Loading npm security reports…

@cubic-dev-ai/cli@1.13.0: Suspicious npm security report (Warn) | LPM Firewall

registry / @cubic-dev-ai/cli / 1.13.0

@cubic-dev-ai/cli@1.13.0

AI Security Review

scanned 11d ago · by lpm-firewall-ai

npm postinstall silently fetches and executes a third-party git-ai installer from GitHub, then writes that tool's config in the user home directory. An interactive or npx path can also start the native cubic setup command. The installer body is not in this package, so what the remote script changes cannot be fully verified here.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall, or running the cubic bin with no arguments under npm exec, or an interactive install-time wizard.

Impact

A remote script runs as the installing user and can place git-ai under the home directory and change its config. Agent setup runs only through the separate platform binary when the wizard or npx path is active.

Mechanism

postinstall.mjs runs curl of a pinned GitHub install.sh into bash, or irm into iex on Windows, then calls git-ai config set. The bin may spawn the platform binary with setup --mode install.

AI rationale

Install runs a pinned third-party installer from GitHub and can launch agent setup, which is a real remote-execution risk during npm install. The version check, opt-out, and telemetry-off config match the CLI's AI-stats feature and do not show hidden credential theft or a self-install chain, so this stays a warning rather than a publish block.

Evidence

package.jsonpostinstall.mjsbin/cubicgit-ai.json~/.git-ai/bin/git-ai~/.git-ai/config.json~/.local/state/cubic/git-ai-disabled

Network endpoints

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = bun ./postinstall.mjs || node ./postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = bun ./preinstall.mjs || node ./preinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = bun ./postinstall.mjs || node ./postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/cubic.cmdView file

•path = bin/cubic.cmd kind = build_helper sizeBytes = 1901 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/cubic.cmdView on unpkg

postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.11.0 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.11.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7fd473a24bad462a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @cubic-dev-ai/cli@1.11.0 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.11.0 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @cubic-dev-ai/cli@1.10.5 matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.5 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

postinstall.mjsView on unpkg

bin/cubicView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.11.0 matchedPath = bin/cubic matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.11.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cubicView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@cubic-dev-ai/cli",

3 "type": "module",

4 "bin": {

5 "cubic": "./bin/cubic"

6 },

7 "scripts": {

8 "preinstall": "bun ./preinstall.mjs || node ./preinstall.mjs",

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L8

9 "postinstall": "bun ./postinstall.mjs || node ./postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 },

11 "version": "1.13.0",

12 "license": "UNLICENSED",

13 "repository": {

14 "type": "git",

15 "url": "git+https://github.com/mrge-io/cubic-cli.git",

16 "directory": "packages/cubic"

17 },

18 "optionalDependencies": {

19 "@cubic-dev-ai/cli-linux-arm64": "1.13.0",

20 "@cubic-dev-ai/cli-linux-x64": "1.13.0",

21 "@cubic-dev-ai/cli-linux-x64-baseline": "1.13.0",

22 "@cubic-dev-ai/cli-linux-arm64-musl": "1.13.0",

23 "@cubic-dev-ai/cli-linux-x64-musl": "1.13.0",

24 "@cubic-dev-ai/cli-linux-x64-baseline-musl": "1.13.0",

25 "@cubic-dev-ai/cli-darwin-arm64": "1.13.0",

26 "@cubic-dev-ai/cli-darwin-x64": "1.13.0",

27 "@cubic-dev-ai/cli-darwin-x64-baseline": "1.13.0",

28 "@cubic-dev-ai/cli-windows-x64": "1.13.0",

29 "@cubic-dev-ai/cli-windows-x64-baseline": "1.13.0"

bin/cubic.cmdView file

•path = bin/cubic.cmd kind = build_helper sizeBytes = 1901 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/cubic.cmdView on unpkg

postinstall.mjsView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.11.0 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.11.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 7fd473a24bad462a signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @cubic-dev-ai/cli@1.11.0 matchedPath = postinstall.mjs matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.11.0 similarity = 1.000 shingleOverlap = 3 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

postinstall.mjsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @cubic-dev-ai/cli@1.10.5 matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.10.5 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

postinstall.mjsView on unpkg

bin/cubicView file

•matchType = normalized_sha256 matchedPackage = @cubic-dev-ai/cli@1.11.0 matchedPath = bin/cubic matchedIdentity = npm:QGN1YmljLWRldi1haS9jbGk:1.11.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/cubicView on unpkg