Loading npm security reports…

@ikie-dev/cli: Suspicious npm security report (Warn) | LPM Firewall

registry / @ikie-dev/cli / 9.9.4

@ikie-dev/cli@9.9.4

ikie — a coding agent CLI powered by ikie AI

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 20 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 993 file(s), 8.00 MB of source, external domains: 0.com, 1.com, 10.0.0.1, 10.255.255.255, 127.0.0.1, 127.0.0.2, 169.254.1.1, 169.254.169.254, 172.15.0.1, 172.16.0.1, 172.20.0.1, 172.31.255.255, 172.32.0.1, 192.168.1.1, 2.com, 8.8.8.8, a.com, ad.example.com, ads.example.com, api.anthropic.com, api.cast.ai, api.example.com, api.github.com, api.openai.com, api.test.example.com, b.com, c.com, custom.example, custom.example.com, custom.ikie.example, d.com, docs.anthropic.com, evil.corp, evil.sh, example.com, external.example.com, from-env.example.com, from-opt.example.com, gist.github.com, github.com, gitlab.com, gitlab.internal.io, global.example.com, gpu-box.lan, h.example.com, host.example.com, ikie-cli.xyz, json-schema.org, llm.ikie.dev, llm.test

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-ai-oauth.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

tests/smoke/ferment-oneshot-exit.test.tsView file

1import { spawn } from "node:child_process" L2: import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs"

High

Child Process

Package source references child process execution.

tests/smoke/ferment-oneshot-exit.test.tsView on unpkg · L1

scripts/package-release-asset.jsView file

24execFileSync( L25: "powershell.exe", L26: [

High

Shell

Package source references shell execution.

scripts/package-release-asset.jsView on unpkg · L24

scripts/prepublish-npm.jsView file

17if (existsSync(copyResources)) { L18: await import(copyResources) L19: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/prepublish-npm.jsView on unpkg · L17

vendor/superpowers/skills/brainstorming/scripts/server.cjsView file

1const crypto = require('crypto'); L2: const http = require('http'); L3: const fs = require('fs'); ... L11: function computeAcceptKey(clientKey) { L12: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64'); L13: } ... L75: L76: const PORT = process.env.BRAINSTORM_PORT || (49152 + Math.floor(Math.random() * 16383)); L77: const HOST = process.env.BRAINSTORM_HOST || '127.0.0.1'; ... L100: L101: const frameTemplate = fs.readFileSync(path.join(__dirname, 'frame-template.html'), 'utf-8'); L102: const helperScript = fs.readFileSync(path.join(__dirname, 'helper.js'), 'utf-8');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg · L1

src/config/shell-profile.test.tsView file

21beforeEach(() => { L22: // macOS's per-process tmpdir resolves through /private — realpath now so L23: // the assertions about returned paths line up with what the writer sees ... L25: tmp = realpathSync(mkdtempSync(join(tmpdir(), "ikie-shell-test-"))) L26: prevHome = process.env.HOME L27: prevShell = process.env.SHELL ... L40: L41: it("appends export to .zshrc, preserving existing lines", () => { L42: process.env.SHELL = "/bin/zsh" ... L125: process.env.SHELL = "/bin/zsh" L126: writeFileSync(join(tmp, ".zshrc"), Buffer.from([0xff, 0xfe, 0x80, 0x81])) L127:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/config/shell-profile.test.tsView on unpkg · L21

src/resources/rtk-install.tsView file

1import { execFileSync } from "node:child_process" L2: import { createHash } from "node:crypto" ... L21: L22: const LATEST_RELEASE_URL = "https://api.github.com/repos/rtk-ai/rtk/releases/latest" L23: const AUTO_INSTALL_INTERVAL_MS = 24 * 60 * 60 * 1000 ... L42: export function managedRtkPath(): string { L43: return join(rtkInstallDir(), process.platform === "win32" ? "rtk.exe" : "rtk") L44: } ... L51: const bin = globalBinDir() L52: const entries = (process.env.PATH ?? "").split(delimiter).filter(Boolean) L53: if (!entries.includes(bin)) process.env.PATH = [bin, ...entries].join(delimiter) ... L139: function rtkInstallDir(): string {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/resources/rtk-install.tsView on unpkg · L1

src/extensions/web-fetch/url-validator.tsView file

3* L4: * Validates URL format (http/https only) and blocks requests to private L5: * IP ranges, localhost, and cloud metadata endpoints. ... L127: if (v4MappedDecimal) { L128: const innerResult = validateURL(`http://${v4MappedDecimal[1]}/`) L129: if (!innerResult.valid) {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/extensions/web-fetch/url-validator.tsView on unpkg · L3

vendor/superpowers/tests/brainstorm-server/server.test.jsView file

3Cross-file remote execution chain: [redacted]-server/server.test.js spawns [redacted].js; helper contains network access plus dynamic code execution. L3: * L4: * Tests the full server behavior: HTTP serving, WebSocket communication, L5: * file watching, and the brainstorming workflow. ... L10: L11: const { spawn } = require('child_process'); L12: const http = require('http'); ... L17: L18: const SERVER_PATH = path.join(__dirname, '../../[redacted].cjs'); L19: const TEST_PORT = 3334; ... L41: headers: res.headers, L42: body: data L43: }));

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

vendor/superpowers/tests/brainstorm-server/server.test.jsView on unpkg · L3

benchmark/manual/new-session.shView file

•path = benchmark/manual/new-session.sh kind = build_helper sizeBytes = 6823 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

benchmark/manual/new-session.shView on unpkg

vendor/superpowers/tests/claude-code/test-subagent-driven-development.shView file

