registry / @dreamy-ui/cli / 2.1.2

@dreamy-ui/cli@2.1.2

CLI for Dreamy UI

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Network and filesystem effects are explicit Dreamy UI CLI scaffolding actions, not install-time or covert behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs the dreamy CLI init, add, list, or diff command.

Impact

Scoped project scaffolding; no credential harvesting, exfiltration, persistence, or agent-control mutation established.

Mechanism

Fetches Dreamy UI registry data; requested setup writes project files and runs package-manager/Panda commands.

Rationale

The static hints resolve to bundled parser code and a legitimate interactive UI scaffolding CLI. Source inspection found no install-time execution or concrete malicious chain.

Evidence

package.jsonbin/index.jsdist/index.mjsREADME.mddist/flow-Dt9d_f4q.mjsdist/yaml-CAMz1DEp.mjspanda.config.tspanda.config.jspostcss.config.mjsapp/app.csstsconfig.json

Network endpoints1

dreamy-ui.com

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall/install/postinstall lifecycle hook.
bin/index.js only invokes the exported CLI run() handler.
dist/index.mjs registers explicit init/add/list/diff commands.
Registry fetches target https://dreamy-ui.com component content only.
Project writes and package-manager commands occur in documented user-invoked setup.
No credential terms, eval/Function, native loading, or AI-agent control writes found.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 3.99 MB of source, external domains: dreamy-ui.com, git.io, prettier.io, www.w3.org

Source & flagged code

5 flagged

dist/flow-Dt9d_f4q.mjsView file

3patternName = aws_access_key severity = critical line = 3 matchedText = var e=Ob...it(`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/flow-Dt9d_f4q.mjsView on unpkg · L3

3patternName = aws_access_key severity = critical line = 3 matchedText = var e=Ob...it(`

Critical

Secret Pattern

AWS access key ID in dist/flow-Dt9d_f4q.mjs

dist/flow-Dt9d_f4q.mjsView on unpkg · L3

dist/index.mjsView file

Lines 1-21javascript

1import { createRequire as topLevelCreateRequire } from 'module';

2 const require = topLevelCreateRequire(import.meta.url);

3import*as e from"@clack/prompts";import{spinner as t}from"@clack/prompts";import{Command as n}from"commander";import{existsSync as r,mkdirSync as i,readFileSync as a}from"node:fs";import{access as o,readFile as s,readdir as c,unlink as l,writeFile as u}from"node:fs/promises";import{join as d}

4`);)t--;return t<e.length?e.slice(0,t):e}function Le(e,t,n){if(!e.has(t)){let r=n(t);e.set(t,r)}return e.get(t)}function Re(e){if(typeof e==`string`)return be;if(Array.isArray(e))return xe;if(!e)return;let{type:t}=e;if(Fe.has(t))return t}var ze=Re,Be=e=>new Intl.ListFormat(`en-US`,{type:`disjunction`}).format(e);function Ve(e){let t=e===null?`null`:typeof e;if(t!==`string`&&t!==`object`)return`Unexpected doc '${t}',

5Expected it to be 'string' or 'object'.`;if(ze(e))throw Error(`doc is valid.`);let n=Object.prototype.toString.call(e);if(n!==`[object Object]`)return`Unexpected doc '${n}'.`;let r=Be([...Fe].map(e=>`'${e}'`));return`Unexpected doc.type '${e.type}'.

6Expected it to be ${r}.`}var He=class extends Error{name=`InvalidDocError`;constructor(e){super(Ve(e)),this.doc=e}},Ue={};function We(e,t,n,r){let i=[e];for(;i.length>0;){let e=i.pop();if(e===Ue){n(i.pop());continue}n&&i.push(e,Ue);let a=ze(e);if(!a)throw new He(e);if(t?.(e)!==!1)switch(a){case xe:case De:{let t=a===xe?e:e.parts;for(let e=t.length-1;e>=0;--e)i.push(t[e]);break}case Oe:i.push(e.flatContents,e.breakContents);break;case Ee:if(r&&e.expandedStates)for(let t=e.expandedStates.length-1;t>=0;--t)i.push(e.expandedStates[t]);else i.push(e.contents);break;case we:case Ce:case ke:case Ne:c ...

