registry / @nalvietnam/avatar-cli / 3.25.2
@nalvietnam/avatar-cli@3.25.2
AI harness CLI for NAL Vietnam engineering
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious install-time chain was found. The package nevertheless has guarded, user-invoked AI-agent extension setup plus a prepare-time Git hook configuration mutation, warranting a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs avatar sync/tools commands; prepare applies in applicable npm lifecycle contexts.
Impact
Can alter a workspace’s AI-agent configuration and repository hook selection.
Mechanism
Project-local AI extension and Git-hook setup.
AI rationale
No concrete malicious install-time chain was found. The package nevertheless has guarded, user-invoked AI-agent extension setup plus a prepare-time Git hook configuration mutation, warranting a warning.
Evidence
package.jsonbin/postinstall.jsdist/index.jsdist/lib/print-welcome-screen.js.claude/pack.claude/settings.json.git/config
Network endpoints1
qpdbkewtpkkbcrptnlos.supabase.co/functions/v1/get-pack
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- prepare configures a Git hooks path.
- Explicit sync downloads a team AI pack and creates a symlink farm.
- Pack templates are merged into project .claude/settings.json.
Evidence against
- postinstall only prints a welcome screen and exits in CI/opt-out.
- No install hook imports the main CLI, downloads content, or writes agent configuration.
- Network and process execution are tied to user-invoked CLI features.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./bin/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @nalvietnam/avatar-cli@3.23.1
matchedIdentity = npm:QG5hbHZpZXRuYW0vYXZhdGFyLWNsaQ:3.23.1
similarity = 0.750
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
1 Critical5 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @nalvietnam/avatar-cli@3.25.2.
See all versions of @nalvietnam/avatar-cli for other recorded verdicts.
- Review the evidence and your use of @nalvietnam/avatar-cli@3.25.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.