registry / @mflrevan/wipe / 0.3.2

@mflrevan/wipe@0.3.2

wipe - CLI-first, git-native collaboration for humans and agents.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The npm package has an install-time native binary downloader. Static JS source shows package-aligned release download and extraction, but the fetched binary is opaque to this source-only review.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install or wipe CLI invocation

Impact

Supply-chain risk from install-time executable download; no confirmed malicious source behavior.

Mechanism

postinstall downloads and extracts platform-specific native CLI binary

Attack narrative

On installation, postinstall runs install.js, which selects a supported platform, builds a GitHub release artifact URL, downloads it with axios, and extracts it into node_modules/.bin_real. The bin wrapper later executes that native binary with user arguments. The reviewed JS does not harvest credentials, persist outside the package, or mutate AI-agent control surfaces.

Rationale

This is not confirmed malicious by source inspection, but install-time download and execution setup for an opaque native binary leaves real unresolved supply-chain risk. The suspicious primitives are mostly package-aligned for a native CLI installer, so publish blocking is not justified from the inspected source alone.

Evidence

package.jsoninstall.jsbinary.jsbinary-install.jsrun-wipe.jsREADME.mdnode_modules/.bin_realOS temp directory download file

Network endpoints1

github.com/mflRevan/wipe/releases/download/v0.3.2

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.

Evidence for warning

package.json defines postinstall: node ./install.js
install.js calls binary.install during npm lifecycle
binary-install.js downloads a platform tarball with axios and extracts it via tar/unzip
binary-install.js installs executable files into node_modules/.bin_real
run-wipe.js invokes the installed native binary on user CLI execution

Evidence against

Download URL is package-aligned GitHub release for mflRevan/wipe v0.3.2
No credential/env harvesting found beyond SystemRoot for Windows tar path
No exfiltration endpoint or arbitrary remote command execution in JS wrapper
No lifecycle writes to Claude/Codex/Cursor/MCP or other AI-agent control surfaces
README skill install behavior is documented as user-invoked CLI usage, not postinstall behavior

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 9.13 KB of source, external domains: example.com

Source & flagged code

4 flagged

package.jsonView file

Lines 23-63json

23 "major": 2,

24 "series": 31

25 },

26 "homepage": "https://wipeboard.dev",

27 "keywords": [

28 "command-line-utilities",

29 "development-tools",

30 "cli",

31 "kanban",

32 "agents",

33 "git",

34 "collaboration"

35 ],

36 "license": "MIT",

37 "name": "@mflrevan/wipe",

38 "preferUnplugged": true,

39 "repository": "https://github.com/mflRevan/wipe",

40 "scripts": {

41 "fmt": "prettier --write **/*.js",

42 "fmt:check": "prettier --check **/*.js",

43 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "supportedPlatforms": {

46 "aarch64-pc-windows-msvc": {

47 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

48 "bins": {

49 "wipe": "wipe.exe"

50 },

51 "zipExt": ".tar.gz"

52 },

53 "x86_64-pc-windows-gnu": {

54 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

55 "bins": {

56 "wipe": "wipe.exe"

57 },

58 "zipExt": ".tar.gz"

59 },

60 "x86_64-pc-windows-msvc": {

61 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

62 "bins": {

63 "wipe": "wipe.exe"

binary-install.jsView file

Lines 1-22javascript

1const { createWriteStream, existsSync, mkdirSync, mkdtemp } = require("fs");

2const { join, sep } = require("path");

3const { spawnSync } = require("child_process");

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

binary-install.jsView file

2const { join, sep } = require("path"); L3: const { spawnSync } = require("child_process"); L4: const { tmpdir } = require("os");

High

Child Process

Package source references child process execution.

binary-install.jsView on unpkg · L2

92L93: return axios({ ...fetchOptions, url: this.url, responseType: "stream" }) L94: .then((res) => { ... L101: if (/\.tar\.*/.test(this.zipExt)) { L102: const result = spawnSync(process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "tar.exe") : "tar", ["xf", tempFile, L103: // The tarballs are stored with a leading directory

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

binary-install.jsView on unpkg · L92

Findings

3 High3 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbinary-install.js

HighSame File Env Network Executionbinary-install.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

Source & flagged code

4 flagged

package.jsonView file

Lines 23-63json

23 "major": 2,

24 "series": 31

25 },

26 "homepage": "https://wipeboard.dev",

27 "keywords": [

28 "command-line-utilities",

29 "development-tools",

30 "cli",

31 "kanban",

32 "agents",

33 "git",

34 "collaboration"

35 ],

36 "license": "MIT",

37 "name": "@mflrevan/wipe",

38 "preferUnplugged": true,

39 "repository": "https://github.com/mflRevan/wipe",

40 "scripts": {

41 "fmt": "prettier --write **/*.js",

42 "fmt:check": "prettier --check **/*.js",

43 "postinstall": "node ./install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L43

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L43

44 },

45 "supportedPlatforms": {

46 "aarch64-pc-windows-msvc": {

47 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

48 "bins": {

49 "wipe": "wipe.exe"

50 },

51 "zipExt": ".tar.gz"

52 },

53 "x86_64-pc-windows-gnu": {

54 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

55 "bins": {

56 "wipe": "wipe.exe"

57 },

58 "zipExt": ".tar.gz"

59 },

60 "x86_64-pc-windows-msvc": {

61 "artifactName": "wipe-cli-x86_64-pc-windows-msvc.tar.gz",

62 "bins": {

63 "wipe": "wipe.exe"

binary-install.jsView file

Lines 1-22javascript

1const { createWriteStream, existsSync, mkdirSync, mkdtemp } = require("fs");

2const { join, sep } = require("path");

3const { spawnSync } = require("child_process");

Lines 72-112javascript

73 install(fetchOptions, suppressLogs = false) {

74 if (this.exists()) {

75 if (!suppressLogs) {

76 console.error(

77 `${this.name} is already installed, skipping installation.`,

78 );

79 }

80 return Promise.resolve();

81 }

83 if (existsSync(this.installDirectory)) {

84 rimraf.sync(this.installDirectory);

85 }

87 mkdirSync(this.installDirectory, { recursive: true });

89 if (!suppressLogs) {

90 console.error(`Downloading release from ${this.url}`);

91 }

93 return axios({ ...fetchOptions, url: this.url, responseType: "stream" })

94 .then((res) => {

95 return new Promise((resolve, reject) => {

96 mkdtemp(`${tmpDir}${sep}`, (err, directory) => {

97 let tempFile = join(directory, this.filename);

98 const sink = res.data.pipe(createWriteStream(tempFile));

99 sink.on("error", (err) => reject(err));

100 sink.on("close", () => {

101 if (/\.tar\.*/.test(this.zipExt)) {

102 const result = spawnSync(process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "tar.exe") : "tar", ["xf", tempFile,

103 // The tarballs are stored with a leading directory

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

binary-install.jsView on unpkg · L92

104 // component; we strip one component in the

105 // shell installers too.

106 "--strip-components",

107 "1",

108 "-C",

109 this.installDirectory,

110 ]);

111 if (result.status == 0) {

112 resolve();