registry / @iga-pages/cli / 1.1.10
@iga-pages/cli@1.1.10
A CLI tool for IGA Pages
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package is a Volcengine IGA Pages CLI whose network, credential, and shell behavior is tied to explicit user commands and vendor services. There is no install lifecycle, self-dependency, or covert exfiltration chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the iga binary, which loads dist/index.js and starts the commander program.
Impact
No unconsented install mutation, secret theft, remote payload, or foreign agent-control write was found.
Mechanism
Commands talk to Volcengine services, write credentials under the home .iga directory, and may POST filtered command metadata unless telemetry is disabled.
AI rationale
The package is a Volcengine IGA Pages CLI whose network, credential, and shell behavior is tied to explicit user commands and vendor services. There is no install lifecycle, self-dependency, or covert exfiltration chain.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the iga bin and dist/index.js and defines only build and test scripts, with no install lifecycle hooks.
- dist/functions-runtime.js spawnCommand runs a supplied command through cmd.exe or sh for the functions runtime.
- CLI telemetry is created with accessKey, secretKey, and value marked sensitive and is disabled when IGA_PAGES_TELEMETRY_DISABLED is 1.
- Login state is stored under the user home .iga directory and the commander program runs only from the CLI entry.
Evidence against
- No preinstall, install, or postinstall script is present.
- Telemetry endpoints belong to the Volcengine/ByteDance product and credential field names are filtered before reporting.
- Shell execution is a named helper for user project commands, not an install-time payload.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
12 flaggeddist/functions-runtime.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @iga-pages/cli@1.1.9
matchedIdentity = npm:QGlnYS1wYWdlcy9jbGk:1.1.9
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/functions-runtime.jsView on unpkg11357exports1.execCommand = execCommand;
L11358: const child_process_1 = __webpack_require__("child_process");
L11359: function spawnCommand(command, opts = {}) {
High
Child Process
Package source references child process execution.
dist/functions-runtime.jsView on unpkg · L11357dist/index.jsView file
112node_major: process.versions.node.split(".")[0],
L113: os: process.platform,
L114: arch: process.arch,
L115: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L116: invocation_type: context.invocation_type,
...
L390: }
L391: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L392: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L535: "passwd",
L536: "privatekey",
L537: "secret",
...
L759: const node_crypto_1 = __webpack_require__("node:crypto");
Findings
3 Critical7 High4 Medium5 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/functions-runtime.js
HighChild Processdist/functions-runtime.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.10.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.