7`)):e)}function ot(e){if(e.type===Me)return!0}function st(e){return qe(e,ot,!1)}var ct=ye,lt=ye,ut=ye,dt=ye;function ft(e){return ct(e),{type:Ce,contents:e}}function pt(e,t){return dt(e),ct(t),{type:we,contents:t,n:e}}function mt(e){return pt(-1/0,e)}function ht(e){return pt({type:`root`},e)}function gt(e){return pt(-1,e)}function _t(e,t,n){ct(e);let r=e;if(t>0){for(let e=0;e<Math.floor(t/n);++e)r=ft(r);r=pt(t%n,r),r=pt(-1/0,r)}return r}var vt={type:Pe},yt={type:Se};function bt(e){return ut(e),{type:De,parts:e}}function xt(e,t={}){return ct(e),lt(t.expandedStates,!0),{type:Ee,id:t.id,contents: ...

8`,Ht=`

9`;function Ut(e){return e===Rt?Bt:e===zt?Vt:Ht}var Wt=()=>/[#*0-9]\uFE0F?\u20E3|[\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23ED-\u23EF\u23F1\u23F2\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB\u25FC\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u2620\u2622\u2623\u2626\u262A\u262E\u262F\u2638-\u263A\u2640\u2642\u2648-\u2653\u265F\u2660\u2663\u2665\u2666\u2668\u267B\u267E\u267F\u2692\u2694-\u2697\u2699\u269B\u269C\u26A0\u26A7\u26AA\u26B0\u26B1\u26BD\u26BE\u26C4\u26C8\u26CF\u26D1\u26E9\u26F0-\u26F5\u26F7\u26F8\u26FA\u2702\u2708\u2709\u270F\u2712\u271 ...

10`?d:Lt(0,d,`

11`,i);e&&(l.write(e),o.length>0&&(a+=ln(e)));break}case xe:for(let t=d.length-1;t>=0;t--)o.push({indent:e,mode:u,doc:d[t]});break;case Se:l.markPosition();break;case Ce:o.push({indent:yn(e,t),mode:u,doc:d.contents});break;case we:o.push({indent:vn(e,d.n,t),mode:u,doc:d.contents});break;case Te:a-=l.trim();break;case Ee:{let t=(function(){if(u===wn&&!s)return{indent:e,mode:d.break?Cn:wn,doc:d.contents};s=!1;let t=r-a,i=c.length>0,l={indent:e,mode:wn,doc:d.contents};if(!d.break&&En(l,o,t,i,n))return l;if(!d.expandedStates)return{indent:e,mode:Cn,doc:d.contents};if(!d.break)for(let r=1;r<d.expande ...

12`,CHAR_NO_BREAK_SPACE:`\xA0`,CHAR_PERCENT:`%`,CHAR_PLUS:`+`,CHAR_QUESTION_MARK:`?`,CHAR_RIGHT_ANGLE_BRACKET:`>`,CHAR_RIGHT_CURLY_BRACE:`}`,CHAR_RIGHT_SQUARE_BRACKET:`]`,CHAR_SEMICOLON:`;`,CHAR_SINGLE_QUOTE:`'`,CHAR_SPACE:` `,CHAR_TAB:` `,CHAR_UNDERSCORE:`_`,CHAR_VERTICAL_LINE:`|`,CHAR_ZERO_WIDTH_NOBREAK_SPACE:``}}}),cr=V({"node_modules/braces/lib/parse.js"(e,t){var n=tr(),{MAX_LENGTH:r,CHAR_BACKSLASH:i,CHAR_BACKTICK:a,CHAR_COMMA:o,CHAR_DOT:s,CHAR_LEFT_PARENTHESES:c,CHAR_RIGHT_PARENTHESES:l,CHAR_LEFT_CURLY_BRACE:u,CHAR_RIGHT_CURLY_BRACE:d,CHAR_LEFT_SQUARE_BRACKET:f,CHAR_RIGHT_SQUARE_BRACKET:p, ...

