Loading npm security reports…

@mutmutco/cli@4.3.23: Malicious npm security report (Block) | LPM Firewall

registry / @mutmutco/cli / 4.3.23

@mutmutco/cli@4.3.23

MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Hub-backed CLI activity obtains a GitHub credential and sends it to a vendor-controlled Hub endpoint. A stale train command can also replace the global CLI and re-run the requested command.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user runs a Hub-backed command with GH_TOKEN, GITHUB_TOKEN, or a logged-in gh CLI; the update path requires a stale train command.

Impact

The remote Hub receives a usable GitHub credential; the updater changes the globally installed CLI.

Mechanism

GitHub token forwarding to a remote session endpoint and global self-update.

Attack narrative

On a Hub-backed CLI path, the package reads GH_TOKEN, GITHUB_TOKEN, or executes gh auth token. It then sends that credential in an Authorization header to the package's default AWS Hub endpoint. Separately, a stale train command invokes npm install -g for a selected @mutmutco/cli release and re-executes the command. There is no install lifecycle trigger, but the credential forwarding is a concrete remote credential-exfiltration surface when users invoke affected commands.

AI rationale

The source directly forwards locally available GitHub credentials to a non-GitHub default endpoint. The lack of lifecycle hooks reduces propagation risk but does not remove the credential-exfiltration behavior.

Evidence

dist/main.cjs

Network endpoints1

tqxxwzftic.execute-api.eu-central-1.amazonaws.com

Decision evidence

Source & flagged code

6 flagged · loading source

dist/main.cjsView file

53* Constructs the CommanderError class L54: * @param {number} exitCode suggested exit code which could be used with process.exit L55: * @param {string} code an id string representing the error ... L201: var import_node_events = require("node:events"); L202: var import_node_child_process = __toESM(require("node:child_process"), 1); L203: var import_node_path = __toESM(require("node:path"), 1); ... L1222: this._outputConfiguration = { L1223: writeOut: (str) => import_node_process.default.stdout.write(str), L1224: writeErr: (str) => import_node_process.default.stderr.write(str), ... L1264: * @returns {Command[]} L1265: * @private L1266: */

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/main.cjsView on unpkg · L53

•matchType = previous_version_dangerous_delta matchedPackage = @mutmutco/cli@4.0.18 matchedIdentity = npm:QG11dG11dGNvL2NsaQ:4.0.18 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/main.cjsView on unpkg

201var import_node_events = require("node:events"); L202: var import_node_child_process = __toESM(require("node:child_process"), 1); L203: var import_node_path = __toESM(require("node:path"), 1);

High

Child Process

Package source references child process execution.

dist/main.cjsView on unpkg · L201

2016} L2017: const execArgv = import_node_process.default.execArgv ?? []; L2018: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/main.cjsView on unpkg · L2016

3526// src/cli-shared.ts L3527: var import_node_child_process2 = require("node:child_process"); L3528: var import_node_fs5 = require("node:fs"); ... L3531: // src/hub-url.ts L3532: var DEFAULT_HUB_URL = "https://tqxxwzftic.execute-api.eu-central-1.amazonaws.com"; L3533: function defaultHubUrl() { L3534: return process.env.MMI_HUB_URL || DEFAULT_HUB_URL; L3535: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/main.cjsView on unpkg · L3526

dist/index.cjsView file

4// src/client-version.ts L5: var import_node_fs = require("node:fs"); L6: var import_node_path = require("node:path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.cjsView on unpkg · L4

Source & flagged code

6 flagged

dist/main.cjsView file

53* Constructs the CommanderError class L54: * @param {number} exitCode suggested exit code which could be used with process.exit L55: * @param {string} code an id string representing the error ... L201: var import_node_events = require("node:events"); L202: var import_node_child_process = __toESM(require("node:child_process"), 1); L203: var import_node_path = __toESM(require("node:path"), 1); ... L1222: this._outputConfiguration = { L1223: writeOut: (str) => import_node_process.default.stdout.write(str), L1224: writeErr: (str) => import_node_process.default.stderr.write(str), ... L1264: * @returns {Command[]} L1265: * @private L1266: */

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/main.cjsView on unpkg · L53

•matchType = previous_version_dangerous_delta matchedPackage = @mutmutco/cli@4.0.18 matchedIdentity = npm:QG11dG11dGNvL2NsaQ:4.0.18 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/main.cjsView on unpkg

201var import_node_events = require("node:events"); L202: var import_node_child_process = __toESM(require("node:child_process"), 1); L203: var import_node_path = __toESM(require("node:path"), 1);

High

Child Process

Package source references child process execution.

dist/main.cjsView on unpkg · L201

2016} L2017: const execArgv = import_node_process.default.execArgv ?? []; L2018: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/main.cjsView on unpkg · L2016

3526// src/cli-shared.ts L3527: var import_node_child_process2 = require("node:child_process"); L3528: var import_node_fs5 = require("node:fs"); ... L3531: // src/hub-url.ts L3532: var DEFAULT_HUB_URL = "https://tqxxwzftic.execute-api.eu-central-1.amazonaws.com"; L3533: function defaultHubUrl() { L3534: return process.env.MMI_HUB_URL || DEFAULT_HUB_URL; L3535: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/main.cjsView on unpkg · L3526

dist/index.cjsView file

Lines 1-24javascript

1#!/usr/bin/env node

2"use strict";

3

4// src/client-version.ts

5var import_node_fs = require("node:fs");

6var import_node_path = require("node:path");