@codevineai/cli@0.2.20260813032035

High-risk behavior combination matched malicious policy.

User runs the codevineai CLI after a higher-version cache entry exists.

Arbitrary code execution as the CLI user from a tampered or malicious staged cache.

Unvalidated cached-code loading through dynamic require.

The runtime shim enumerates every ~/.codevineai/bin host directory, picks the highest syntactically valid version.txt, and requires its cli.cjs. No hash, signature, ownership, or host allowlist is checked. A staged cache payload with a higher version therefore replaces the bundled CLI when the user invokes it. The install hook itself is inert because its referenced module is not shipped.

The package contains a concrete, obfuscated staged-payload loader that executes unvalidated cached code. Its inert postinstall hook does not mitigate the runtime arbitrary-code-execution path.