13`))&&(e=e.trim()),(!n.newlineIsToken||!t.includes(`

14`))&&(t=t.trim())):n.ignoreNewlineAtEof&&!n.newlineIsToken&&(e.endsWith(`

15`)&&(e=e.slice(0,-1)),t.endsWith(`

16`)&&(t=t.slice(0,-1))),super.equals(e,t,n)}};function oa(e,t,n){return aa.diff(e,t,n)}function sa(e,t){t.stripTrailingCr&&(e=e.replace(/\r\n/g,`

17`));let n=[],r=e.split(/(\n|\r\n)/);r[r.length-1]||r.pop();for(let e=0;e<r.length;e++){let i=r[e];e%2&&!t.newlineIsToken?n[n.length-1]+=i:n.push(i)}return n}var ca=new class extends ia{tokenize(e){return e.slice()}join(e){return e}removeEmpty(e){return e}};function la(e,t,n){return ca.diff(e,t,n)}function ua(e){for(let t=0;t<e.length;t++)if(e[t]<` `||e[t]>`~`||e[t]===`"`||e[t]===`\\`)return!0;return!1}function da(e){if(!ua(e))return e;let t=`"`,n=new TextEncoder().encode(e),r=0;for(;r<n.length;){let e=n[r];e===7?t+=`\\a`:e===8?t+=`\\b`:e===9?t+=`\\t`:e===10?t+=`\\n`:e===11?t+=`\\v`:e===12?t+=` ...

18`)?e.lines[t]=e.lines[t].slice(0,-1):(e.lines.splice(t+1,0,`\\ No newline at end of file`),t++);return{oldFileName:e,newFileName:t,oldHeader:i,newHeader:a,hunks:o}}}function ma(e,t){if(t||=fa,Array.isArray(e)){if(e.length>1&&!t.includeFileHeaders&&!e.every(e=>e.isGit))throw Error(`Cannot omit file headers on a multi-file patch. (The result would be unparseable; how would a tool trying to apply the patch know which changes are to which file?)`);return e.map(e=>ma(e,t)).join(`

19`)}let n=[];if(e.isGit){if(t=fa,!e.oldFileName)throw Error(`oldFileName must be specified for Git patches`);if(!e.newFileName)throw Error(`newFileName must be specified for Git patches`);let r=e.oldFileName,i=e.newFileName;e.isCreate&&r===`/dev/null`?r=i.replace(/^b\//,`a/`):e.isDelete&&i===`/dev/null`&&(i=r.replace(/^a\//,`b/`)),n.push(`diff --git `+da(r)+` `+da(i)),e.isDelete&&n.push(`deleted file mode `+(e.oldMode??`100644`)),e.isCreate&&n.push(`new file mode `+(e.newMode??`100644`)),e.oldMode&&e.newMode&&!e.isDelete&&!e.isCreate&&(n.push(`old mode `+e.oldMode),n.push(`new mode `+e.newMode) ...

20`)+`

21`}function ha(e,t,n,r,i,a,o){if(typeof o==`function`&&(o={callback:o}),o?.callback){let{callback:s}=o;pa(e,t,n,r,i,a,Object.assign(Object.assign({},o),{callback:e=>{s(e?ma(e,o.headerOptions):void 0)}}))}else{let s=pa(e,t,n,r,i,a,o);return s?ma(s,o?.headerOptions):void 0}}function ga(e){let t=e.endsWith(`

Long lines were clipped for display.

