registry / @codevineai/cli / 0.2.20260813032035

@codevineai/cli@0.2.20260813032035

CodeVine AI CLI — setup, sync, and manage your Claude Code environment

AI Security Review

scanned 10d ago · by lpm-firewall-ai

Invoking the CLI can run a newer cached JavaScript file from ~/.codevineai/bin/<host>/cli.cjs. Selection is based only on a version string, without an integrity or signature check.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs the codevineai CLI after a higher-version cache entry exists.

Impact

Arbitrary code execution as the CLI user from a tampered or malicious staged cache.

Mechanism

Unvalidated cached-code loading through dynamic require.

Attack narrative

The runtime shim enumerates every ~/.codevineai/bin host directory, picks the highest syntactically valid version.txt, and requires its cli.cjs. No hash, signature, ownership, or host allowlist is checked. A staged cache payload with a higher version therefore replaces the bundled CLI when the user invokes it. The install hook itself is inert because its referenced module is not shipped.

Rationale

The package contains a concrete, obfuscated staged-payload loader that executes unvalidated cached code. Its inert postinstall hook does not mitigate the runtime arbitrary-code-execution path.

Evidence

package.jsondist/cli.cjs~/.codevineai/bin/<host>/cli.cjs~/.codevineai/bin/<host>/version.txt

Decision evidence

public snapshot

AI called this Malicious at 94.0% confidence as Malware with low false-positive risk.

Evidence for block

Runtime shim selects the newest version-marked cached CLI from every host directory.
It executes that selected cache file via dynamic require without integrity or publisher validation.
The shipped CLI payload is deliberately obfuscated.

Evidence against

The postinstall target dist/postinstall.cjs is absent from the shipped dist-only package, so this hook is swallowed and does not execute package code at install time.

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

MinifiedObfuscated

Manifest

NoLicense

scanned 1 file(s), 186 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 1-31json

2 "name": "@codevineai/cli",

3 "version": "0.2.20260813032035",

4 "description": "CodeVine AI CLI — setup, sync, and manage your Claude Code environment",

5 "type": "module",

6 "bin": {

7 "codevineai": "dist/cli.cjs"

8 },

9 "repository": {

10 "type": "git",

11 "url": "https://github.com/RocketPartners/codevine.git",

12 "directory": "cli"

13 },

14 "files": [

15 "dist/"

16 ],

17 "scripts": {

18 "build": "node build.mjs",

19 "dev": "node src/cli.js",

20 "postinstall": "node -e \"try{require('./dist/postinstall.cjs')}catch{}\""

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L20

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

21 },

22 "engines": {

23 "node": ">=20"

24 },

25 "devDependencies": {

26 "esbuild": "^0.28.1",

27 "javascript-obfuscator": "^5.4.1",

28 "picocolors": "^1.1.1"

29 }

30}

dist/cli.cjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Auto-update shim — prepended to the built cli.cjs by build.mjs.

4 *

5 * Checks for a cached CLI at ~/.codevineai/bin/<host>/cli.cjs.

6 * If the cached version is newer (by timestamp-based patch version),

7 * eval it instead of running the bundled code. The cached copy sees

8 * the global flag and skips the shim, preventing recursion.

9 *

10 * If eval throws, deletes the cached file and exits with an error.

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "try{require('./dist/postinstall.cjs')}catch{}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "try{require('./dist/postinstall.cjs')}catch{}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/cli.cjsView file

94if (!globalThis.__CODEVINE_SHIM_HANDLED) { L95: const _0x2fe366=_0xf879;(function(_0x11d6ac,_0x4b13d5){const _0x11d90f=_0xf879,_0x5ccf5f=_0x11d6ac();while(!![]){try{const _0x728f0a=parseInt(_0x11d90f(0xec))/0x1+parseInt(_0x11d90... L96: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.cjsView on unpkg · L94

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/cli.cjsView on unpkg · L94

13if (!globalThis.__CODEVINE_CACHED) { L14: const _fs = require('node:fs'); L15: const _path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.cjsView on unpkg · L13

Findings

1 Critical4 High4 Medium3 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighSame File Env Network Executiondist/cli.cjs

HighObfuscated Payload Loaderdist/cli.cjs

HighObfuscated

MediumDynamic Requiredist/cli.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowNo License