registry / @iga-pages/cli / 1.1.7
@iga-pages/cli@1.1.7
A CLI tool for IGA Pages
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a user-invoked deployment CLI with default telemetry, but the inspected source masks secret-bearing fields and contains no lifecycle hook, hidden persistence, or confirmed credential exfiltration. The flagged dynamic evaluation is a bundled protobuf dependency pattern rather than a remote-code path.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running an iga command.
Impact
Command and runtime metadata may be sent to the telemetry service; no credential harvesting or remote payload execution was confirmed.
Mechanism
Command telemetry reporting with parameter redaction.
AI rationale
This is a user-invoked deployment CLI with default telemetry, but the inspected source masks secret-bearing fields and contains no lifecycle hook, hidden persistence, or confirmed credential exfiltration. The flagged dynamic evaluation is a bundled protobuf dependency pattern rather than a remote-code path.
Evidence
~/.iga/auth.json
Network endpoints2
mcs.zijieapi.comsgali-mcs.byteoversea.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The invoked CLI sends command telemetry to ByteDance endpoints by default.
- Telemetry includes command metadata and invocation context, creating a limited privacy surface.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Telemetry masks configured and common secret-bearing parameter names.
- Credentials are stored locally in a restricted-permission auth file.
- The eval use is bundled protobuf optional-module loading, not remote code execution.
- Child-process use supports explicit CLI build, development, and git actions; no hidden trigger was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
15 flaggeddist/index.jsView file
•Default external logging endpoint and rich-record POST in dist/index.js:
const CN_TEA_ENDPOINT = "https://mcs.zijieapi.com/list";
const SG_TEA_ENDPOINT = "https://sgali-mcs.byteoversea.com/list";
const REQUEST_TIMEOUT_MS = 1000;
const endpoint = "sg" === region ? SG_TEA_ENDPOINT : CN_TEA_ENDPOINT;
const response = await fetch(endpoint, {
signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
if (debug) debugLine(`request completed: HTTP ${response.status}`);
debugLine(`request failed: ${reason}`);
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg97node_major: process.versions.node.split(".")[0],
L98: os: process.platform,
L99: arch: process.arch,
L100: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L101: invocation_type: context.invocation_type,
...
L114: try {
L115: process.stderr.write(`[tooling-telemetry] ${message}\n`);
L116: } catch {}
...
L370: }
L371: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L372: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L514: "passwd",
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L97Findings
5 Critical8 High4 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Credential Exfiltration
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.7.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.