@capgo/cli@8.92.1

⚠ Under review

A CLI to upload to capgo servers

AI Security Review

scanned 14h ago · by lpm-firewall-ai

The package source inspected did not establish malicious behavior. The unresolved source for a declared runtime dependency prevents a clean verdict, so manual review is appropriate.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The CLI loads a consumer's TypeScript configuration.

Impact

No concrete harmful effect was established, but this dependency path remains unverified.

Mechanism

The CLI transpiles the configuration and imports it; the dependency's behavior could not be verified from the available source snapshot.

AI rationale

The package source inspected did not establish malicious behavior. The unresolved source for a declared runtime dependency prevents a clean verdict, so manual review is appropriate.

Evidence

package.jsondist/index.js

Decision evidence

public snapshot

AI called this Manual Review at 83.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest declares TypeScript as a runtime dependency, and the CLI uses it to transpile and load consumer TypeScript configuration; the dependency review marks its source unresolved.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 6.11 MB of source, external domains: 127.0.0.1, accounts.google.com, androidpublisher.googleapis.com, api.appstoreconnect.apple.com, api.capgo.app, api.example.com, appstoreconnect.apple.com, capacitorjs.com, capgo.app, cli.github.com, console.capgo.app, developer.android.com, developer.apple.com, docs.npmjs.com, eu.i.posthog.com, files.capgo.app, github.com, json-schema.org, kit.svelte.dev, nextjs.org, oauth2.googleapis.com, plugin.capgo.app, rafeca.com, react.dev, registry.npmjs.org, s3.amazonaws.com, schemas.android.com, semver.org, support.google.com, v3-migration.vuejs.org, www.googleapis.com, www.w3.org

Source & flagged code

19 flagged

dist/updater-installed-worker.jsView file

90`)}),$}});var $H=P((z8D,DH)=>{var i0=o("constants"),wy=process.cwd,CF=null,vy=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!CF)CF=wy.call(process);r... L91: GFS4: `),console.error(D)};if(!gD[F$]){if(Z7=global[F$]||[],QH(gD,Z7),gD.close=function(D){function $(F,U){return D.call(gD,F,function(I){if(!I)YH();if(typeof U==="function")U.appl... L92: ${F.trim()}`:"";return`This Capgo API requires @capgo/cli@${$} or newer. You are using @capgo/cli@${D}.${U}

High

Child Process

Package source references child process execution.

dist/updater-installed-worker.jsView on unpkg · L90

164`)}catch{}}function q0(D,$={}){if(dj.CAPGO_SETUP_DEBUG!=="1")return;let F=Object.entries({thread:io,...$}).filter(([,U])=>U!==void 0).map(([U,I])=>`${U}=${I}`).join(" ");lj(`[setup... L165: `).slice(1).map((U)=>{let I=U.trim(),J=I.startsWith("at ")?I.slice(3):I,X=$,Y=J,Q=J.lastIndexOf(" (");if(Q!==-1&&J.endsWith(")"))X=J.slice(0,Q).trim()||$,Y=J.slice(Q+2,-1);else{let... L166: `)}var Da,vX,QA,BA=(D,$)=>{D.name="$ZodError",vX.value=$,Object.defineProperty(D,"issues",vX),vX.value=void 0,Object.defineProperty(D,"message",Da);let F=Object.getPrototypeOf(D);i...

High

Eval

Package source references dynamic code evaluation.

dist/updater-installed-worker.jsView on unpkg · L164

80`)};q_.renderString=function($,F,U){var I="",J;if(typeof $!=="string"||$==="")return"";if($[0]!=="{"&&$[0]!=="["){var X;if($.indexOf("{")===-1)X=$.indexOf("[");else if($.indexOf("[... L81: `,$=$.substr(X)}try{J=JSON.parse($)}catch(Y){return J0.red("Error:")+" Not valid JSON!"}return I+=q_.render(J,F,U),I}});var xU=P((LN)=>{Object.defineProperty(LN,"__esModule",{value... L82: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function s_(D,$){var F=D==null?null:typeof Symbol<"u"&&D[Symbol.iterator]||D["@@iterator"];if(F... ... L89: L90: `)}),$}});var $H=P((z8D,DH)=>{var i0=o("constants"),wy=process.cwd,CF=null,vy=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!CF)CF=wy.call(process);r... L91: GFS4: `),console.error(D)};if

