registry / @mingliuyiming/qianfan-cli-test / 1.0.1

@mingliuyiming/qianfan-cli-test@1.0.1

Qianfan CLI - 千帆 MaaS 命令行工具

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A postinstall hook downloads and executes an opaque platform binary. During global installation it automatically invokes that binary to connect to detected AI-agent skill locations.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

Installing the package globally with npm, outside CI and without the skip environment variable.

Impact

The opaque binary may modify local AI-agent skill directories during installation; the package source does not expose the precise writes.

Mechanism

Verified remote-binary download followed by non-interactive agent-skill setup.

AI rationale

Automatic execution of a remotely supplied opaque binary to perform non-interactive AI-agent setup is a real unresolved risk. Hash verification limits transport substitution but does not make the binary's agent-directory mutations inspectable from this package.

Evidence

package.jsonscripts/postinstall.jsmanifest.jsonbin/

Network endpoints2

aipe-dragonboat.cdn.bcebos.comgithub.com

Decision evidence

public snapshot

@mingliuyiming/qianfan-cli-test@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code