registry / @fathnakbar/devops-cli / 1.0.2

@fathnakbar/devops-cli@1.0.2

DevOps multi-server deployment, Portainer stack orchestration, and environment management CLI

AI Security Review

scanned 6d ago · by lpm-firewall-ai

Source inspection found a CLI with a publish-only build hook and Portainer API requests using the URL and token provided during server setup. The scanner’s credential finding is consistent with this configured client behavior; no unrelated credential recipient or concrete attack was identified.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

A user runs the CLI and invokes a command that connects to a configured server.

Impact

No unrelated credential transfer or other confirmed attack behavior was found in the inspected source.

Mechanism

The CLI sends the configured API token to that server’s Portainer API.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes the bundled CLI; its only lifecycle hook builds the bundle before publishing.
The Portainer client sends its API token to the configured base URL.
Server setup prompts for the Portainer URL and token, then tests that connection.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 322 KB of source, external domains: api.example.com, api.staging.example.com, portainer.example.com

Source & flagged code

4 flagged

dist/index.jsView file

Lines 2400-2440javascript

2400 test: /^/,

2401 resolve(str, onError) {

2402 onError(`Unresolved plain scalar ${JSON.stringify(str)}`);

2403 return str;

2404 }

2405 };

2406 var schema = [map.map, seq.seq].concat(jsonScalars, jsonError);

2407 exports.schema = schema;

2408});

2409

2410// node_modules/yaml/dist/schema/yaml-1.1/binary.js

2411var require_binary = __commonJS((exports) => {

2412 var node_buffer = __require("buffer");

2413 var Scalar = require_Scalar();

2414 var stringifyString = require_stringifyString();

2415 var binary = {

2416 identify: (value) => value instanceof Uint8Array,

2417 default: false,

2418 tag: "tag:yaml.org,2002:binary",

2419 resolve(src, onError) {

2420 if (typeof node_buffer.Buffer === "function") {

2421 return node_buffer.Buffer.from(src, "base64");

2422 } else if (typeof atob === "function") {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L2420

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L2420

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L2420

2423 const str = atob(src.replace(/[\n\r]/g, ""));

2424 const buffer = new Uint8Array(str.length);

2425 for (let i = 0;i < str.length; ++i)

2426 buffer[i] = str.charCodeAt(i);

2427 return buffer;

2428 } else {

2429 onError("This environment does not support reading binary tags; either Buffer or atob is required");

2430 return src;

2431 }

2432 },

2433 stringify({ comment, type, value }, ctx, onComment, onChompKeep) {

2434 if (!value)

2435 return "";

2436 const buf = value;

2437 let str;

2438 if (typeof node_buffer.Buffer === "function") {

2439 str = buf instanceof node_buffer.Buffer ? buf.toString("base64") : node_buffer.Buffer.from(buf.buffer).toString("base64");

2440 } else if (typeof btoa === "function") {

•matchType = normalized_sha256 matchedPackage = @fathnakbar/devops-cli@1.0.3 matchedPath = dist/index.js matchedIdentity = npm:QGZhdGhuYWtiYXIvZGV2b3BzLWNsaQ:1.0.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/index.jsView file

2420if (typeof node_buffer.Buffer === "function") { L2421: return node_buffer.Buffer.from(src, "base64"); L2422: } else if (typeof atob === "function") { ... L4882: yield* this.next(token); L4883: yield* this.end(forceDoc, endOffset); L4884: } L4885: *next(token) { L4886: if (node_process.env.LOG_STREAM) L4887: console.dir(token, { depth: null }); ... L7004: ]; L7005: function findComposeFile(customPath, cwd = process.cwd()) { L7006: if (customPath) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/index.jsView on unpkg · L2420

2420Trigger-reachable chain: manifest.main -> dist/index.js L2420: if (typeof node_buffer.Buffer === "function") { L2421: return node_buffer.Buffer.from(src, "base64"); L2422: } else if (typeof atob === "function") { ... L4882: yield* this.next(token); L4883: yield* this.end(forceDoc, endOffset); L4884: } L4885: *next(token) { L4886: if (node_process.env.LOG_STREAM) L4887: console.dir(token, { depth: null }); ... L7004: ]; L7005: function findComposeFile(customPath, cwd = process.cwd()) { L7006: if (customPath) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L2420

2420

Findings

2 Critical2 High3 Medium5 Low

CriticalCredential Exfiltrationdist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

HighTrigger Reachable Credential Exfiltrationdist/index.js

HighKnown Malware Source Similaritydist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @fathnakbar/devops-cli@1.0.2.

See all versions of @fathnakbar/devops-cli for other recorded verdicts.

Review the evidence and your use of @fathnakbar/devops-cli@1.0.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 12:42:16.656Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.