@markus-global/cli@0.10.1
Markus — AI Digital Workforce Platform
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package exposes a real agent-configuration capability that can write tokens into external configuration files, but static inspection shows it is activated by an explicit CLI command rather than an npm lifecycle hook. This supports a non-blocking warning for agent capability risk, not malware.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs `markus install <platform>`.
Impact
A user-selected external agent configuration can be changed; this is a guarded capability rather than a confirmed unconsented attack.
Mechanism
The command selects a connector and writes Markus connection fields, including a token, to that platform's configured file.
AI rationale
The package exposes a real agent-configuration capability that can write tokens into external configuration files, but static inspection shows it is activated by an explicit CLI command rather than an npm lifecycle hook. This supports a non-blocking warning for agent capability risk, not malware.
Evidence
dist/commands/install-agent.jsdist/connector-service.js
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package has no npm lifecycle hook; its listed scripts are build and development tasks.
- The explicit `markus install <platform>` command installs and connects an external agent platform.
- That command writes a supplied Markus URL and token into a connector-selected external configuration file.
Evidence against
- No automatic installation-time execution or confirmed unconsented configuration mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
16 flaggeddist/web-ui/assets/index-BhgfBFXX.jsView file
10patternName = generic_password
severity = medium
line = 10
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/web-ui/assets/index-BhgfBFXX.jsView on unpkg · L1019patternName = generic_password
severity = medium
line = 19
Medium
Secret Pattern
Hardcoded password in dist/web-ui/assets/index-BhgfBFXX.js
dist/web-ui/assets/index-BhgfBFXX.jsView on unpkg · L19357patternName = generic_password
severity = medium
line = 357
Medium
Secret Pattern
Hardcoded password in dist/web-ui/assets/index-BhgfBFXX.js
dist/web-ui/assets/index-BhgfBFXX.jsView on unpkg · L357dist/utils/browser.js
Findings
7 High10 Medium7 Low
HighChild Processdist/utils/browser.js
HighShelldist/commands/update.js
HighSame File Env Network Executiondist/utils/browser.js
HighShips High Entropy Blobdist/markus-browser-extension.zip
HighSemantic Analysis Limiteddist/web-ui/assets/DeliverableShareModal-Dbnn1New.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/web-ui/assets/chunk-AQP2D5EJ-CvnOAGKW.js
HighPrevious Version Dangerous Deltadist/connector-service.js
MediumSecret Patterndist/web-ui/assets/index-BhgfBFXX.js
MediumDynamic Requiredist/web-ui/assets/viz-global-C_AyN6D9.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @markus-global/cli@0.10.1.
See all versions of @markus-global/cli for other recorded verdicts.
- Review the evidence and your use of @markus-global/cli@0.10.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.