@doist/todoist-cli@5.3.6: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@doist/todoist-cli@5.3.6: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/check-skill-sync.jsView file

17const modulePath = pathToFileURL(join(root, 'dist/lib/skills/create-installer.js')).href L18: const { generateSkillFile } = await import(modulePath) L19: const expected = generateSkillFile()

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/check-skill-sync.jsView on unpkg · L17

dist/lib/skills/create-installer.jsView file

99async install(local, force) { L100: if (!local && config.dirName !== '.agents') { L101: const agentDir = join(homedir(), config.dirName); ... L113: } L114: await mkdir(dirname(filepath), { recursive: true }); L115: await writeFile(filepath, this.generateContent(), 'utf-8'); ... L119: const filepath = getInstallPath(local); L120: await mkdir(dirname(filepath), { recursive: true }); L121: await writeFile(filepath, this.generateContent(), 'utf-8');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/lib/skills/create-installer.jsView on unpkg · L99

dist/commands/doctor.jsView file

•matchType = malicious_source_fingerprint_signature signature = 807de33c2fc8aba0 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @doist/todoist-cli@5.3.5 matchedPath = dist/commands/doctor.js matchedIdentity = npm:QGRvaXN0L3RvZG9pc3QtY2xp:5.3.5 similarity = 1.000 shingleOverlap = 30 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/commands/doctor.jsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-37json

1{

2 "name": "@doist/todoist-cli",

3 "version": "5.3.6",

4 "description": "TypeScript CLI for Todoist",

5 "type": "module",

6 "main": "dist/index.js",

7 "bin": {

8 "td": "dist/index.js"

9 },

10 "scripts": {

11 "build": "tsc -p tsconfig.build.json",

12 "dev": "tsc -p tsconfig.build.json --watch",

13 "start": "node dist/index.js",

14 "type-check": "tsc --noEmit",

15 "check": "oxlint src && oxfmt --check",

16 "fix": "oxlint src --fix && oxfmt",

17 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L17

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L17

18 "check:skill-sync": "node scripts/check-skill-sync.js",

19 "sync:skill": "npm run build && node scripts/sync-skill.js",

20 "test": "vitest run",

21 "test:watch": "vitest",

22 "prepublishOnly": "npm run build && npm test"

23 },

24 "keywords": [

25 "todoist",

26 "cli",

27 "todo",

28 "tasks"

29 ],

30 "author": "Ernesto García <ernesto@ernesto.dev>",

31 "license": "MIT",

32 "repository": {

33 "type": "git",

34 "url": "git+https://github.com/Doist/todoist-cli.git"

35 },

36 "homepage": "https://github.com/Doist/todoist-cli#readme",

37 "bugs": {

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

scripts/check-skill-sync.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2

3/**

4 * Verifies that skills/todoist-cli/SKILL.md is in sync with the generated

5 * skill content from src/lib/skills/content.ts.

6 *

7 * Requires `npm run build` to have been run first.

8 */

9

10import { readFile } from 'node:fs/promises'

dist/lib/skills/create-installer.jsView file

Lines 79-119javascript

79 await removeEmptyDirs(dirname(filepath), 2);

80 }

81 return {

82 name: config.name,

83 description: config.description,

84 getInstallPath,

85 getLegacyInstallPath,

dist/commands/doctor.jsView file

•matchType = malicious_source_fingerprint_signature signature = 807de33c2fc8aba0 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @doist/todoist-cli@5.3.5 matchedPath = dist/commands/doctor.js matchedIdentity = npm:QGRvaXN0L3RvZG9pc3QtY2xp:5.3.5 similarity = 1.000 shingleOverlap = 30 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/commands/doctor.jsView on unpkg