@capgo/cli@8.93.0

⚠ Under review

A CLI to upload to capgo servers

AI Security Review

scanned 7h ago · by lpm-firewall-ai

The inspected excerpts do not establish malicious behavior. The declared TypeScript runtime dependency is unresolved in the available source snapshot, so the dependency review policy requires manual review rather than a clean verdict.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Runtime use of the SDK path that loads a TypeScript module.

Impact

The unresolved dependency prevents ruling out behavior in that dependency; no harmful behavior was confirmed.

Mechanism

The SDK dynamically imports a module resolved from a supplied path; the TypeScript dependency snapshot is unavailable for inspection.

AI rationale

Evidence

package.jsondist/src/sdk.js

Decision evidence

public snapshot

AI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json declares TypeScript 6.0.3 as a runtime dependency, but the available dependency snapshot is unresolved.
The SDK dynamically imports a TypeScript module resolved from a supplied path, so the unavailable dependency code is relevant to runtime review.

Evidence against

The inspected SDK excerpt shows event telemetry sent to the Capgo API with a Capgo API key; it does not establish credential theft or an unrelated recipient.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 6.12 MB of source, external domains: 127.0.0.1, accounts.google.com, androidpublisher.googleapis.com, api.appstoreconnect.apple.com, api.capgo.app, api.example.com, appstoreconnect.apple.com, capacitorjs.com, capgo.app, cli.github.com, console.capgo.app, developer.android.com, developer.apple.com, docs.npmjs.com, eu.i.posthog.com, files.capgo.app, github.com, json-schema.org, kit.svelte.dev, nextjs.org, oauth2.googleapis.com, plugin.capgo.app, rafeca.com, react.dev, registry.npmjs.org, s3.amazonaws.com, schemas.android.com, semver.org, support.google.com, v3-migration.vuejs.org, www.googleapis.com, www.w3.org

Source & flagged code

19 flagged

dist/updater-installed-worker.jsView file

90`)}),$}});var UH=P((R8D,IH)=>{var d0=o("constants"),zn=process.cwd,_F=null,wn=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!_F)_F=zn.call(process);r... L91: GFS4: `),console.error(D)};if(!xD[F$]){if(VU=global[F$]||[],KH(xD,VU),xD.close=function(D){function $(F,U){return D.call(xD,F,function(I){if(!I)qH();if(typeof U==="function")U.appl... L92: ${F.trim()}`:"";return`This Capgo API requires @capgo/cli@${$} or newer. You are using @capgo/cli@${D}.${U}

High

Child Process

Package source references child process execution.

dist/updater-installed-worker.jsView on unpkg · L90

164`)}catch{}}function K0(D,$={}){if(pj.CAPGO_SETUP_DEBUG!=="1")return;let F=Object.entries({thread:io,...$}).filter(([,U])=>U!==void 0).map(([U,I])=>`${U}=${I}`).join(" ");rj(`[setup... L165: `).slice(1).map((U)=>{let I=U.trim(),J=I.startsWith("at ")?I.slice(3):I,X=$,Y=J,Q=J.lastIndexOf(" (");if(Q!==-1&&J.endsWith(")"))X=J.slice(0,Q).trim()||$,Y=J.slice(Q+2,-1);else{let... L166: `)}var Da,ZX,KV,EV=(D,$)=>{D.name="$ZodError",ZX.value=$,Object.defineProperty(D,"issues",ZX),ZX.value=void 0,Object.defineProperty(D,"message",Da);let F=Object.getPrototypeOf(D);i...

High

Eval

Package source references dynamic code evaluation.

dist/updater-installed-worker.jsView on unpkg · L164

80`)};q_.renderString=function($,F,U){var I="",J;if(typeof $!=="string"||$==="")return"";if($[0]!=="{"&&$[0]!=="["){var X;if($.indexOf("{")===-1)X=$.indexOf("[");else if($.indexOf("[... L81: `,$=$.substr(X)}try{J=JSON.parse($)}catch(Y){return X0.red("Error:")+" Not valid JSON!"}return I+=q_.render(J,F,U),I}});var y7=P((zN)=>{Object.defineProperty(zN,"__esModule",{value... L82: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function s_(D,$){var F=D==null?null:typeof Symbol<"u"&&D[Symbol.iterator]||D["@@iterator"];if(F... ... L89: L90: `)}),$}});var UH=P((R8D,IH)=>{var d0=o("constants"),zn=process.cwd,_F=null,wn=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!_F)_F=zn.call(process);r... L91: GFS4: `),console.error(D)};if

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/updater-installed-worker.jsView on unpkg · L80

