@extenshi/cli@0.18.0
Pre-publish security scanner for browser extensions
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo malicious payload execution, secret harvesting, self-dependency chain, or broad control-surface mutation was found. However, an automatic postinstall telemetry hook with persistent identification and default-on runtime consent warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm installation on a machine with telemetry already enabled; or an explicit extenshi scan command
Impact
Persistent install tracking after recorded consent; selected extension contents and scan credentials leave the machine when scanning.
Mechanism
postinstall telemetry and user-invoked artifact upload
AI rationale
No malicious payload execution, secret harvesting, self-dependency chain, or broad control-surface mutation was found. However, an automatic postinstall telemetry hook with persistent identification and default-on runtime consent warrants a warning.
Evidence
scripts/postinstall.cjsdist/telemetry-consent.jsdist/cli.js~/.extenshi/config.jsondist/scan.js
Network endpoints2
eu.i.posthog.comscan.extenshi.io
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Installation automatically runs a package script.
- That script reads a home-directory configuration, can create a persistent anonymous identifier, and posts an install event.
- The telemetry prompt accepts an empty response as enabled.
- The CLI uploads a supplied extension artifact and API key to its scan service.
Evidence against
- The install script exits unless the existing configuration has telemetry set to true.
- No self-dependency, shell payload download, code evaluation, or foreign agent-control-surface mutation was found.
- Artifact upload occurs only through the explicit scan command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/review-checks.jsView file
252// A pre-publish "will the store reject this?" gate must only flag what the
L253: // developer can act on AND what the store actually rejects. eval()/new Function()
L254: // and dynamic-<script> patterns inside a bundled third-party library (webpack
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/review-checks.jsFindings
3 High5 Medium8 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/auto-update.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/review-checks.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @extenshi/cli@0.18.0.
See all versions of @extenshi/cli for other recorded verdicts.
- Review the evidence and your use of @extenshi/cli@0.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.