.has(W)){let{groups:z}=new RegExp("(?:\\[(?<code>\\d+)m|\\]8;;(?<uri>.*)\x07)").exec(G.slice(U).join(""))||{groups:{}};if(z.code!==void 0)... ... L132: `);return q=Math

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/sdk.jsView on unpkg · L119

117`)}function Eh0($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function Ah0(){return process.env.DEBUG}function jh0($){$.inspectOpts={};let D=Object.keys(op.inspectOpts)... L118: `).map((D)=>D.trim()).join(" ")};rp.O=function($){return this.inspectOpts.colors=this.useColors,LH.inspect($,this.inspectOpts)}});var NH=E((rv1,UR)=>{if(typeof process>"u"||process... L119: L120: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:Q,destStat:X}=await fG.checkPaths($,D,"copy",J);if(await fG.checkParentPath... L121: L122: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:Q,destStat:X}=bG.checkPathsSync($,D,"copy",J);if(bG.checkParentPathsSync($,... L123: `,finalEOL:J=!0,repl

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/src/sdk.jsView on unpkg · L117

111`)}),D}});var un=E((ox1,yn)=>{var A7=D0("constants"),vu0=process.cwd,oz=null,_u0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=vu0.call(proces... L112: GFS4: `),console.error($)};if(!g$[vD]){if(g2=global[vD]||[],cn(g$,g2),g$.close=function($){function D(J,Q){return $.call(g$,J,function(X){if(!X)dn();if(typeof Q==="function")Q.appl... L113: `)}}});var xX=s(()=>{up()});async function KH($){try{let J=`https://registry.npmjs.org/${encodeURIComponent($.toLowerCase())}`,Q=await fetch(J,{headers:{accept:"application/vnd.npm...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/src/sdk.jsView on unpkg · L111

1import{createRequire as l20}from"node:module";var module={exports:{}};var h20=Object.create;var{getPrototypeOf:b20,defineProperty:PF,getOwnPropertyNames:tu}=Object;var Rw=Object.pr... L2: `)}var Eq="\x1B",qf="",XR0=39,Iw="\x07",zf="[",YR0="]",Hf="m",Tw,Ff,Gf=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let Z=0;Z<X;Z++)J[Z]!==Q[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function B1($){return $==... L9: `).map((F,G,U)=>{let W=Y?Y(F,G):F;return G===0?`${Q}${W}`:G===U.length-1?`${X}${W}`:`${J}${W}`}).join(` ... L14: `).slice(Y);this.output.write(Z.join(` L15: `)),this._prevFrame=$;return}}this.output.write(nD.e

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sdk.jsView on unpkg · L1

dist/index.jsView file

5`){if(Y)$+=TNA("");let z=J?PNA(J):void 0;if(J&&z)$+=_NA(z)}else if(U===` L6: `){if(J&&PNA(J))$+=_NA(J);if(Y)$+=TNA(Y)}}return $},kDQ;var H4A=mA(()=>{X4A();W4A=`${PDQ}8;;`,wNA=new RegExp(`(?:\\${SNA}(?<code>\\d+)m|\\${W4A}(?<uri>.*)${K4A})`,"y"),kDQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}${W}`:`${B}${W}`}).join(` ... L15: `).slice(Y);this.outpu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L5

625contains invisible/control Unicode U+200D (zero width joiner) `)}),this}_outputHelpIfRequested(A){let Q=this._getHelpOption();if(Q&&A.find(($)=>Q.is($)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function sNA(A){return A.map((Q)=>{if(!Q.startsWith("--inspect"))return Q;l

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/index.jsView on unpkg · L625

5Trigger-reachable chain: manifest.main -> dist/index.js L5: `){if(Y)$+=TNA("");let z=J?PNA(J):void 0;if(J&&z)$+=_NA(z)}else if(U===` L6: `){if(J&&PNA(J))$+=_NA(J);if(Y)$+=TNA(Y)}}return $},kDQ;var H4A=mA(()=>{X4A();W4A=`${PDQ}8;;`,wNA=new RegExp(`(?:\\${SNA}(?<code>\\d+)m|\\${W4A}(?<uri>.*)${K4A})`,"y"),kDQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}$

Source & flagged code

18 flagged

dist/src/sdk.jsView file

1import{createRequire as l20}from"node:module";var module={exports:{}};var h20=Object.create;var{getPrototypeOf:b20,defineProperty:PF,getOwnPropertyNames:tu}=Object;var Rw=Object.pr... L2: `)}var Eq="\x1B",qf="",XR0=39,Iw="\x07",zf="[",YR0="]",Hf="m",Tw,Ff,Gf=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let Z=0;Z<X;Z++)J[Z]!==Q[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function B1($){return $==... L9: `).map((F,G,U)=>{let W=Y?Y(F,G):F;return G===0?`${Q}${W}`:G===U.length-1?`${X}${W}`:`${J}${W}`}).join(` ... L14: `).slice(Y);this.output.write(Z.join(` L15: `)),this._prevFrame=$;return}}this.output.write(nD.e

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/src/sdk.jsView on unpkg · L1

•matchType = previous_version_dangerous_delta matchedPackage = @capgo/cli@8.37.2 matchedIdentity = npm:QGNhcGdvL2NsaQ:8.37.2 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/sdk.jsView on unpkg

259L260: see https://github.com/jprichardson/node-fs-extra/issues/269`);VU.checkPaths($,D,"copy",(X,Y)=>{if(X)return Q(X);let{srcStat:Z,destStat:F}=Y;VU.checkParentPaths($,Z,D,"copy",(G)=>{... L261: `)}G70.check=be0;async function ge0($){var D;if((D=$.app.extConfig.server)===null||D===void 0?void 0:D.url)return null;if(["",".","..","../","./"].includes($.app.webDir))return`"${...

