Loading npm security reports…

@cubic-dev-ai/cli@1.10.8: AI-agent control-surface risk | LPM Firewall

registry / @cubic-dev-ai/cli / 1.10.8

@cubic-dev-ai/cli@1.10.8

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Npm installation silently installs and configures a separate AI-related tool in the user's home directory. The remote installer is fetched and executed without source verification.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm automatically runs postinstall when this package is installed.

Impact

A registry install can execute GitHub-hosted shell or PowerShell code and alter the user's git-ai tool configuration.

Mechanism

Remote installer execution followed by foreign git-ai configuration.

Policy narrative

Installing the package triggers postinstall. Unless CUBIC_DISABLE_GIT_AI is set, it checks for git-ai and, if absent, silently fetches a versioned installer from GitHub and pipes it into bash or PowerShell. It then runs the installed binary to apply configuration. This is an unconsented install-time mutation of a separate AI-related control surface and executes remote code outside the package snapshot.

AI rationale

The package's automatic postinstall downloads and executes a foreign installer, then changes the installed tool's configuration. This is concrete install-hook abuse, not necessary local binary linking.

Evidence

package.jsonpostinstall.mjsgit-ai.json$HOME/.git-ai/bin/git-ai

Network endpoints2

github.com/git-ai-project/git-ai/releases/download/${GIT_AI_VERSION}/install.sh

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.preinstall = bun ./preinstall.mjs || node ./preinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = bun ./preinstall.mjs || node ./preinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = bun ./postinstall.mjs || node ./postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/cubic.cmdView file

•path = bin/cubic.cmd kind = build_helper sizeBytes = 1901 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/cubic.cmdView on unpkg

postinstall.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

postinstall.mjs#virtual:normalized:round1View on unpkg

bin/cubicView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.10.7 matchedPath = bin/cubic matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cubicView on unpkg

postinstall.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cubic-dev-ai/cli@1.10.5 matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.5 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

postinstall.mjsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@cubic-dev-ai/cli",

3 "type": "module",

4 "bin": {

5 "cubic": "./bin/cubic"

6 },

7 "scripts": {

8 "preinstall": "bun ./preinstall.mjs || node ./preinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 "postinstall": "bun ./postinstall.mjs || node ./postinstall.mjs"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 },

11 "version": "1.10.8",

12 "license": "UNLICENSED",

13 "repository": {

14 "type": "git",

15 "url": "git+https://github.com/mrge-io/cubic-cli.git",

16 "directory": "packages/cubic"

17 },

18 "optionalDependencies": {

19 "@cubic-dev-ai/cli-linux-arm64": "1.10.8",

20 "@cubic-dev-ai/cli-linux-x64": "1.10.8",

21 "@cubic-dev-ai/cli-linux-x64-baseline": "1.10.8",

22 "@cubic-dev-ai/cli-linux-arm64-musl": "1.10.8",

23 "@cubic-dev-ai/cli-linux-x64-musl": "1.10.8",

24 "@cubic-dev-ai/cli-linux-x64-baseline-musl": "1.10.8",

25 "@cubic-dev-ai/cli-darwin-arm64": "1.10.8",

26 "@cubic-dev-ai/cli-darwin-x64": "1.10.8",

27 "@cubic-dev-ai/cli-darwin-x64-baseline": "1.10.8",

28 "@cubic-dev-ai/cli-windows-x64": "1.10.8",

29 "@cubic-dev-ai/cli-windows-x64-baseline": "1.10.8"

bin/cubic.cmdView file

•path = bin/cubic.cmd kind = build_helper sizeBytes = 1901 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/cubic.cmdView on unpkg

postinstall.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

postinstall.mjs#virtual:normalized:round1View on unpkg

bin/cubicView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.10.7 matchedPath = bin/cubic matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.7 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cubicView on unpkg

postinstall.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @cubic-dev-ai/cli@1.10.5 matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.5 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

postinstall.mjsView on unpkg