@markus-global/cli@0.9.9
Markus — AI Digital Workforce Platform
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is not malicious by automatic lifecycle behavior, but its update command exposes a concrete shell-injection route. This warrants a warning until the command is changed to run without a shell and validates versions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs markus update --version with an attacker-controlled value.
Impact
An attacker who controls that argument can execute commands as the local user.
Mechanism
Shell-enabled npm invocation with unsanitized version input.
AI rationale
The package is not malicious by automatic lifecycle behavior, but its update command exposes a concrete shell-injection route. This warrants a warning until the command is changed to run without a shell and validates versions.
Evidence
dist/commands/update.js
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The explicit update command builds an npm package string from the user-supplied version and runs it with shell enabled, allowing shell metacharacter injection.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The start command and browser helper are invoked only when the user runs the CLI.
- The bundled PDF and deliverable UI files implement document preview and sharing functionality; no hidden install-time path was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Source & flagged code
14 flaggeddist/web-ui/assets/index-DHzWBdt5.jsView file
10patternName = generic_password
severity = medium
line = 10
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/web-ui/assets/index-DHzWBdt5.jsView on unpkg · L1019patternName = generic_password
severity = medium
line = 19
Medium
Secret Pattern
Hardcoded password in dist/web-ui/assets/index-DHzWBdt5.js
dist/web-ui/assets/index-DHzWBdt5.jsView on unpkg · L19dist/web-ui/assets/pdf-DMRcuM1e.jsView file
1var ei=u=>{throw TypeError(u)};var ps=(u,t,e)=>t.has(u)||ei("Cannot "+e);var K=(u,t,e)=>(ps(u,t,"read from private field"),e?e.call(u):t.get(u)),_t=(u,t,e)=>t.has(u)?ei("Cannot add...
L2: `).join("")}}function be(u,t){const e=t?URL.parse(u,t):URL.parse(u);return/https?:/.test(e?.protocol??"")}function xt(u){u.preventDefault()}function J(u){u.preventDefault(),u.stopP...
L3: struct Uniforms {
Findings
6 High10 Medium7 Low
HighChild Processdist/web-ui/assets/pdf-DMRcuM1e.js
HighShelldist/commands/update.js
HighSame File Env Network Executiondist/utils/browser.js
HighShips High Entropy Blobdist/markus-browser-extension.zip
HighSemantic Analysis Limiteddist/web-ui/assets/DeliverableShareModal-C4bKsQbU.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/commands/start.js
MediumSecret Patterndist/web-ui/assets/index-DHzWBdt5.js
MediumDynamic Requiredist/web-ui/assets/viz-global-C_AyN6D9.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Compressed Blobdist/markus-browser-extension.zip
Affected versions and remediation
This report applies to @markus-global/cli@0.9.9.
See all versions of @markus-global/cli for other recorded verdicts.
- Review the evidence and your use of @markus-global/cli@0.9.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.