registry / @goldskycom/cli / 13.13.4
@goldskycom/cli@13.13.4
The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic review of the published files shows a Goldsky CLI with no install hooks; high-severity scanner hits are Prisma, AWS SDK, Conf, and an update notifier inside a user-invoked bundle. Those primitives are package-aligned, and the extra RPC/C2-like domains from the scanner are not present in source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the goldsky binary. npm install does not run package code.
Impact
No confirmed unconsented secret theft, remote payload execution, or install-time persistence.
Mechanism
Bundled CLI with vendor SDKs
AI rationale
Static review of the published files shows a Goldsky CLI with no install hooks; high-severity scanner hits are Prisma, AWS SDK, Conf, and an update notifier inside a user-invoked bundle. Those primitives are package-aligned, and the extra RPC/C2-like domains from the scanner are not present in source.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- Bundled Prisma client fetches https://unpkg.com/prisma package.json and resolves native query engines with eval("__dirname").
- Conf writes local JSON config and the AWS SDK includes IMDS and credential_process helpers.
- simple-update-notifier can query registry.npmjs.org and print a curl https://goldsky.com installer hint.
- The goldsky bin loads dist/index.js; there are no npm install lifecycle scripts.
Evidence against
- package.json has empty runtime dependencies and no preinstall, install, or postinstall hooks.
- Scanner hosts such as api.etherscan.io, api.thegraph.com, and install-turbo.goldsky.com are not in the package source.
- eval, child_process, and network use match Prisma 5.22, AWS SDK, Conf, yargs, and the update notifier, not a hidden dropper.
- README and notifier text identify this as the Goldsky CLI; no reviewer-directed social engineering.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
14 flaggeddist/index.jsView file
1Source sends the broad process environment to a literal external destination.
L1: "use strict";var zJe=Object.create;var oN=Object.defineProperty;var HJe=Object.getOwnPropertyDescriptor;var WJe=Object.getOwnPropertyNames;var KJe=Object.getPrototypeOf,YJe=Object....
L2: `:`
...
L4: `,i)}while(n!==-1);return s+=e.substr(i),s};Sme.exports={stringReplaceAll:uQe,stringEncaseCRLFWithFirstIndex:pQe}});var Cme=D((o_r,wme)=>{"use strict";var dQe=/(?:\\(u(?:[a-f\d]{4}...
L5: `],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function Eme(e){let t=e[0]==="u",r=e[1]==="{";return t&&!r&&e.length===5...
L6: `);return s!==-1&&(t=SQe(t,i,n,s)),n+t+i},Y7,Rme=(e,...t)=>{let[r]=t;if(!Ej(r)||!Ej(r.raw))return t.join(" ");let n=t.slice(1),i=[r.raw[0]];fo
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L11817L1818: `)}}}function vKe(e){let t=Math.floor(e);if(t<60)return Cf.default.dim(`00:${t<10?"0":""}${t}`);let r=Math.floor(t/60),n=t-r*60;return Cf.default.dim(`${r<10?"0":""}${r}:${n<10?"0"...
L1819: [ERROR]`),U),o.message(Cf.default.goldsky.red(O))});if(v){let O=await i(o,`abis/${f.normalizedName}.json`,JSON.stringify(v,null,2));c.add(O),g.abi=await cj(O)}else{o.message("Unabl...
...
L1831:
L1832: `)}}function ae(qn,df=!1){let Kf=(qn||"").split(",").map(Zu=>Zu.trim());return df?Kf:Kf.filter(Boolean)}function ft(qn){return qn.length<=2?qn.join(" and "):[qn.slice(0,-1).join(",...
L1833: The ${hj.default.bold("turbo")} binary is not installed.
Critical
Findings
3 Critical9 High4 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighCloud Metadata Accessdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
High
Affected versions and remediation
This report applies to @goldskycom/cli@13.13.4.
See all versions of @goldskycom/cli for other recorded verdicts.
- Review the evidence and your use of @goldskycom/cli@13.13.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.