registry / @mflrevan/wipe / 0.3.1

@mflrevan/wipe@0.3.1

wipe - CLI-first, git-native collaboration for humans and agents.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The package has an install-time platform binary downloader, but source inspection shows it only installs package-owned CLI artifacts into its own package directory. No confirmed malicious behavior or unconsented foreign agent control-surface mutation is present in the JavaScript package source.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install postinstall; wipe CLI invocation

Impact

Installs and later runs the wipe CLI binary; no confirmed attack impact from inspected source

Mechanism

package-aligned prebuilt binary download and wrapper execution

Rationale

The suspicious primitives are consistent with a documented npm wrapper for a prebuilt CLI binary and are scoped to the package's own install directory. No source evidence shows exfiltration, persistence, destructive behavior, install-time AI-agent hijacking, or other concrete malicious behavior.

Evidence

package.jsoninstall.jsbinary.jsbinary-install.jsrun-wipe.jsREADME.mdnode_modules/.bin_real

Network endpoints3

github.com/mflRevan/wipe/releases/download/v0.3.1wipeboard.devgithub.com/mflRevan/wipe

Decision evidence

public snapshot

AI called this Clean at 83.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json runs postinstall: node ./install.js.
install.js calls binary.install(false) at install time.
binary-install.js downloads a platform tarball with axios and extracts it using tar/unzip.
run-wipe.js invokes the downloaded binary from node_modules/.bin_real on CLI use.

Evidence against

Download URL is package-aligned GitHub release path from package.json.
No credential, env, home directory, or project file harvesting found in JS sources.
No AI-agent control-surface writes occur during lifecycle scripts.
README documents npm install as prebuilt binary download and agent skill install as explicit CLI command.
No remote code execution beyond extracting package-owned CLI binary and running it when wipe is invoked.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 9.13 KB of source, external domains: example.com

Source & flagged code

4 flagged

package.jsonView file

Lines 23-63json

23 "major": 2,

24 "series": 31

25 },

26 "homepage": "https://wipeboard.dev",

27 "keywords": [

28 "command-line-utilities",

29 "development-tools",

30 "cli",

31 "kanban",

32 "agents",

33 "git",

34 "collaboration"

35 ],

36 "license": "MIT",

37 "name": "@mflrevan/wipe",

38 "preferUnplugged": true,

39 "repository": "https://github.com/mflRevan/wipe",

40 "scripts": {

41 "fmt": "prettier --write **/*.js",

42 "fmt:check": "prettier --check **/*.js",

43 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "supportedPlatforms": {

46 "aarch64-pc-windows-msvc": {

47 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

48 "bins": {

49 "wipe": "wipe.exe"

50 },

51 "zipExt": ".tar.gz"

52 },

53 "x86_64-pc-windows-gnu": {

54 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

55 "bins": {

56 "wipe": "wipe.exe"

57 },

58 "zipExt": ".tar.gz"

59 },

60 "x86_64-pc-windows-msvc": {

61 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

62 "bins": {

63 "wipe": "wipe.exe"

binary-install.jsView file

Lines 1-22javascript

1const { createWriteStream, existsSync, mkdirSync, mkdtemp } = require("fs");

2const { join, sep } = require("path");

3const { spawnSync } = require("child_process");

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

binary-install.jsView file

2const { join, sep } = require("path"); L3: const { spawnSync } = require("child_process"); L4: const { tmpdir } = require("os");

High

Child Process

Package source references child process execution.

binary-install.jsView on unpkg · L2

92L93: return axios({ ...fetchOptions, url: this.url, responseType: "stream" }) L94: .then((res) => { ... L101: if (/\.tar\.*/.test(this.zipExt)) { L102: const result = spawnSync(process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "tar.exe") : "tar", ["xf", tempFile, L103: // The tarballs are stored with a leading directory

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

binary-install.jsView on unpkg · L92

Findings

3 High3 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbinary-install.js

HighSame File Env Network Executionbinary-install.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

Source & flagged code

4 flagged

package.jsonView file

Lines 23-63json

23 "major": 2,

24 "series": 31

25 },

26 "homepage": "https://wipeboard.dev",

27 "keywords": [

28 "command-line-utilities",

29 "development-tools",

30 "cli",

31 "kanban",

32 "agents",

33 "git",

34 "collaboration"

35 ],

36 "license": "MIT",

37 "name": "@mflrevan/wipe",

38 "preferUnplugged": true,

39 "repository": "https://github.com/mflRevan/wipe",

40 "scripts": {

41 "fmt": "prettier --write **/*.js",

42 "fmt:check": "prettier --check **/*.js",

43 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "supportedPlatforms": {

46 "aarch64-pc-windows-msvc": {

47 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

48 "bins": {

49 "wipe": "wipe.exe"

50 },

51 "zipExt": ".tar.gz"

52 },

53 "x86_64-pc-windows-gnu": {

54 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

55 "bins": {

56 "wipe": "wipe.exe"

57 },

58 "zipExt": ".tar.gz"

59 },

60 "x86_64-pc-windows-msvc": {

61 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

62 "bins": {

63 "wipe": "wipe.exe"

binary-install.jsView file

Lines 1-22javascript

1const { createWriteStream, existsSync, mkdirSync, mkdtemp } = require("fs");

2const { join, sep } = require("path");

3const { spawnSync } = require("child_process");

Lines 72-112javascript

73 install(fetchOptions, suppressLogs = false) {

74 if (this.exists()) {

75 if (!suppressLogs) {

76 console.error(

77 `${this.name} is already installed, skipping installation.`,

78 );

79 }

80 return Promise.resolve();

81 }

83 if (existsSync(this.installDirectory)) {

84 rimraf.sync(this.installDirectory);

85 }

87 mkdirSync(this.installDirectory, { recursive: true });

89 if (!suppressLogs) {

90 console.error(`Downloading release from ${this.url}`);

91 }

93 return axios({ ...fetchOptions, url: this.url, responseType: "stream" })

94 .then((res) => {

95 return new Promise((resolve, reject) => {

96 mkdtemp(`${tmpDir}${sep}`, (err, directory) => {

97 let tempFile = join(directory, this.filename);

98 const sink = res.data.pipe(createWriteStream(tempFile));

99 sink.on("error", (err) => reject(err));

100 sink.on("close", () => {

101 if (/\.tar\.*/.test(this.zipExt)) {

102 const result = spawnSync(process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "tar.exe") : "tar", ["xf", tempFile,

103 // The tarballs are stored with a leading directory

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

binary-install.jsView on unpkg · L92

104 // component; we strip one component in the

105 // shell installers too.

106 "--strip-components",

107 "1",

108 "-C",

109 this.installDirectory,

110 ]);

111 if (result.status == 0) {

112 resolve();