registry / @iga-pages/cli / 1.1.12
@iga-pages/cli@1.1.12
A CLI tool for IGA Pages
AI Security Review
scanned 25d ago · by lpm-firewall-aiDirect inspection found no install hook or concrete attack chain. The network calls are vendor command telemetry, and the flagged eval is used by protobufjs for dynamic module lookup; the scanner's malicious label is not supported by these source facts.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Telemetry reports after a valid CLI command completes; the eval helper runs when protobufjs attempts dynamic module lookup.
Impact
The inspected behavior does not establish credential theft or remote code execution.
Mechanism
Telemetry serializes filtered command parameters and posts to vendor analytics endpoints. The eval expression reconstructs require to look up a module name.
AI rationale
Direct inspection found no install hook or concrete attack chain. The network calls are vendor command telemetry, and the flagged eval is used by protobufjs for dynamic module lookup; the scanner's malicious label is not supported by these source facts.
Network endpoints2
mcs.zijieapi.com/listsgali-mcs.byteoversea.com/list
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest routes execution through a CLI entrypoint and declares no install lifecycle hooks.
- The flagged network code sends command telemetry to vendor endpoints; telemetry can be disabled and serializes parameters through safe-field handling.
- The flagged eval occurs in protobufjs's dynamic module lookup helper.
Evidence against
- The inspected source did not establish credential redirection, remote payload execution, or an attack against package consumers.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Oversized source lightweight scan
Source & flagged code
11 flaggeddist/functions-runtime.jsView file
11357exports1.execCommand = execCommand;
L11358: const child_process_1 = __webpack_require__("child_process");
L11359: function spawnCommand(command, opts = {}) {
High
Child Process
Package source references child process execution.
dist/functions-runtime.jsView on unpkg · L11357dist/index.jsView file
112node_major: process.versions.node.split(".")[0],
L113: os: process.platform,
L114: arch: process.arch,
L115: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L116: invocation_type: context.invocation_type,
...
L390: }
L391: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L392: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L535: "passwd",
L536: "privatekey",
L537: "secret",
...
L759: const node_crypto_1 = __webpack_require__("node:crypto");
Critical
Download Execute
Source downloads or fetches remote code and executes it.
dist/index.jsView on unpkg · L112Findings
2 Critical7 High4 Medium5 Low
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/functions-runtime.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.js
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.12.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.