•path = vendor/superpowers/tests/claude-code/test-subagent-driven-development.sh kind = payload_in_excluded_dir sizeBytes = 4553 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

vendor/superpowers/tests/claude-code/test-subagent-driven-development.shView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 81-104json

81 "build:proxy-helper": "node scripts/build-proxy-helper.js",

82 "build:binary": "node scripts/build-binary.js",

83 "install:local": "node scripts/install-local.js",

84 "build:binary-linux-arm64": "node scripts/build-binary.js --target linux-arm64",

85 "build:binary-linux-x64": "node scripts/build-binary.js --target linux-x64",

86 "build:binary-windows-x64": "node scripts/build-binary.js --target windows-x64",

87 "dev": "make -C tools/proxy-helper/ copy-for-dev && bun run --preload ./src/set-package-dir.ts src/entry.ts",

88 "dev:overlay": "scripts/dev-overlay.sh",

89 "dev:setup": "bun run --preload ./src/set-package-dir.ts src/entry.ts setup",

90 "lint": "biome check src/ scripts/",

91 "lint:fix": "biome check --write src/ scripts/",

92 "typecheck": "tsc --noEmit",

93 "check": "pnpm run lint && pnpm run typecheck",

94 "test": "vitest run --dir src",

95 "test:smoke": "vitest run --config tests/smoke/vitest.config.ts",

96 "test:e2e:tui": "pnpm run build:binary && node scripts/run-tui-e2e.js",

97 "test:e2e:tui:debug": "pnpm run build:binary && node scripts/run-tui-e2e.js --debug",

98 "test:e2e:tui:trace": "pnpm run build:binary && node scripts/run-tui-e2e.js --trace",

99 "test:e2e:tui:trace:replay": "node scripts/run-tui-e2e.js replay",

100 "test:e2e:acp": "pnpm run build:binary && vitest run --config tests/e2e/acp/vitest.config.ts",

101 "postinstall": "node scripts/patch-pi-ai-oauth.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L101

102 "verify": "pnpm run check && pnpm run build:binary && pnpm run test && pnpm run test:smoke"

103 }

104}

tests/smoke/ferment-oneshot-exit.test.tsView file

Lines 1-21typescript

1import { spawn } from "node:child_process"

2import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs"

High

Child Process

Package source references child process execution.

tests/smoke/ferment-oneshot-exit.test.tsView on unpkg · L1

3import { tmpdir } from "node:os"

4import { join, resolve }

scripts/package-release-asset.jsView file

Lines 4-44javascript

4// node scripts/package-release-asset.js --os linux --arch amd64

5// node scripts/package-release-asset.js --os windows --arch amd64

6

7import { execFileSync } from "node:child_process"

8import { existsSync } from "node:fs"

9import { resolve } from "node:path"

10

scripts/prepublish-npm.jsView file

Lines 1-37javascript

1// Prepare the package for npm publication so it can run when installed globally.

2//

3// The published tarball needs:

4// - theme/dark.json, theme/light.json, theme/theme-schema.json

5// - src/modes/interactive/theme/<same theme files> (upstream pi-coding-agent looks there)

6// - src/core/export-html/<templates> (upstream pi-coding-agent looks there)

7// - package.json at the package root

8

9import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs"

vendor/superpowers/skills/brainstorming/scripts/server.cjsView file

Lines 1-21javascript

1const crypto = require('crypto');

2const http = require('http');

3const fs =

src/config/shell-profile.test.tsView file

Lines 1-41typescript

1import {

2 lstatSync,

3 mkdirSync,

4 mkdtempSync,

5 readFileSync,

6 realpathSync,

7 rmSync,

8 symlinkSync,

9 writeFileSync,

10} from "node:fs"

src/resources/rtk-install.tsView file

Lines 1-21typescript

1import { execFileSync } from "node:child_process"

2import { createHash } from "node:crypto"

3import {

4 copyFileSync,

5 existsSync,

6 mkdirSync,

7 mkdtempSync,

8 readFileSync,

src/extensions/web-fetch/url-validator.tsView file

Lines 1-23typescript

1/**

2 * URL validation and SSRF protection for the web_fetch tool.

3 *

4 * Validates URL format (http/https only) and blocks requests to private

5 * IP ranges, localhost, and cloud metadata endpoints.

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/extensions/web-fetch/url-validator.tsView on unpkg · L3

6 */

7

8/** Private IPv4 ranges that must be blocked. */

9

vendor/superpowers/tests/brainstorm-server/server.test.jsView file

3Cross-file remote execution chain: [redacted]-server/server.test.js spawns [redacted].js; helper contains network access plus dynamic code execution. L3: * L4: * Tests the full server behavior: HTTP serving, WebSocket communication, L5: * file watching, and the brainstorming workflow. ... L10: L11: const { spawn } = require('child_process'); L12: const http = require('http'); ... L17: L18: const SERVER_PATH = path.join(__dirname, '../../[redacted].cjs'); L19: const TEST_PORT = 3334; ... L41: headers: res.headers, L42: body: data L43: }));

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

vendor/superpowers/tests/brainstorm-server/server.test.jsView on unpkg · L3

benchmark/manual/new-session.shView file

•path = benchmark/manual/new-session.sh kind = build_helper sizeBytes = 6823 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

benchmark/manual/new-session.shView on unpkg

vendor/superpowers/tests/claude-code/test-subagent-driven-development.shView file

•path = vendor/superpowers/tests/claude-code/test-subagent-driven-development.sh kind = payload_in_excluded_dir sizeBytes = 4553 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

vendor/superpowers/tests/claude-code/test-subagent-driven-development.shView on unpkg