80`)};q_.renderString=function($,F,U){var I="",J;if(typeof $!=="string"||$==="")return"";if($[0]!=="{"&&$[0]!=="["){var X;if($.indexOf("{")===-1)X=$.indexOf("[");else if($.indexOf("[... L81: `,$=$.substr(X)}try{J=JSON.parse($)}catch(Y){return X0.red("Error:")+" Not valid JSON!"}return I+=q_.render(J,F,U),I}});var y7=P((zN)=>{Object.defineProperty(zN,"__esModule",{value... L82: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function s_(D,$){var F=D==null?null:typeof Symbol<"u"&&D[Symbol.iterator]||D["@@iterator"];if(F... L83: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var J=!0,X=!1,Y;return{s:function(){F=F.call(D)},n:function(){var B=F.next();return J=B.done,B}... L84: `)}if(!$||typeof $!=="object")$={};if($

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/updater-installed-worker.jsView on unpkg · L80

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/updater-installed-worker.jsView on unpkg · L90

74`)},info:(D,$)=>{XD.message(D,{...$,symbol:d("blue",xP)})},success:(D,$)=>{XD.message(D,{...$,symbol:d("green",fP)})},step:(D,$)=>{XD.message(D,{...$,symbol:d("green",G7)})},warn:(... L75: `)!=-1,U=this._styles,I=U.length;while(I--){var J=A6[U[I]];if($=J.open+$.replace(J.closeRe,J.open)+J.close,F)$=$.replace(oC,function(X){return J.close+X+J.open})}return $}GD.setThe... L76: `)===-1)return!0;if(F.inlineArrays&&!$){if(Array.isArray(D)&&DF(D[0],!0,F))return!0}return!1},Q_=function(D,$){if($.noColor)return D;if(typeof D==="string")return $.stringColor?X0[...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/updater-installed-worker.jsView on unpkg · L74

dist/onboarding-worker.jsView file

113`);return K=Math.max(K,w.length),w});for(let Z in Y)if($[Z])$[Z].push(...M[Z],...Array(K-M[Z].length).fill(""))}let g=$.map((Y,K)=>{if(K<D-1){let M=qt(Y);return Y.map((Z,w)=>`${Z}$... L114: `)}Lt.columnar=nqA});var St=i((Ot)=>{Object.defineProperty(Ot,"__esModule",{value:!0});Ot.TERMINAL_INFO=Ot.CI_ENVIRONMENT_VARIABLES_DETECTED=Ot.CI_ENVIRONMENT_VARIABLES=void 0;var ... L115: Run the command with ${qLA.default.input("--help")} to see a list of arguments that must be provided.`),!1;return!0};xt.checkInteractive=RLA;var zLA=()=>kt.TERMINAL_INFO.tty&&!kt.T...

High

Shell

Package source references shell execution.

dist/onboarding-worker.jsView on unpkg · L113

dist/src/sdk.jsView file

75`)};_I0.renderString=function(D,J,Q){var X="",Y;if(typeof D!=="string"||D==="")return"";if(D[0]!=="{"&&D[0]!=="["){var F;if(D.indexOf("{")===-1)F=D.indexOf("[");else if(D.indexOf("... L76: `,D=D.substr(F)}try{Y=JSON.parse(D)}catch(Z){return g8.red("Error:")+" Not valid JSON!"}return X+=_I0.render(Y,J,Q),X}});var xE=R((Xd)=>{Object.defineProperty(Xd,"__esModule",{valu... L77: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function BP0($,D){var J=$==null?null:typeof Symbol<"u"&&$[Symbol.iterator]||$["@@iterator"];if(... ... L85: `)}),D}});var dl=R((ev$,ml)=>{var C5=J0("constants"),gx0=process.cwd,VH=null,mx0=process.env.GRACEFUL_FS_PLATFORM||process.platform;process.cwd=function(){if(!VH)VH=gx0.call(proces... L86: GFS4: `),console.error($)};if(!m1[k

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/src/sdk.jsView on unpkg · L75

