registry / @mflrevan/wipe / 0.3.0

@mflrevan/wipe@0.3.0

wipe - CLI-first, git-native collaboration for humans and agents.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

The package has an install-time native binary downloader. The reviewed JS installs package-aligned release artifacts into its own package directory, but the downloaded executable payload is not present in the source package for static inspection.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install postinstall or first wipe CLI run if missing

Impact

Runs packaged native CLI binary after install/user CLI invocation; no confirmed malicious behavior in JS wrapper

Mechanism

platform-specific GitHub release binary download and archive extraction

Attack narrative

On install, npm runs install.js, which selects a platform artifact from package.json, downloads it from the package's GitHub release URL, writes it to a temp file, and extracts it into node_modules/.bin_real. The bin wrapper later spawns that installed binary with user arguments. The JS wrapper does not show credential theft, persistence, or agent-control hijacking, but it is a lifecycle-delivered native payload carrier.

Rationale

Source inspection finds a conventional but risky postinstall binary downloader with package-aligned endpoints and no concrete malicious JS behavior. Because the native executable is fetched during install and not available in the package source, warn rather than block.

Evidence

package.jsoninstall.jsbinary.jsbinary-install.jsrun-wipe.jsREADME.mdnode_modules/.bin_realos tmpdir artifact file

Network endpoints1

github.com/mflRevan/wipe/releases/download/v0.3.0

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json defines postinstall: node ./install.js
install.js calls binary.install(false) during npm install
binary.js builds a GitHub release artifact URL from artifactDownloadUrl and platform artifactName
binary-install.js downloads the artifact with axios and extracts it with tar/unzip
binary-install.js installs executable files under node_modules/.bin_real

Evidence against

No credential, env, or filesystem harvesting found in JS sources
No exfiltration endpoints beyond package-aligned GitHub release download
No eval/vm/Function or dynamic remote JS execution found
No AI-agent control-surface writes in install-time JS
README describes .claude/.agents skill installation as user-invoked CLI behavior

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 9.13 KB of source, external domains: example.com

Source & flagged code

4 flagged

package.jsonView file

Lines 23-63json

23 "major": 2,

24 "series": 31

25 },

26 "homepage": "https://wipeboard.dev",

27 "keywords": [

28 "command-line-utilities",

29 "development-tools",

30 "cli",

31 "kanban",

32 "agents",

33 "git",

34 "collaboration"

35 ],

36 "license": "MIT",

37 "name": "@mflrevan/wipe",

38 "preferUnplugged": true,

39 "repository": "https://github.com/mflRevan/wipe",

40 "scripts": {

41 "fmt": "prettier --write **/*.js",

42 "fmt:check": "prettier --check **/*.js",

43 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "supportedPlatforms": {

46 "aarch64-pc-windows-msvc": {

47 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

48 "bins": {

49 "wipe": "wipe.exe"

50 },

51 "zipExt": ".tar.gz"

52 },

53 "x86_64-pc-windows-gnu": {

54 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

55 "bins": {

56 "wipe": "wipe.exe"

57 },

58 "zipExt": ".tar.gz"

59 },

60 "x86_64-pc-windows-msvc": {

61 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

62 "bins": {

63 "wipe": "wipe.exe"

binary-install.jsView file

Lines 1-22javascript

1const { createWriteStream, existsSync, mkdirSync, mkdtemp } = require("fs");

2const { join, sep } = require("path");

3const { spawnSync } = require("child_process");

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

binary-install.jsView file

2const { join, sep } = require("path"); L3: const { spawnSync } = require("child_process"); L4: const { tmpdir } = require("os");

High

Child Process

Package source references child process execution.

binary-install.jsView on unpkg · L2

92L93: return axios({ ...fetchOptions, url: this.url, responseType: "stream" }) L94: .then((res) => { ... L101: if (/\.tar\.*/.test(this.zipExt)) { L102: const result = spawnSync(process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "tar.exe") : "tar", ["xf", tempFile, L103: // The tarballs are stored with a leading directory

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

binary-install.jsView on unpkg · L92

Findings

3 High3 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbinary-install.js

HighSame File Env Network Executionbinary-install.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

Source & flagged code

4 flagged

package.jsonView file

Lines 23-63json

23 "major": 2,

24 "series": 31

25 },

26 "homepage": "https://wipeboard.dev",

27 "keywords": [

28 "command-line-utilities",

29 "development-tools",

30 "cli",

31 "kanban",

32 "agents",

33 "git",

34 "collaboration"

35 ],

36 "license": "MIT",

37 "name": "@mflrevan/wipe",

38 "preferUnplugged": true,

39 "repository": "https://github.com/mflRevan/wipe",

40 "scripts": {

41 "fmt": "prettier --write **/*.js",

42 "fmt:check": "prettier --check **/*.js",

43 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "supportedPlatforms": {

46 "aarch64-pc-windows-msvc": {

47 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

48 "bins": {

49 "wipe": "wipe.exe"

50 },

51 "zipExt": ".tar.gz"

52 },

53 "x86_64-pc-windows-gnu": {

54 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

55 "bins": {

56 "wipe": "wipe.exe"

57 },

58 "zipExt": ".tar.gz"

59 },

60 "x86_64-pc-windows-msvc": {

61 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

62 "bins": {

63 "wipe": "wipe.exe"

binary-install.jsView file

Lines 1-22javascript

1const { createWriteStream, existsSync, mkdirSync, mkdtemp } = require("fs");

2const { join, sep } = require("path");

3const { spawnSync } = require("child_process");

Lines 72-112javascript

73 install(fetchOptions, suppressLogs = false) {

74 if (this.exists()) {

75 if (!suppressLogs) {

76 console.error(

77 `${this.name} is already installed, skipping installation.`,

78 );

79 }

80 return Promise.resolve();

81 }

83 if (existsSync(this.installDirectory)) {

84 rimraf.sync(this.installDirectory);

85 }

87 mkdirSync(this.installDirectory, { recursive: true });

89 if (!suppressLogs) {

90 console.error(`Downloading release from ${this.url}`);

91 }

93 return axios({ ...fetchOptions, url: this.url, responseType: "stream" })

94 .then((res) => {

95 return new Promise((resolve, reject) => {

96 mkdtemp(`${tmpDir}${sep}`, (err, directory) => {

97 let tempFile = join(directory, this.filename);

98 const sink = res.data.pipe(createWriteStream(tempFile));

99 sink.on("error", (err) => reject(err));

100 sink.on("close", () => {

101 if (/\.tar\.*/.test(this.zipExt)) {

102 const result = spawnSync(process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "tar.exe") : "tar", ["xf", tempFile,

103 // The tarballs are stored with a leading directory

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

binary-install.jsView on unpkg · L92

104 // component; we strip one component in the

105 // shell installers too.

106 "--strip-components",

107 "1",

108 "-C",

109 this.installDirectory,

110 ]);

111 if (result.status == 0) {

112 resolve();