registry / @keruyun/agent-cli / 1.15.2
@keruyun/agent-cli@1.15.2
客如云 CLI 工具
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe postinstall telemetry is automatic and includes identifying fields, but source shows it serves installation reporting to the same kry-cli logging endpoint used by the SDK. The installer validates the downloaded binary against a pinned hash, and the inspected sources establish no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Package installation runs the postinstall hook; telemetry can be disabled with KRY_CLI_NO_TRACK.
Impact
Installation metadata is disclosed for product telemetry; the inspected source does not establish credential transfer, arbitrary remote code execution, or agent control changes.
Mechanism
The hook sends installation results and machine or session identifiers to the kry-cli logging endpoint, and checks the downloaded binary hash before accepting it.
AI rationale
The postinstall telemetry is automatic and includes identifying fields, but source shows it serves installation reporting to the same kry-cli logging endpoint used by the SDK. The installer validates the downloaded binary against a pinned hash, and the inspected sources establish no concrete attack behavior.
Evidence
package.jsoninstall.cjsbin/kry-cli.exe
Network endpoints1
tnnm-alsc-saas-merchant-spider-fy21.cn-wulanchabu.log.aliyuncs.com
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json runs install.cjs as a postinstall hook.
- The installer sends install outcome telemetry unless KRY_CLI_NO_TRACK is set; the event records installation results.
- The telemetry includes the machine hostname, a parsed user ID, and session ID.
- The installer posts to a kry-cli log endpoint also used by the SDK logger.
- The installer rejects the downloaded binary if its decompressed SHA-256 differs from the manifest.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node install.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/sdk.mjsView file
1var Mm=Object.create;var gi=Object.defineProperty;var Jm=Object.getOwnPropertyDescriptor;var Vm=Object.getOwnPropertyNames;var Bm=Object.getPrototypeOf,Wm=Object.prototype.hasOwnPr...
L2: `;quote='"';escape=this.quote;quoteColumns=!1;quoteHeaders=this.quoteColumns;headers=null;includeEndRowDelimiter=!1;transform;shouldWriteHeaders;writeBOM=!1;escapedQuote;BOM="\uFEF...
L3: ]`;this.ESCAPE_REGEXP=new RegExp(i)}set headers(r){this._headers=r}shouldQuote(r,i){let o=i?this.formatterOptions.quoteHeaders:this.formatterOptions.quoteColumns;return typeof o=="...
L4: `)}var it=e=>(r,i,o,t)=>{let n=o?{...o,async:!1}:{async:!1},a=r._zod.run({value:i,issues:[]},n);if(a instanceof Promise)throw new he;if(a.issues.length){let c=new(t?.Err??e)(a.issu...
...
L66:
L67: Set the \`cycles\` parameter to \
Findings
1 Critical6 High6 Medium4 Low
CriticalRemote Response Code Executionbin/sdk.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighEval
HighObfuscated Payload Loaderbin/sdk.mjs
HighInstall Named Payload Fileinstall.cjs
HighKnown Malware Source Similarityinstall.cjs
HighKnown Malware Source Fingerprint Signatureinstall.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarybin/kry-cli.exe
MediumShips Build Helperbin/log.py
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @keruyun/agent-cli@1.15.2.
See all versions of @keruyun/agent-cli for other recorded verdicts.
- Review the evidence and your use of @keruyun/agent-cli@1.15.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.