Loading npm security reports…

@cubic-dev-ai/cli@1.10.9: AI-agent control-surface risk | LPM Firewall

registry / @cubic-dev-ai/cli / 1.10.9

@cubic-dev-ai/cli@1.10.9

AI Security Review

scanned 27d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically fetches and executes a remote git-ai installer, then configures software in the user's home directory. This is not limited to the package's own files.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation with lifecycle scripts enabled

Impact

A remote release script executes during installation and can modify the user's git-ai installation and configuration.

Mechanism

Postinstall remote shell execution and third-party AI-tool configuration

Policy narrative

The package declares an automatic postinstall hook. Unless the user sets an opt-out variable, it downloads a git-ai release installer from GitHub and executes it through PowerShell or Bash, then invokes git-ai configuration commands in the user's home-directory installation. This changes an external AI-related tool during dependency installation without an explicit user command.

AI rationale

The package performs unconsented install-time remote code execution and mutates a foreign AI-tool installation outside its own package directory. The interactive coding-agent wizard is guarded, but the git-ai installation is unconditional by default.

Evidence

package.jsonpostinstall.mjsbin/cubicbin/cubic.wrapper~/.git-ai/bin/git-ai

Network endpoints2

/git-ai-project/git-ai/releases/download/${GIT_AI_VERSION}/install.ps1

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.preinstall = bun ./preinstall.mjs || node ./preinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = bun ./preinstall.mjs || node ./preinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = bun ./postinstall.mjs || node ./postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/cubic.cmdView file

•path = bin/cubic.cmd kind = build_helper sizeBytes = 1901 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/cubic.cmdView on unpkg

postinstall.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

postinstall.mjs#virtual:normalized:round1View on unpkg

postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.10.8 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = f818ee0b154a0f29 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @cubic-dev-ai/cli@1.10.8 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.8 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @cubic-dev-ai/cli@1.10.5 matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.5 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

postinstall.mjsView on unpkg

bin/cubicView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.10.8 matchedPath = bin/cubic matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cubicView on unpkg

Source & flagged code

9 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@cubic-dev-ai/cli",

3 "type": "module",

4 "bin": {

5 "cubic": "./bin/cubic"

6 },

7 "scripts": {

8 "preinstall": "bun ./preinstall.mjs || node ./preinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L8

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 "postinstall": "bun ./postinstall.mjs || node ./postinstall.mjs"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 },

11 "version": "1.10.9",

12 "license": "UNLICENSED",

13 "repository": {

14 "type": "git",

15 "url": "git+https://github.com/mrge-io/cubic-cli.git",

16 "directory": "packages/cubic"

17 },

18 "optionalDependencies": {

19 "@cubic-dev-ai/cli-linux-arm64": "1.10.9",

20 "@cubic-dev-ai/cli-linux-x64": "1.10.9",

21 "@cubic-dev-ai/cli-linux-x64-baseline": "1.10.9",

22 "@cubic-dev-ai/cli-linux-arm64-musl": "1.10.9",

23 "@cubic-dev-ai/cli-linux-x64-musl": "1.10.9",

24 "@cubic-dev-ai/cli-linux-x64-baseline-musl": "1.10.9",

25 "@cubic-dev-ai/cli-darwin-arm64": "1.10.9",

26 "@cubic-dev-ai/cli-darwin-x64": "1.10.9",

27 "@cubic-dev-ai/cli-darwin-x64-baseline": "1.10.9",

28 "@cubic-dev-ai/cli-windows-x64": "1.10.9",

29 "@cubic-dev-ai/cli-windows-x64-baseline": "1.10.9"

bin/cubic.cmdView file

•path = bin/cubic.cmd kind = build_helper sizeBytes = 1901 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/cubic.cmdView on unpkg

postinstall.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

postinstall.mjs#virtual:normalized:round1View on unpkg

postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.10.8 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = f818ee0b154a0f29 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @cubic-dev-ai/cli@1.10.8 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.8 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @cubic-dev-ai/cli@1.10.5 matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.5 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

postinstall.mjsView on unpkg

bin/cubicView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.10.8 matchedPath = bin/cubic matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cubicView on unpkg