registry / @iga-pages/cli / 1.1.9
@iga-pages/cli@1.1.9
A CLI tool for IGA Pages
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found no install lifecycle hook or concrete malicious behavior. The observed network request is a package-aligned update check activated by the version option.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs the iga command, including its version option.
Impact
No unconsented install-time execution, credential exfiltration, persistence, or destructive behavior was identified.
Mechanism
The entrypoint builds command handlers; the version option checks the package's npm latest-version metadata.
AI rationale
Static inspection found no install lifecycle hook or concrete malicious behavior. The observed network request is a package-aligned update check activated by the version option.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entrypoint and contains no npm install lifecycle hook.
- The bundled entrypoint constructs an iga command-line program and registers user-invoked commands.
- Its only observed automatic network check fetches this package's npm latest-version endpoint with a three-second timeout.
Evidence against
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Oversized source lightweight scan
dist/index.js4.35 MB file, sampled 256 KB
FilesystemNetworkEnvironmentVars
Source & flagged code
12 flaggeddist/index.jsView file
112node_major: process.versions.node.split(".")[0],
L113: os: process.platform,
L114: arch: process.arch,
L115: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L116: invocation_type: context.invocation_type,
...
L390: }
L391: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L392: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L535: "passwd",
L536: "privatekey",
L537: "secret",
...
L759: const node_crypto_1 = __webpack_require__("node:crypto");
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L112112node_major: process.versions.node.split(".")[0],
L113: os: process.platform,
L114: arch: process.arch,
L115: interaction_mode: command.metadata.interactionMode ?? (true === process.stdin.isTTY && true === process.stdout.isTTY ? "interactive" : "non-interactive"),
L116: invocation_type: context.invocation_type,
...
L390: }
L391: function resolveInvocationContext({ cliName, cliVersion, env = process.env, stdinIsTTY = true === process.stdin.isTTY, stdoutIsTTY = true === process.stdout.isTTY }) {
L392: const skill = normalizeSkillId(env.VE_SKILL_ID);
...
L535: "passwd",
L536: "privatekey",
L537: "secret",
...
L759: const node_crypto_1 = __webpack_require__("node:crypto");
Critical
Download Execute
Source downloads or fetches remote code and executes it.
Findings
3 Critical7 High4 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalDownload Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighEvaldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source File
Affected versions and remediation
This report applies to @iga-pages/cli@1.1.9.
See all versions of @iga-pages/cli for other recorded verdicts.
- Review the evidence and your use of @iga-pages/cli@1.1.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.