•Trigger-reachable chain: manifest.exports -> dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.mjsView on unpkg

dist/yaml-CAMz1DEp.mjsView file

Lines 111-151javascript

111`)&&(n+=r>t?e.slice(t,r+1):i)}else n+=i}return(e[e.length-1]!==`"`||e.length===1)&&t(e.length,`MISSING_CHAR`,`Missing closing "quote`),n}function va(e,t){let n=``,r=e[t+1];for(;(r===` `||r===` `||r===`

112`||r===`\r`)&&!(r===`\r`&&e[t+2]!==`

113`);)r===`

114`&&(n+=`

115`),t+=1,r=e[t+1];return n||=` `,{fold:n,offset:t}}var ya={0:`\0`,a:`\x07`,b:`\b`,e:`

Source & flagged code

5 flagged · loading source

dist/flow-Dt9d_f4q.mjsView file

3patternName = aws_access_key severity = critical line = 3 matchedText = var e=Ob...it(`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/flow-Dt9d_f4q.mjsView on unpkg · L3

3patternName = aws_access_key severity = critical line = 3 matchedText = var e=Ob...it(`

Critical

Secret Pattern

AWS access key ID in dist/flow-Dt9d_f4q.mjs

dist/flow-Dt9d_f4q.mjsView on unpkg · L3

dist/index.mjsView file

•Trigger-reachable chain: manifest.exports -> dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.mjsView on unpkg

1import { createRequire as topLevelCreateRequire } from 'module'; L2: const require = topLevelCreateRequire(import.meta.url); L3: import*as e from"@clack/prompts";import{spinner as t}from"@clack/prompts";import{Command as n}from"commander";import{existsSync as r,mkdirSync as i,readFileSync as a}from"node:fs";...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L1

dist/yaml-CAMz1DEp.mjsView file

131contains invisible/control Unicode U+FEFF (zero width no-break space) `};delete e.items,Object.assign(e,{type:n,source:t,end:[r]});break}default:{let r=`indent`in e?e.indent:-1,i=`end`in e&&Array.isArray(e.end)?e.end.filter(e=>e.type===`space`||e.type===`comment`||e.type===`newline`):[];for(let t of Object.ke

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/yaml-CAMz1DEp.mjsView on unpkg · L131

Findings

4 Critical3 Medium5 Low

CriticalCritical Secretdist/flow-Dt9d_f4q.mjs

CriticalTrojan Source Unicodedist/yaml-CAMz1DEp.mjs

CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs

CriticalSecret Patterndist/flow-Dt9d_f4q.mjs

MediumDynamic Requiredist/index.mjs

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/flow-Dt9d_f4q.mjsView file

3patternName = aws_access_key severity = critical line = 3 matchedText = var e=Ob...it(`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/flow-Dt9d_f4q.mjsView on unpkg · L3

3patternName = aws_access_key severity = critical line = 3 matchedText = var e=Ob...it(`

Critical

Secret Pattern

AWS access key ID in dist/flow-Dt9d_f4q.mjs

dist/flow-Dt9d_f4q.mjsView on unpkg · L3

dist/index.mjsView file

Lines 1-21javascript

1import { createRequire as topLevelCreateRequire } from 'module';

2 const require = topLevelCreateRequire(import.meta.url);

8`,Ht=`

10`?d:Lt(0,d,`

13`))&&(e=e.trim()),(!n.newlineIsToken||!t.includes(`

14`))&&(t=t.trim())):n.ignoreNewlineAtEof&&!n.newlineIsToken&&(e.endsWith(`

15`)&&(e=e.slice(0,-1)),t.endsWith(`

16`)&&(t=t.slice(0,-1))),super.equals(e,t,n)}};function oa(e,t,n){return aa.diff(e,t,n)}function sa(e,t){t.stripTrailingCr&&(e=e.replace(/\r\n/g,`

20`)+`

Long lines were clipped for display.

•Trigger-reachable chain: manifest.exports -> dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.mjsView on unpkg

dist/yaml-CAMz1DEp.mjsView file

Lines 111-151javascript

112`||r===`\r`)&&!(r===`\r`&&e[t+2]!==`

113`);)r===`

114`&&(n+=`

115`),t+=1,r=e[t+1];return n||=` `,{fold:n,offset:t}}var ya={0:`\0`,a:`\x07`,b:`\b`,e:`