registry / @cubic-dev-ai/cli / 1.10.6

@cubic-dev-ai/cli@1.10.6

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Installing the package invokes a postinstall hook that retrieves and executes a remote installer, then changes a separate git-ai installation in the user's home directory. This is an unconsented install-time mutation of a foreign AI-related tool.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation with lifecycle scripts enabled.

Impact

Arbitrary code supplied by the remote installer can run during dependency installation and establish or change git-ai outside the package directory.

Mechanism

Remote installer execution and home-directory git-ai configuration.

Attack narrative

The npm postinstall hook runs automatically. After setting up its CLI wrapper, it calls setupGitAi, which silently retrieves an install script from GitHub and executes it with PowerShell or bash. It then invokes the installed binary to set configuration in the user's home-directory git-ai installation. The downloaded script is not packaged or integrity-pinned by this source, so the package grants a remote third-party installer code execution during installation.

AI rationale

The package automatically executes unpinned remote shell code and alters a separate home-directory AI-related tool during postinstall. This is a concrete unconsented install-hook abuse path, despite no observed credential-harvesting code.

Evidence

package.jsonpostinstall.mjsbin/cubic.git-ai/bin/git-ai

Network endpoints2

github.com/git-ai-project/git-ai/releases/download/${GIT_AI_VERSION}/install.ps1

@cubic-dev-ai/cli@1.10.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code