registry / @iga-pages/cli / 1.1.6
@iga-pages/cli@1.1.6
A CLI tool for IGA Pages
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner findings arise from bundled CLI telemetry, authenticated cloud API calls, and a dependency’s optional require pattern. Source inspection found no install hook, arbitrary file collection, remote code execution, or credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs an iga CLI command.
Impact
No unconsented credential harvesting, payload execution, or persistence was found.
Mechanism
User-invoked Pages deployment, authentication, and telemetry operations.
AI rationale
The scanner findings arise from bundled CLI telemetry, authenticated cloud API calls, and a dependency’s optional require pattern. Source inspection found no install hook, arbitrary file collection, remote code execution, or credential exfiltration.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall hook.
- The CLI sends command telemetry by default, but explicitly lists access keys, secret keys, and values as sensitive parameters.
- Telemetry serialization masks sensitive field names before reporting.
- The flagged eval is a bundled dependency’s optional module lookup, not downloaded code execution.
Evidence against
- No install-time execution or self-dependency exists.
- Network calls implement Volcengine API authentication, OAuth, telemetry, and an npm update check.
- Credential storage occurs only through explicit login commands.
- No source path harvests arbitrary files or sends environment contents to an external receiver.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggeddist/index.jsView file
•Default external logging endpoint and rich-record POST in dist/index.js:
const CN_TEA_ENDPOINT = "https://mcs.zijieapi.com/list";
const SG_TEA_ENDPOINT = "https://sgali-mcs.byteoversea.com/list";
const REQUEST_TIMEOUT_MS = 1000;
const endpoint = "sg" === region ? SG_TEA_ENDPOINT : CN_TEA_ENDPOINT;
const response = await fetch(endpoint, {
signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
if (debug) debugLine(`request completed: HTTP ${response.status}`);
debugLine(`request failed: ${reason}`);
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg97node_major: process.versions.node.split(".")[0],
L98: os: process.platform,
L99: arch: process.arch,
L100: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L101: invocation_type: context.invocation_type,
...
L114: try {
L115: process.stderr.write(`[tooling-telemetry] ${message}\n`);
L116: } catch {}
...
L370: }
L371: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L372: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L514: "passwd",
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L97Findings
4 Critical8 High4 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighSemantic Analysis Limited
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.6.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.