High

Child Process

Package source references child process execution.

dist/src/sdk.jsView on unpkg · L259

119L120: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:Q,destStat:X}=await fG.checkPaths($,D,"copy",J);if(await fG.checkParentPath... L121: L122: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:Q,destStat:X}=bG.checkPathsSync($,D,"copy",J);if(bG.checkParentPathsSync($,... L123: `,finalEOL:J=!0,replacer:Q=null,spaces:X}={}){let Y=J?D:"",Z=JSON.stringify($,Q,X);if(Z===void 0)throw TypeError(`Converting ${typeof $} value to JSON is not supported`);return Z.r... L124: `)];for(let[U,W]of G.entries()){if(Q+=W,PH.has(W)){let{groups:z}=new RegExp("(?:\\[(?<code>\\d+)m|\\]8;;(?<uri>.*)\x07)").exec(G.slice(U).join(""))||{groups:{}};if(z.code!==void 0)... ... L132: `);return q=Math

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/sdk.jsView on unpkg · L119

117`)}function Eh0($){if($)process.env.DEBUG=$;else delete process.env.DEBUG}function Ah0(){return process.env.DEBUG}function jh0($){$.inspectOpts={};let D=Object.keys(op.inspectOpts)... L118: `).map((D)=>D.trim()).join(" ")};rp.O=function($){return this.inspectOpts.colors=this.useColors,LH.inspect($,this.inspectOpts)}});var NH=E((rv1,UR)=>{if(typeof process>"u"||process... L119: L120: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:Q,destStat:X}=await fG.checkPaths($,D,"copy",J);if(await fG.checkParentPath... L121: L122: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:Q,destStat:X}=bG.checkPathsSync($,D,"copy",J);if(bG.checkParentPathsSync($,... L123: `,finalEOL:J=!0,repl

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/src/sdk.jsView on unpkg · L117

111`)}),D}});var un=E((ox1,yn)=>{var A7=D0("constants"),vu0=process.cwd,oz=null,_u0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=vu0.call(proces... L112: GFS4: `),console.error($)};if(!g$[vD]){if(g2=global[vD]||[],cn(g$,g2),g$.close=function($){function D(J,Q){return $.call(g$,J,function(X){if(!X)dn();if(typeof Q==="function")Q.appl... L113: `)}}});var xX=s(()=>{up()});async function KH($){try{let J=`https://registry.npmjs.org/${encodeURIComponent($.toLowerCase())}`,Q=await fetch(J,{headers:{accept:"application/vnd.npm...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/src/sdk.jsView on unpkg · L111

1import{createRequire as l20}from"node:module";var module={exports:{}};var h20=Object.create;var{getPrototypeOf:b20,defineProperty:PF,getOwnPropertyNames:tu}=Object;var Rw=Object.pr... L2: `)}var Eq="\x1B",qf="",XR0=39,Iw="\x07",zf="[",YR0="]",Hf="m",Tw,Ff,Gf=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let Z=0;Z<X;Z++)J[Z]!==Q[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function B1($){return $==... L9: `).map((F,G,U)=>{let W=Y?Y(F,G):F;return G===0?`${Q}${W}`:G===U.length-1?`${X}${W}`:`${J}${W}`}).join(` ... L14: `).slice(Y);this.output.write(Z.join(` L15: `)),this._prevFrame=$;return}}this.output.write(nD.e

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sdk.jsView on unpkg · L1

dist/index.jsView file

5`){if(Y)$+=TNA("");let z=J?PNA(J):void 0;if(J&&z)$+=_NA(z)}else if(U===` L6: `){if(J&&PNA(J))$+=_NA(J);if(Y)$+=TNA(Y)}}return $},kDQ;var H4A=mA(()=>{X4A();W4A=`${PDQ}8;;`,wNA=new RegExp(`(?:\\${SNA}(?<code>\\d+)m|\\${W4A}(?<uri>.*)${K4A})`,"y"),kDQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}${W}`:`${B}${W}`}).join(` ... L15: `).slice(Y);this.outpu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L5

625contains invisible/control Unicode U+200D (zero width joiner) `)}),this}_outputHelpIfRequested(A){let Q=this._getHelpOption();if(Q&&A.find(($)=>Q.is($)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function sNA(A){return A.map((Q)=>{if(!Q.startsWith("--inspect"))return Q;l

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/index.jsView on unpkg · L625

5Trigger-reachable chain: manifest.main -> dist/index.js L5: `){if(Y)$+=TNA("");let z=J?PNA(J):void 0;if(J&&z)$+=_NA(z)}else if(U===` L6: `){if(J&&PNA(J))$+=_NA(J);if(Y)$+=TNA(Y)}}return $},kDQ;var H4A=mA(()=>{X4A();W4A=`${PDQ}8;;`,wNA=new RegExp(`(?:\\${SNA}(?<code>\\d+)m|\\${W4A}(?<uri>.*)${K4A})`,"y"),kDQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}$