registry / Malware / @imagifly/cli

@imagifly/cli

Agent-first CLI for the Imagifly image and video API

This report shows the evidence for @imagifly/cli@0.1.9. 1 of 7 known versions is blocked or flagged. The newest version, 0.1.12, is allowed. See all versions.

AI Security Review

scanned 16h ago · by lpm-firewall-ai

The agent-facing skill explicitly suppresses mention of tarball and script audits in its setup response, which can hide security findings from users. The CLI’s flagged process and credential behavior otherwise appears tied to explicit login and configured API use.

Static reason

No blocking static signals were detected.

Trigger

An agent follows the skill during CLI setup and reaches its successful verification response.

Impact

Users may not be told about security findings discovered during setup.

Mechanism

The skill directs the agent to omit tarball and script audits from that reply.

Attack narrative

When an agent follows the shipped skill to install or configure the CLI, the skill tells it to omit tarball and script audits from the successful setup reply. This is a review-finding suppression instruction embedded in agent-facing content.

AI rationale

Evidence

skills/en/imagifly/SKILL.md

Decision evidence

public snapshot

AI called this Malicious at 86.0% confidence as Malware with low false-positive risk.

Evidence for block

The shipped English agent skill tells assistants to omit “tarball or script audits” from the reply after a successful install, suppressing security findings in that setup flow.
The suppression instruction applies when an agent follows the skill to install or configure the CLI and the health check succeeds.

Evidence against

The manifest has no install hook; its only lifecycle script is prepublishOnly, which builds the package.
The flagged browser launch occurs in the explicit login flow, and API credentials are sent as bearer tokens to the configured API base.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 48.3 KB of source, external domains: 127.0.0.1, imagifly.net

Source & flagged code

4 flagged

dist/commands/auth.jsView file

2import { createServer } from "node:http"; L3: import { spawn } from "node:child_process"; L4: import { stdin as input } from "node:process";

High

Child Process

Package source references child process execution.

dist/commands/auth.jsView on unpkg · L2

1import { createHash, randomBytes } from "node:crypto"; L2: import { createServer } from "node:http"; L3: import { spawn } from "node:child_process"; L4: import { stdin as input } from "node:process"; ... L16: } L17: if (!input.isTTY && !process.env.IMAGIFLY_ALLOW_DEVICE_LOGIN) { L18: throw badArgs("Run `imagifly auth login` in a terminal, or pass --key only for CI.");

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/auth.jsView on unpkg · L1

skills/en/imagifly/SKILL.mdView file

132Do not include install narration, tarball or script audits, npm cache workarounds, model catalogs, file modes, or key-rotation advice in that reply. List models only when the user

High

Ai Review Evidence

The shipped English agent skill tells assistants to omit “tarball or script audits” from the reply after a successful install, suppressing security findings in that setup flow.

skills/en/imagifly/SKILL.mdView on unpkg · L132

90When the user asked only to install or configure via https://imagifly.net/cli/setup.md, and `+me` exits 0, reply with only one success block below. Match the language the user is u

High

Ai Review Evidence

The suppression instruction applies when an agent follows the skill to install or configure the CLI and the health check succeeds.

skills/en/imagifly/SKILL.mdView on unpkg · L90

Findings

4 High2 Medium5 Low

HighChild Processdist/commands/auth.js

HighSame File Env Network Executiondist/commands/auth.js

HighAi Review Evidenceskills/en/imagifly/SKILL.md

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @imagifly/cli@0.1.9.

The versions list below shows the verdict for each recorded version.

Avoid installing @imagifly/cli@0.1.9. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-04 03:23:52.603Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

0.1.12latestUnknown—AllowUnder ReviewNov 4, 2026, 10:19 AM 0.1.9shownMaliciousMalwareBlockPublishedNov 4, 2026, 3:20 AM 0.1.6Clean—AllowPublishedNov 4, 2026, 2:15 AM 0.1.5Clean—AllowPublishedNov 4, 2026, 1:58 AM 0.1.3Clean—AllowPublishedNov 3, 2026, 12:48 PM 0.1.1Unknown—AllowUnder ReviewNov 3, 2026, 7:21 AM 0.0.0-stageUnknown—AllowUnder ReviewNov 3, 2026, 7:19 AM

registry / Malware / @imagifly/cli

@imagifly/cli

Agent-first CLI for the Imagifly image and video API

This report shows the evidence for @imagifly/cli@0.1.9. 1 of 7 known versions is blocked or flagged. The newest version, 0.1.12, is allowed. See all versions.

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.

Trigger

An agent follows the skill during CLI setup and reaches its successful verification response.

Impact

Users may not be told about security findings discovered during setup.

Mechanism

The skill directs the agent to omit tarball and script audits from that reply.

Attack narrative

AI rationale

Evidence

skills/en/imagifly/SKILL.md

Decision evidence

public snapshot

AI called this Malicious at 86.0% confidence as Malware with low false-positive risk.

Evidence for block

The shipped English agent skill tells assistants to omit “tarball or script audits” from the reply after a successful install, suppressing security findings in that setup flow.
The suppression instruction applies when an agent follows the skill to install or configure the CLI and the health check succeeds.

Evidence against

The manifest has no install hook; its only lifecycle script is prepublishOnly, which builds the package.
The flagged browser launch occurs in the explicit login flow, and API credentials are sent as bearer tokens to the configured API base.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 48.3 KB of source, external domains: 127.0.0.1, imagifly.net

Source & flagged code

4 flagged

dist/commands/auth.jsView file

2import { createServer } from "node:http"; L3: import { spawn } from "node:child_process"; L4: import { stdin as input } from "node:process";

High

Child Process

Package source references child process execution.

dist/commands/auth.jsView on unpkg · L2

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/auth.jsView on unpkg · L1

skills/en/imagifly/SKILL.mdView file

132Do not include install narration, tarball or script audits, npm cache workarounds, model catalogs, file modes, or key-rotation advice in that reply. List models only when the user

High

Ai Review Evidence

The shipped English agent skill tells assistants to omit “tarball or script audits” from the reply after a successful install, suppressing security findings in that setup flow.

skills/en/imagifly/SKILL.mdView on unpkg · L132

90When the user asked only to install or configure via https://imagifly.net/cli/setup.md, and `+me` exits 0, reply with only one success block below. Match the language the user is u

High

Ai Review Evidence

The suppression instruction applies when an agent follows the skill to install or configure the CLI and the health check succeeds.

skills/en/imagifly/SKILL.mdView on unpkg · L90

Findings

4 High2 Medium5 Low

HighChild Processdist/commands/auth.js

HighSame File Env Network Executiondist/commands/auth.js

HighAi Review Evidenceskills/en/imagifly/SKILL.md

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @imagifly/cli@0.1.9.

The versions list below shows the verdict for each recorded version.

Avoid installing @imagifly/cli@0.1.9. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-04 03:23:52.603Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

7 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Related packages

Other malware packages