registry / @iga-pages/cli / 1.1.8
@iga-pages/cli@1.1.8
A CLI tool for IGA Pages
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection found a bundled deployment CLI, not an install-time payload or remote-code execution chain. Scanner matches stem from bundled dependencies, normal CLI telemetry, and platform authentication behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the iga command or requests a platform operation.
Impact
The CLI can send command telemetry and use configured Volcengine credentials for requested service actions.
Mechanism
User-invoked deployment CLI with telemetry and authenticated API access.
AI rationale
Static inspection found a bundled deployment CLI, not an install-time payload or remote-code execution chain. Scanner matches stem from bundled dependencies, normal CLI telemetry, and platform authentication behavior.
Network endpoints3
mcs.zijieapi.com/listsgali-mcs.byteoversea.com/listregistry.npmjs.org/@iga-pages/cli/latest
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a user-invoked CLI and contains no install lifecycle hook.
- The bundled CLI posts command telemetry to vendor endpoints.
- The CLI reads Volcengine credentials to authenticate requested platform API operations.
Evidence against
- No preinstall, install, or postinstall script is present.
- The telemetry configuration marks access keys, secret keys, and values as sensitive parameters.
- The reported dynamic evaluation is bundled protobuf dependency code; no remote response is evaluated or executed.
- Shell and child-process use supports explicitly invoked project build, development, and function commands.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
13 flaggeddist/index.jsView file
112node_major: process.versions.node.split(".")[0],
L113: os: process.platform,
L114: arch: process.arch,
L115: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L116: invocation_type: context.invocation_type,
...
L390: }
L391: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L392: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L535: "passwd",
L536: "privatekey",
L537: "secret",
...
L759: const node_crypto_1 = __webpack_require__("node:crypto");
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L112112node_major: process.versions.node.split(".")[0],
L113: os: process.platform,
L114: arch: process.arch,
L115: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L116: invocation_type: context.invocation_type,
...
L390: }
L391: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L392: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L535: "passwd",
L536: "privatekey",
L537: "secret",
...
L759: const node_crypto_1 = __webpack_require__("node:crypto");
Critical
Download Execute
Source downloads or fetches remote code and executes it.
Findings
4 Critical7 High4 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumNetwork
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.8.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.