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/updater-installed-worker.jsView on unpkg · L80

80`)};q_.renderString=function($,F,U){var I="",J;if(typeof $!=="string"||$==="")return"";if($[0]!=="{"&&$[0]!=="["){var X;if($.indexOf("{")===-1)X=$.indexOf("[");else if($.indexOf("[... L81: `,$=$.substr(X)}try{J=JSON.parse($)}catch(Y){return J0.red("Error:")+" Not valid JSON!"}return I+=q_.render(J,F,U),I}});var xU=P((LN)=>{Object.defineProperty(LN,"__esModule",{value... L82: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function s_(D,$){var F=D==null?null:typeof Symbol<"u"&&D[Symbol.iterator]||D["@@iterator"];if(F... L83: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var J=!0,X=!1,Y;return{s:function(){F=F.call(D)},n:function(){var B=F.next();return J=B.done,B}... L84: `)}if(!$||typeof $!=="object")$={};if($

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/updater-installed-worker.jsView on unpkg · L80

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/updater-installed-worker.jsView on unpkg · L90

74`)},info:(D,$)=>{XD.message(D,{...$,symbol:d("blue",gP)})},success:(D,$)=>{XD.message(D,{...$,symbol:d("green",xP)})},step:(D,$)=>{XD.message(D,{...$,symbol:d("green",uU)})},warn:(... L75: `)!=-1,U=this._styles,I=U.length;while(I--){var J=V6[U[I]];if($=J.open+$.replace(J.closeRe,J.open)+J.close,F)$=$.replace(oC,function(X){return J.close+X+J.open})}return $}GD.setThe... L76: `)===-1)return!0;if(F.inlineArrays&&!$){if(Array.isArray(D)&&s3(D[0],!0,F))return!0}return!1},Q_=function(D,$){if($.noColor)return D;if(typeof D==="string")return $.stringColor?J0[...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/updater-installed-worker.jsView on unpkg · L74

dist/onboarding-worker.jsView file

113`);return K=Math.max(K,N.length),N});for(let Z in Y)if($[Z])$[Z].push(...M[Z],...Array(K-M[Z].length).fill(""))}let G=$.map((Y,K)=>{if(K<D-1){let M=Mt(Y);return Y.map((Z,N)=>`${Z}$... L114: `)}wt.columnar=mLA});var Wt=i((qt)=>{Object.defineProperty(qt,"__esModule",{value:!0});qt.TERMINAL_INFO=qt.CI_ENVIRONMENT_VARIABLES_DETECTED=qt.CI_ENVIRONMENT_VARIABLES=void 0;var ... L115: Run the command with ${KqA.default.input("--help")} to see a list of arguments that must be provided.`),!1;return!0};_t.checkInteractive=MqA;var wqA=()=>Pt.TERMINAL_INFO.tty&&!Pt.T...

High

Shell

Package source references shell execution.

dist/onboarding-worker.jsView on unpkg · L113

dist/src/sdk.jsView file

74`)};OI0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var F;if(D.indexOf("{")===-1)F=D.indexOf("[");else if(D.indexOf("... L75: `,D=D.substr(F)}try{Y=JSON.parse(D)}catch(Z){return d8.red("Error:")+" Not valid JSON!"}return X+=OI0.render(Y,J,Q),X}});var vE=R((pm)=>{Object.defineProperty(pm,"__esModule",{valu... L76: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function QP0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... ... L84: `)}),D}});var _l=R((Sv$,Cl)=>{var v5=J0("constants"),Rk0=process.cwd,LH=null,Ak0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!LH)LH=Rk0.call(proces... L85: GFS4: `),console.error($)};if(!m1[k

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/src/sdk.jsView on unpkg · L74

