Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@codevineai/cli@0.2.20260708203235: Suspicious npm security | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as agent extension risk

Allowed by default with warning: install-time first-party agent extension setup was detected.

View on npm All versions Policy details

registry / @codevineai/cli / 0.2.20260708203235

@codevineai/cli@0.2.20260708203235

CodeVine AI CLI — setup, sync, and manage your Claude Code environment

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious install-time behavior was found. Runtime has a risky obfuscated self-updating CLI that can execute cached CodeVine code and user-invoked AI client setup/upload features.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Running the codevineai CLI after install

Impact

May execute newer cached CLI code from the user's home directory and alter AI client configuration when explicitly commanded.

Mechanism

obfuscated self-update and user-command agent/client configuration

Rationale

Source inspection supports a warning for obfuscated remote-update/agent-extension lifecycle risk, but not a malicious block because the install hook is inert and no concrete exfiltration, destructive action, or unconsented install-time AI-agent control-surface mutation was confirmed.

Evidence

package.jsondist/cli.cjs~/.codevineai/bin/<host>/cli.cjs~/.codevineai/bin/<host>/version.txt

Network endpoints3

codevine.ai/app/cli/cli.cjsregistry.npmjs.org/@codevineai%2fcli/latestlocalhost

Decision evidence

public snapshot

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json has a postinstall require of ./dist/postinstall.cjs, but that file is absent so it is caught and inert.
dist/cli.cjs is heavily obfuscated after line 95, obscuring runtime behavior.
dist/cli.cjs loads and executes newer cached code from ~/.codevineai/bin/<host>/cli.cjs via require().
Decoded strings expose self-update endpoints for https://codevine.ai/app/cli/cli.cjs and npm latest metadata.
CLI exposes install/setup/uninstall commands for Claude/AI client support and an upload command for Claude Code conversation logs.

Evidence against

Only package files present are package.json and dist/cli.cjs; no bundled postinstall payload exists.
Install-time hook does not mutate files because dist/postinstall.cjs is missing and errors are swallowed.
Agent/client mutation appears tied to explicit user commands, not npm install.
Network endpoints are package-aligned CodeVine/npm update/auth functionality.
No clear credential exfiltration, destructive action, or stealth persistence confirmed from static inspection.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 1 file(s), 186 KB of source, external domains: codevine.ai, registry.npmjs.org

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "try{require('./dist/postinstall.cjs')}catch{}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "try{require('./dist/postinstall.cjs')}catch{}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/cli.cjsView file

94if (!globalThis.__CODEVINE_SHIM_HANDLED) { L95: const _0x358c91=_0x2c9a;(function(_0x5bbdca,_0x5921e4){const _0x48f3a4=_0x2c9a,_0x522140=_0x5bbdca();while(!![]){try{const _0x274f8b=-parseInt(_0x48f3a4(0x1c0))/0x1*(-parseInt(_0x4... L96: }

High

Child Process

Package source references child process execution.

dist/cli.cjsView on unpkg · L94

94if (!globalThis.__CODEVINE_SHIM_HANDLED) { L95: const _0x358c91=_0x2c9a;(function(_0x5bbdca,_0x5921e4){const _0x48f3a4=_0x2c9a,_0x522140=_0x5bbdca();while(!![]){try{const _0x274f8b=-parseInt(_0x48f3a4(0x1c0))/0x1*(-parseInt(_0x4... L96: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.cjsView on unpkg · L94

94if (!globalThis.__CODEVINE_SHIM_HANDLED) { L95: const _0x358c91=_0x2c9a;(function(_0x5bbdca,_0x5921e4){const _0x48f3a4=_0x2c9a,_0x522140=_0x5bbdca();while(!![]){try{const _0x274f8b=-parseInt(_0x48f3a4(0x1c0))/0x1*(-parseInt(_0x4... L96: }

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/cli.cjsView on unpkg · L94

13if (!globalThis.__CODEVINE_CACHED) { L14: const _fs = require('node:fs'); L15: const _path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.cjsView on unpkg · L13

Findings

1 Critical5 High4 Medium5 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/cli.cjs

HighSame File Env Network Executiondist/cli.cjs

HighObfuscated Payload Loaderdist/cli.cjs

HighObfuscated

MediumDynamic Requiredist/cli.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

82%Warn

Verdict confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

Maintainerswellsb1

Version0.2.20260813032035

PublishedJul 8, 2026

Licensenone

Dependencies0

Integrityverified

Package size60.8 KB

Files2

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → codevineai

Runtimenode >=20

Artifact187 KB · 2 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkHighEntropyStringsMinifiedObfuscatedUrlStringsNoLicense

LPM CLI

Source & flagged code

6 flagged

package.jsonView file

Lines 1-31json

1{

2 "name": "@codevineai/cli",

3 "version": "0.2.20260708203235",

4 "description": "CodeVine AI CLI — setup, sync, and manage your Claude Code environment",

