Loading npm security reports…

@capgo/cli@8.42.3: Clean npm security report (Allow) | LPM Firewall

registry / @capgo/cli / 8.42.3

@capgo/cli@8.42.3

A CLI to upload to capgo servers

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Network and file operations serve explicit Capgo CLI/SDK commands rather than install-time behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Explicit CLI or SDK invocation.

Impact

No unconsented execution, exfiltration, persistence, or AI-agent control-surface mutation confirmed.

Mechanism

User-invoked Capgo application-management operations.

Rationale

Direct inspection found a bundled Capgo CLI/SDK with no lifecycle scripts and no concrete malicious chain. Scanner hits stem from bundled libraries and expected user-invoked cloud-build functionality.

Evidence

package.jsondist/index.jsdist/src/sdk.jsdist/src/sdk.d.ts

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

Manifest exposes a CLI and SDK entrypoint with no npm lifecycle hook.
MCP integration is an explicit `capgo mcp` user command; its Claude config is documentation only.
The reported eval/base64 primitives are bundled dependency internals, not a fetched payload execution chain.

Source & flagged code

18 flagged · loading source

dist/src/sdk.jsView file

101`)};uS0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var Z;if(D.indexOf("{")===-1)Z=D.indexOf("[");else if(D.indexOf("... L102: `,D=D.substr(Z)}try{Y=JSON.parse(D)}catch(F){return P8.red("Error:")+" Not valid JSON!"}return X+=uS0.render(Y,J,Q),X}});var D2=E((Qc)=>{Object.defineProperty(Qc,"__esModule",{valu... L103: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function jx0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... ... L111: `)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error($)};if(

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/src/sdk.jsView on unpkg · L101

•matchType = previous_version_dangerous_delta matchedPackage = @capgo/cli@8.41.4 matchedIdentity = npm:QGNhcGdvL2NsaQ:8.41.4 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/sdk.jsView on unpkg

111`)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error($)};if(!m$[_D]){if(d2=global[_D]||[],on(m$,d2),m$.close=function($){function D(J,Q){return $.call(m$,J,function(X){if(!X)rn();if(typeof Q==="function")Q.appl... L113: `)}}});var vX=s(()=>{np()});async function HK($){try{let J=`https://registry.npmjs.org/${encodeURIComponent($.toLowerCase())}`,Q=await fetch(J,{headers:{accept:"application/vnd.npm...

High

Child Process

Package source references child process execution.

dist/src/sdk.jsView on unpkg · L111

101`)};uS0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var Z;if(D.indexOf("{")===-1)Z=D.indexOf("[");else if(D.indexOf("... L102: `,D=D.substr(Z)}try{Y=JSON.parse(D)}catch(F){return P8.red("Error:")+" Not valid JSON!"}return X+=uS0.render(Y,J,Q),X}});var D2=E((Qc)=>{Object.defineProperty(Qc,"__esModule",{valu... L103: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function jx0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... ... L110: L111: `)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/sdk.jsView on unpkg · L101

101`)};uS0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var Z;if(D.indexOf("{")===-1)Z=D.indexOf("[");else if(D.indexOf("... L102: `,D=D.substr(Z)}try{Y=JSON.parse(D)}catch(F){return P8.red("Error:")+" Not valid JSON!"}return X+=uS0.render(Y,J,Q),X}});var D2=E((Qc)=>{Object.defineProperty(Qc,"__esModule",{valu... L103: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function jx0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... L104: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var Y=!0,Z=!1,F;return{s:function(){J=J.call($)},n:function(){var U=J.next();return Y=U.done,U}... L105: `)}if(!D||typeof D!=="object")D={}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/src/sdk.jsView on unpkg · L101

111`)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error($)};if(!m$[_D]){if(d2=global[_D]||[],on(m$,d2),m$.close=function($){function D(J,Q){return $.call(m$,J,function(X){if(!X)rn();if(typeof Q==="function")Q.appl... L113: `)}}});var vX=s(()=>{np()});async function HK($){try{let J=`https://registry.npmjs.org/${encodeURIComponent($.toLowerCase())}`,Q=await fetch(J,{headers:{accept:"application/vnd.npm...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/src/sdk.jsView on unpkg · L111

1import{createRequire as DR0}from"node:module";var module={exports:{}};var o20=Object.create;var{getPrototypeOf:a20,defineProperty:CF,getOwnPropertyNames:Df}=Object;var Rw=Object.pr... L2: `)}var Eq="\x1B",Of="",LR0=39,Cw="\x07",Lf="[",MR0="]",Mf="m",Pw,zf,Kf=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let Z=0;Z<X;Z++)J[Z]!==Q[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function B1($){return $==... L9: `).map((F,G,U)=>{let W=Y?Y(F,G):F;return G===0?`${Q}${W}`:G===U.length-1?`${X}${W}`:`${J}${W}`}).join(` ... L14: `).slice(Y);this.output.write(Z.join(` L15: `)),this._prevFrame=$;return}}this.output.write(pD.e

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sdk.jsView on unpkg · L1

dist/index.jsView file

5`){if(Y)$+=zPA("");let z=J?UPA(J):void 0;if(J&&z)$+=DPA(z)}else if(U===` L6: `){if(J&&UPA(J))$+=DPA(J);if(Y)$+=zPA(Y)}}return $},pCQ;var U9A=dA(()=>{K9A();F9A=`${cCQ}8;;`,FPA=new RegExp(`(?:\\${IPA}(?<code>\\d+)m|\\${F9A}(?<uri>.*)${H9A})`,"y"),pCQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}${W}`:`${B}${W}`}).join(` ... L15: `).slice(Y);this.outpu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L5

1810contains invisible/control Unicode U+200D (zero width joiner) If you do not pass a repository name, this defaults to ${yCA} in the Cap-go org.`).action(W2Q);E6.command("star-all [repositories...]").description("⭐ Star all Capgo GitHub repositories with a small random delay between each request.\n\nIf

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/index.jsView on unpkg · L1810

5Trigger-reachable chain: manifest.main -> dist/index.js L5: `){if(Y)$+=zPA("");let z=J?UPA(J):void 0;if(J&&z)$+=DPA(z)}else if(U===` L6: `){if(J&&UPA(J))$+=DPA(J);if(Y)$+=zPA(Y)}}return $},pCQ;var U9A=dA(()=>{K9A();F9A=`${cCQ}8;;`,FPA=new RegExp(`(?:\\${IPA}(?<code>\\d+)m|\\${F9A}(?<uri>.*)${H9A})`,"y"),pCQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}$

Source & flagged code

18 flagged

dist/src/sdk.jsView file

101`)};uS0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var Z;if(D.indexOf("{")===-1)Z=D.indexOf("[");else if(D.indexOf("... L102: `,D=D.substr(Z)}try{Y=JSON.parse(D)}catch(F){return P8.red("Error:")+" Not valid JSON!"}return X+=uS0.render(Y,J,Q),X}});var D2=E((Qc)=>{Object.defineProperty(Qc,"__esModule",{valu... L103: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function jx0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... ... L111: `)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error($)};if(

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/src/sdk.jsView on unpkg · L101

•matchType = previous_version_dangerous_delta matchedPackage = @capgo/cli@8.41.4 matchedIdentity = npm:QGNhcGdvL2NsaQ:8.41.4 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/sdk.jsView on unpkg

111`)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error($)};if(!m$[_D]){if(d2=global[_D]||[],on(m$,d2),m$.close=function($){function D(J,Q){return $.call(m$,J,function(X){if(!X)rn();if(typeof Q==="function")Q.appl... L113: `)}}});var vX=s(()=>{np()});async function HK($){try{let J=`https://registry.npmjs.org/${encodeURIComponent($.toLowerCase())}`,Q=await fetch(J,{headers:{accept:"application/vnd.npm...

High

Child Process

Package source references child process execution.

dist/src/sdk.jsView on unpkg · L111

101`)};uS0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var Z;if(D.indexOf("{")===-1)Z=D.indexOf("[");else if(D.indexOf("... L102: `,D=D.substr(Z)}try{Y=JSON.parse(D)}catch(F){return P8.red("Error:")+" Not valid JSON!"}return X+=uS0.render(Y,J,Q),X}});var D2=E((Qc)=>{Object.defineProperty(Qc,"__esModule",{valu... L103: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function jx0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... ... L110: L111: `)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src/sdk.jsView on unpkg · L101

