registry / @extenshi/cli / 0.14.1
@extenshi/cli@0.14.1
Pre-publish security scanner for browser extensions
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection shows transparent, package-aligned telemetry and scanning behavior, with a positive consent check for the postinstall network request. No concrete malicious chain, stealth persistence, credential exfiltration, remote payload execution, or AI-agent control-surface mutation was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm postinstall with prior telemetry consent, or an explicit extenshi command
Impact
Anonymous install telemetry may be sent after prior opt-in; user-selected artifacts are submitted for scanning.
Mechanism
consent-gated telemetry and user-invoked API requests
AI rationale
Source inspection shows transparent, package-aligned telemetry and scanning behavior, with a positive consent check for the postinstall network request. No concrete malicious chain, stealth persistence, credential exfiltration, remote payload execution, or AI-agent control-surface mutation was found.
Evidence
package.jsonscripts/postinstall.cjsdist/cli.jsdist/scan.jsdist/config.jsdist/telemetry.jsdist/telemetry-consent.jsdist/auto-update.js
Network endpoints4
eu.i.posthog.com/i/v0/e/registry.npmjs.org/@extenshi/cli/latestscan.extenshi.io/api/v1/scanbff.extenshi.io
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Postinstall can send a consent-gated anonymous install event to PostHog.
- The explicit scan command reads and uploads the user-selected extension artifact.
- Interactive runtime telemetry prompts before its first event.
Evidence against
- Postinstall exits unless existing config records telemetry as true.
- No install-time shell execution, remote code loading, agent-control writes, or destructive behavior found.
- Auto-update only fetches npm version metadata; it does not download or execute updates.
- Network use is package-aligned telemetry, login, catalog, and scanning functionality.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/review-checks.jsView file
251// A pre-publish "will the store reject this?" gate must only flag what the
L252: // developer can act on AND what the store actually rejects. eval()/new Function()
L253: // and dynamic-<script> patterns inside a bundled third-party library (webpack
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/review-checks.jsFindings
2 High5 Medium8 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltadist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/auto-update.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/review-checks.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @extenshi/cli@0.14.1.
See all versions of @extenshi/cli for other recorded verdicts.
- Review the evidence and your use of @extenshi/cli@0.14.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.