5 "type": "module",

6 "bin": {

7 "codevineai": "dist/cli.cjs"

8 },

9 "repository": {

10 "type": "git",

11 "url": "https://github.com/RocketPartners/codevine.git",

12 "directory": "cli"

13 },

14 "files": [

15 "dist/"

16 ],

17 "scripts": {

18 "build": "node build.mjs",

19 "dev": "node src/cli.js",

20 "postinstall": "node -e \"try{require('./dist/postinstall.cjs')}catch{}\""

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L20

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

21 },

22 "engines": {

23 "node": ">=20"

24 },

25 "devDependencies": {

26 "esbuild": "^0.28.1",

27 "javascript-obfuscator": "^5.4.1",

28 "picocolors": "^1.1.1"

29 }

30}

31

dist/cli.cjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Auto-update shim — prepended to the built cli.cjs by build.mjs.

4 *

5 * Checks for a cached CLI at ~/.codevineai/bin/<host>/cli.cjs.

6 * If the cached version is newer (by timestamp-based patch version),

7 * eval it instead of running the bundled code. The cached copy sees

8 * the global flag and skips the shim, preventing recursion.

9 *

10 * If eval throws, deletes the cached file and exits with an error.

11

*/

12

13if (!globalThis.__CODEVINE_CACHED) {

14 const _fs = require('node:fs');

15 const _path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.cjsView on unpkg · L13

16 const _os = require('node:os');

17

18 // A version is "X.Y.Z" with an optional ".build" timestamp suffix — and

19 // nothing else. This guards against a poisoned version.txt (e.g. a dev

20 // server returning index.html for /app/cli/version.txt): an HTML body would

21 // otherwise string-sort ABOVE any real version ('<' > '0') and always win.

22 const _isVersion = (v) => /^\d+\.\d+\.\d+(\.\d+)?$/.test(v);

23

24 // Compare two valid version strings numerically (NOT lexically — "0.2.9"

25 // must sort below "0.2.10"). A present segment outranks an absent one, so a

26 // build-stamped "X.Y.Z.<build>" beats the bare "X.Y.Z". Returns a-b sign.

27 const _cmpVersion = (a, b) => {

28 const pa = a.split('.').map(Number);

29 const pb = b.split('.').map(Number);

30 for (let i = 0; i < Math.max(pa.length, pb.length); i++) {

31 const hasA = i < pa.length;

32 const hasB = i < pb.length;

33 if (hasA !== hasB) return hasA ? 1 : -1;

Lines 74-96javascript

74 if (_bestPath) {

75 try {

76 globalThis.__CODEVINE_CACHED = true;

77 // require() executes the cached file synchronously — its shim is

78 // skipped (__CODEVINE_CACHED is true) and its app code runs.

79 // After require() returns, set the guard flag so the bundled app

80 // code that follows this shim in the same file is skipped.

81 require(_bestPath);

82 globalThis.__CODEVINE_SHIM_HANDLED = true;

83 } catch (err) {

84 // Cached binary is broken — delete it

85 try { _fs.unlinkSync(_bestPath); } catch {}

86 try { _fs.unlinkSync(_bestPath.replace('cli.cjs', 'version.txt')); } catch {}

87 process.stderr.write(`Error running cached CLI (removed): ${err.message}\n`);

88 process.stderr.write('Please run the command again.\n');

89 process.exit(1);

90 }

91 }

92}

93

94if (!globalThis.__CODEVINE_SHIM_HANDLED) {

95const _0x358c91=_0x2c9a;(function(_0x5bbdca,_0x5921e4){const _0x48f3a4=_0x2c9a,_0x522140=_0x5bbdca();while(!![]){try{const _0x274f8b=-parseInt(_0x48f3a4(0x1c0

96}

High

Child Process

Package source references child process execution.

dist/cli.cjsView on unpkg · L94

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.cjsView on unpkg · L94

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/cli.cjsView on unpkg · L94

Long lines were clipped for display.

))

/

0x1

*

(

-

parseInt

(

_0x48f3a4

(

0x2e9

))

/

0x2

)

+

parseInt

(

_0x48f3a4

(

0x4ae

))

/

0x3

+-

parseInt

(

_0x48f3a4

(

0x417

))

/

0x4

+

parseInt

(

_0x48f3a4

(

0x4de

))

/

0x5

+

parseInt

(

_0x48f3a4

(

0x221

))

/

0x6

+-

parseInt

(

_0x48f3a4

(

0x43e

))

/

0x7

*

(

parseInt

(

_0x48f3a4

(

0x18b

))

/

0x8

)

+-

parseInt

(

_0x48f3a4

(

0x3c2

))

/

0x9

;

if

(_0x274f8b

===

_0x5921e4)

break

;

else

_0x522140[

'push'

](_0x522140[

'shift'

]());}

catch

(_0x5ae9a9){_0x522140[

'push'

](_0x522140[

'shift'

]());}}}(_0x3535,

0x59d73

));

function

_0x3535

(){cons

...