101`)};uS0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var Z;if(D.indexOf("{")===-1)Z=D.indexOf("[");else if(D.indexOf("... L102: `,D=D.substr(Z)}try{Y=JSON.parse(D)}catch(F){return P8.red("Error:")+" Not valid JSON!"}return X+=uS0.render(Y,J,Q),X}});var D2=E((Qc)=>{Object.defineProperty(Qc,"__esModule",{valu... L103: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function jx0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... L104: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var Y=!0,Z=!1,F;return{s:function(){J=J.call($)},n:function(){var U=J.next();return Y=U.done,U}... L105: `)}if(!D||typeof D!=="object")D={}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/src/sdk.jsView on unpkg · L101

111`)}),D}});var mn=E((cv1,gn)=>{var j7=D0("constants"),nu0=process.cwd,oz=null,pu0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!oz)oz=nu0.call(proces... L112: GFS4: `),console.error($)};if(!m$[_D]){if(d2=global[_D]||[],on(m$,d2),m$.close=function($){function D(J,Q){return $.call(m$,J,function(X){if(!X)rn();if(typeof Q==="function")Q.appl... L113: `)}}});var vX=s(()=>{np()});async function HK($){try{let J=`https://registry.npmjs.org/${encodeURIComponent($.toLowerCase())}`,Q=await fetch(J,{headers:{accept:"application/vnd.npm...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/src/sdk.jsView on unpkg · L111

1import{createRequire as DR0}from"node:module";var module={exports:{}};var o20=Object.create;var{getPrototypeOf:a20,defineProperty:CF,getOwnPropertyNames:Df}=Object;var Rw=Object.pr... L2: `)}var Eq="\x1B",Of="",LR0=39,Cw="\x07",Lf="[",MR0="]",Mf="m",Pw,zf,Kf=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let Z=0;Z<X;Z++)J[Z]!==Q[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function B1($){return $==... L9: `).map((F,G,U)=>{let W=Y?Y(F,G):F;return G===0?`${Q}${W}`:G===U.length-1?`${X}${W}`:`${J}${W}`}).join(` ... L14: `).slice(Y);this.output.write(Z.join(` L15: `)),this._prevFrame=$;return}}this.output.write(pD.e

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sdk.jsView on unpkg · L1

dist/index.jsView file

5`){if(Y)$+=zPA("");let z=J?UPA(J):void 0;if(J&&z)$+=DPA(z)}else if(U===` L6: `){if(J&&UPA(J))$+=DPA(J);if(Y)$+=zPA(Y)}}return $},pCQ;var U9A=dA(()=>{K9A();F9A=`${cCQ}8;;`,FPA=new RegExp(`(?:\\${IPA}(?<code>\\d+)m|\\${F9A}(?<uri>.*)${H9A})`,"y"),pCQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}${W}`:`${B}${W}`}).join(` ... L15: `).slice(Y);this.outpu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L5

1810contains invisible/control Unicode U+200D (zero width joiner) If you do not pass a repository name, this defaults to ${yCA} in the Cap-go org.`).action(W2Q);E6.command("star-all [repositories...]").description("⭐ Star all Capgo GitHub repositories with a small random delay between each request.\n\nIf

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/index.jsView on unpkg · L1810

5Trigger-reachable chain: manifest.main -> dist/index.js L5: `){if(Y)$+=zPA("");let z=J?UPA(J):void 0;if(J&&z)$+=DPA(z)}else if(U===` L6: `){if(J&&UPA(J))$+=DPA(J);if(Y)$+=zPA(Y)}}return $},pCQ;var U9A=dA(()=>{K9A();F9A=`${cCQ}8;;`,FPA=new RegExp(`(?:\\${IPA}(?<code>\\d+)m|\\${F9A}(?<uri>.*)${H9A})`,"y"),pCQ=/\r?\n/}... L7: `),Y=0,Z=A;for(let G of J){if(Z<=G.length)break;Z-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),Z=Math.min(Z,J[Y].length)+Q;Z<0&&Y>0;)Y--,Z+=J[Y].length+1;for(;Z>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let Z=0;Z<J;Z++)B[Z]!==$[Z]&&Y.push(Z);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function w1(A){return A==... L10: `).map((X,G,K)=>{let W=Y?Y(X,G):X;return G===0?`${$}${W}`:G===K.length-1?`${J}$