1import{createRequire as jA0}from"node:module";var module={exports:{}};var VA0=Object.create;var{getPrototypeOf:LA0,defineProperty:xB,getOwnPropertyNames:NA0}=Object;var MA0=Object.... L2: `)}var zK="\x1B",jh="",mA0=39,hB="\x07",Th="[",dA0="]",Ih="m",gB,Eh,wh=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let F=0;F<X;F++)J[F]!==Q[F]&&Y.push(F);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function n0($){return $==... L9: `).map((Z,U,G)=>{let q=Y?Y(Z,U):Z;return U===0?`${Q}${q}`:U===G.length-1?`${X}${q}`:`${J}${q}`}).join(` ... L14: `).slice(Y);this.output.write(F.join(` L15: `)),this._prevFrame=$;return}}this.output.write(aD.e

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sdk.jsView on unpkg · L1

dist/index.jsView file

5`){if(Y)$+=biA("");let D=J?SiA(J):void 0;if(J&&D)$+=kiA(D)}else if(F===` L6: `){if(J&&SiA(J))$+=kiA(J);if(Y)$+=biA(Y)}}return $},v00;var T3A=b(()=>{j3A();P3A=`${k00}8;;`,TiA=new RegExp(`(?:\\${viA}(?<code>\\d+)m|\\${P3A}(?<uri>.*)${_3A})`,"y"),v00=/\r?\n/})... L7: `),Y=0,X=A;for(let G of J){if(X<=G.length)break;X-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),X=Math.min(X,J[Y].length)+Q;X<0&&Y>0;)Y--,X+=J[Y].length+1;for(;X>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let X=0;X<J;X++)B[X]!==$[X]&&Y.push(X);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function MB(A){return A==... L10: `).map((Z,G,K)=>{let W=Y?Y(Z,G):Z;return G===0?`${$}${W}`:G===K.length-1?`${J}${W}`:`${B}${W}`}).join(` ... L15: `).slice(Y);this.outpu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L5

1997contains invisible/control Unicode U+200D (zero width joiner) If you do not pass a repository name, this defaults to ${VfA} in the Cap-go org.`).action(khQ);a8.command("star-all [repositories...]").description("⭐ Star all Capgo GitHub repositories with a small random delay between each request.\n\nIf

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/index.jsView on unpkg · L1997

5Trigger-reachable chain: manifest.main -> dist/index.js L5: `){if(Y)$+=biA("");let D=J?SiA(J):void 0;if(J&&D)$+=kiA(D)}else if(F===` L6: `){if(J&&SiA(J))$+=kiA(J);if(Y)$+=biA(Y)}}return $},v00;var T3A=b(()=>{j3A();P3A=`${k00}8;;`,TiA=new RegExp(`(?:\\${viA}(?<code>\\d+)m|\\${P3A}(?<uri>.*)${_3A})`,"y"),v00=/\r?\n/})... L7: `),Y=0,X=A;for(let G of J){if(X<=G.length)break;X-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),X=Math.min(X,J[Y].length)+Q;X<0&&Y>0;)Y--,X+=J[Y].length+1;for(;X>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let X=0;X<J;X++)B[X]!==$[X]&&Y.push(X);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function MB(A){return A==... L10: `).map((Z,G,K)=>{let W=Y?Y(Z,G):Z;return G===0?`${$}${W}`:G===K.length-1?`${J}$

Source & flagged code

19 flagged · loading source

dist/updater-installed-worker.jsView file

High

Child Process

Package source references child process execution.

dist/updater-installed-worker.jsView on unpkg · L90

High

Eval

Package source references dynamic code evaluation.

dist/updater-installed-worker.jsView on unpkg · L164

Findings

4 Critical11 High6 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalRemote Asset Decode Executedist/src/sdk.js

CriticalTrojan Source Unicodedist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

HighChild Processdist/updater-installed-worker.js

HighShelldist/onboarding-worker.js

HighEvaldist/updater-installed-worker.js

HighSame File Env Network Executiondist/updater-installed-worker.js

HighCredential Redirect Persistencedist/index.js

HighCommand Output Exfiltrationdist/updater-installed-worker.js

HighObfuscated Payload Loaderdist/updater-installed-worker.js

Affected versions and remediation

This report applies to @capgo/cli@8.92.1.

See all versions of @capgo/cli for other recorded verdicts.

Review the evidence and your use of @capgo/cli@8.92.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 14:44:52.273Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code