1import{createRequire as xA0}from"node:module";var module={exports:{}};var AA0=Object.create;var{getPrototypeOf:jA0,defineProperty:uB,getOwnPropertyNames:TA0}=Object;var IA0=Object.... L2: `)}var OK="\x1B",Ch="",oA0=39,gB="\x07",_h="[",tA0="]",vh="m",mB,Th,Ih=($)=>{if($>=30&&$<=37)return 39;if($>=90&&$<=97)return 39;if($>=40&&$<=47)return 49;if($>=100&&$<=107)return... ... L7: `),Q=D.split(` L8: `),X=Math.max(J.length,Q.length),Y=[];for(let F=0;F<X;F++)J[F]!==Q[F]&&Y.push(F);return{lines:Y,numLinesBefore:J.length,numLinesAfter:Q.length,numLines:X}}function n0($){return $==... L9: `).map((Z,G,U)=>{let q=Y?Y(Z,G):Z;return G===0?`${Q}${q}`:G===U.length-1?`${X}${q}`:`${J}${q}`}).join(` ... L14: `).slice(Y);this.output.write(F.join(` L15: `)),this._prevFrame=$;return}}this.output.write(sD.e

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sdk.jsView on unpkg · L1

dist/index.jsView file

5`){if(Y)$+=AnA("");let D=J?tiA(J):void 0;if(J&&D)$+=eiA(D)}else if(F===` L6: `){if(J&&tiA(J))$+=eiA(J);if(Y)$+=AnA(Y)}}return $},oB0;var h3A=b(()=>{v3A();y3A=`${iB0}8;;`,siA=new RegExp(`(?:\\${BnA}(?<code>\\d+)m|\\${y3A}(?<uri>.*)${g3A})`,"y"),oB0=/\r?\n/})... L7: `),Y=0,X=A;for(let G of J){if(X<=G.length)break;X-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),X=Math.min(X,J[Y].length)+Q;X<0&&Y>0;)Y--,X+=J[Y].length+1;for(;X>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let X=0;X<J;X++)B[X]!==$[X]&&Y.push(X);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function DB(A){return A==... L10: `).map((Z,G,K)=>{let W=Y?Y(Z,G):Z;return G===0?`${$}${W}`:G===K.length-1?`${J}${W}`:`${B}${W}`}).join(` ... L15: `).slice(Y);this.outpu

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L5

2004contains invisible/control Unicode U+200D (zero width joiner) If you do not pass a repository name, this defaults to ${vfA} in the Cap-go org.`).action(JuQ);s8.command("star-all [repositories...]").description("⭐ Star all Capgo GitHub repositories with a small random delay between each request.\n\nIf

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/index.jsView on unpkg · L2004

5Trigger-reachable chain: manifest.main -> dist/index.js L5: `){if(Y)$+=AnA("");let D=J?tiA(J):void 0;if(J&&D)$+=eiA(D)}else if(F===` L6: `){if(J&&tiA(J))$+=eiA(J);if(Y)$+=AnA(Y)}}return $},oB0;var h3A=b(()=>{v3A();y3A=`${iB0}8;;`,siA=new RegExp(`(?:\\${BnA}(?<code>\\d+)m|\\${y3A}(?<uri>.*)${g3A})`,"y"),oB0=/\r?\n/})... L7: `),Y=0,X=A;for(let G of J){if(X<=G.length)break;X-=G.length+1,Y++}for(Y=Math.max(0,Math.min(J.length-1,Y+B)),X=Math.min(X,J[Y].length)+Q;X<0&&Y>0;)Y--,X+=J[Y].length+1;for(;X>J[Y].... L8: `),$=Q.split(` L9: `),J=Math.max(B.length,$.length),Y=[];for(let X=0;X<J;X++)B[X]!==$[X]&&Y.push(X);return{lines:Y,numLinesBefore:B.length,numLinesAfter:$.length,numLines:J}}function DB(A){return A==... L10: `).map((Z,G,K)=>{let W=Y?Y(Z,G):Z;return G===0?`${$}${W}`:G===K.length-1?`${J}$

Source & flagged code

19 flagged · loading source

dist/updater-installed-worker.jsView file

High

Child Process

Package source references child process execution.

dist/updater-installed-worker.jsView on unpkg · L90

High

Eval

Package source references dynamic code evaluation.

dist/updater-installed-worker.jsView on unpkg · L164

Findings

4 Critical11 High6 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalRemote Asset Decode Executedist/src/sdk.js

CriticalTrojan Source Unicodedist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

HighChild Processdist/updater-installed-worker.js

HighShelldist/onboarding-worker.js

HighEvaldist/updater-installed-worker.js

HighSame File Env Network Executiondist/updater-installed-worker.js

HighCredential Redirect Persistencedist/index.js

HighCommand Output Exfiltrationdist/updater-installed-worker.js

HighObfuscated Payload Loaderdist/updater-installed-worker.js

Affected versions and remediation

This report applies to @capgo/cli@8.93.0.

See all versions of @capgo/cli for other recorded verdicts.

Review the evidence and your use of @capgo/cli@8.93.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-22 20:44:13.293Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code