registry / @iga-pages/cli / 1.1.3
@iga-pages/cli@1.1.3
A CLI tool for IGA Pages
AI Security Review
scanned 3mo ago · by lpm-firewall-aiInspection found no lifecycle execution, secret harvesting, remote-code execution, or unconsented persistence. Scanner hits are explained by bundled dependencies and normal Volcengine CLI functionality; telemetry is sanitized and package-aligned.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs the iga CLI and selects a command.
Impact
May store Volcengine credentials in ~/.iga/auth.json and send sanitized command metadata to vendor telemetry endpoints.
Mechanism
User-invoked Pages management, local build execution, and bounded telemetry.
AI rationale
Inspection found no lifecycle execution, secret harvesting, remote-code execution, or unconsented persistence. Scanner hits are explained by bundled dependencies and normal Volcengine CLI functionality; telemetry is sanitized and package-aligned.
Evidence
package.jsonbin/iga.jsdist/index.jsREADME.md~/.iga/auth.json.iga/project.json.gitignore.env.local
Network endpoints5
mcs.zijieapi.com/listsgali-mcs.byteoversea.com/listregistry.npmjs.org/@iga-pages/cli/latestsignin.volcengine.com/authorize/oauth/authorizesignin.volcengine.com/authorize/oauth/token
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- dist/index.js sends CLI telemetry to mcs.zijieapi.com or sgali-mcs.byteoversea.com.
- dist/index.js invokes project build/dev commands only through explicit CLI commands.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- bin/iga.js only loads dist/index.js; commands are parsed from user argv.
- Telemetry excludes accessKey, secretKey, and value parameters.
- OAuth, deployment, env pull, and credential writes are explicit user-invoked CLI functions.
- Function constructor is bundled protobufjs code, not a package payload path.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Oversized source lightweight scan
Source & flagged code
11 flaggeddist/index.jsView file
34},
L35: "../../node_modules/.pnpm/@protobufjs+base64@1.1.2/node_modules/@protobufjs/base64/index.js" (__unused_rspack_module, exports1) {
L36: "use strict";
...
L221: if (!options.xhr && fs && fs.readFile) return fs.readFile(filename, function(err, contents) {
L222: return err && "u" > typeof XMLHttpRequest ? fetch1.xhr(filename, options, callback) : err ? callback(err) : callback(null, options.binary ? contents : contents.toString("utf8"));
L223: });
...
L245: xhr.open("GET", filename);
L246: xhr.send();
L247: };
...
L428: try {
L429: var mod = eval("quire".replace(/^/, "re"))(moduleName);
L430: if (mod && (mod.length || Object.keys(mod).length)) return mod;
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L3434},
L35: "../../node_modules/.pnpm/@protobufjs+base64@1.1.2/node_modules/@protobufjs/base64/index.js" (__unused_rspack_module, exports1) {
L36: "use strict";
...
L221: if (!options.xhr && fs && fs.readFile) return fs.readFile(filename, function(err, contents) {
L222: return err && "u" > typeof XMLHttpRequest ? fetch1.xhr(filename, options, callback) : err ? callback(err) : callback(null, options.binary ? contents : contents.toString("utf8"));
L223: });
...
L245: xhr.open("GET", filename);
L246: xhr.send();
L247: };
...
L428: try {
L429: var mod = eval("quire".replace(/^/, "re"))(moduleName);
L430: if (mod && (mod.length || Object.keys(mod).length)) return mod;
Critical
Command Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
Findings
5 Critical4 High4 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalCommand Output Exfiltrationdist/index.js
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighEvaldist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.js
Medium
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.3.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.