registry / Destructive action / @nocobase/cli-v1

@nocobase/cli-v1

This report shows the evidence for @nocobase/cli-v1@2.2.15. 1 of 39 known versions is blocked or flagged. The newest version, 2.2.30, is flagged. See all versions.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The startup deletion is an unguarded destructive side effect on the consumer’s plugin storage. Although compatibility cleanup is possible, the inspected source provides no condition or explanation that resolves that risk.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Invoking either CLI binary, before the requested command is parsed.

Impact

Installed plugin files and functionality may be lost.

Mechanism

Startup initialization recursively removes four hard-coded directories from plugin storage without a command-specific check or consent guard.

Attack narrative

Before command parsing, the executable runs initialization that recursively deletes four named plugin directories from plugin storage. Because this occurs for any CLI invocation, an otherwise unrelated command can remove installed plugin files.

AI rationale

Evidence

bin/index.jssrc/util.js

Decision evidence

public snapshot

AI called this Malicious at 88.0% confidence as Malware with low false-positive risk.

Evidence for block

The executable calls environment initialization before parsing CLI arguments.
Initialization sets the plugin storage location under the configured storage root.
Initialization recursively removes four named plugin directories without checking the selected command.

Evidence against

The deletion is limited to four named NocoBase plugin directories, which could reflect compatibility cleanup, but the source does not guard it or explain that purpose.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 141 KB of source, external domains: 127.0.0.1, esm.sh, pkg.nocobase.com

Source & flagged code

6 flagged

src/commands/e2e.jsView file

Lines 1-31javascript

1/**

2 * This file is part of the NocoBase (R) project.

4 * Authors: NocoBase Team.

5 *

6 * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.

7 * For more information, please refer to: https://www.nocobase.com/agreement.

8 */

10const { Command } = require('commander');

11const { run, isPortReachable, checkDBDialect, storagePathJoin } = require('../util');

12const { execSync } = require('node:child_process');

13const axios = require('axios');

High

Child Process

Package source references child process execution.

src/commands/e2e.jsView on unpkg · L11

14const { pTest } = require('./p-test');

15const os = require('os');

16const treeKill = require('tree-kill');

17const chalk = require('chalk');

19/**

20 * 检查服务是否启动成功

21 */

22const checkServer = async (duration = 1000, max = 60 * 10) => {

23 return new Promise((resolve, reject) => {

24 let count = 0;

25 const timer = setInterval(async () => {

26 if (count++ > max) {

27 clearInterval(timer);

28 return reject(new Error('Server start timeout.'));

29 }

31 // if (!(await checkPort(PORT))) {

Lines 103-143javascript

103 run('nocobase-v1', [process.env.APP_ENV === 'production' ? 'start' : 'dev'], options);

104}

105

106process.on('SIGINT', async () =>

src/util.jsView file

Lines 1-31javascript

1/**

2 * This file is part of the NocoBase (R) project.

4 * Authors: NocoBase Team.

5 *

6 * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.

7 * For more information, please refer to: https://www.nocobase.com/agreement.

8 */

10const net =

bin/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const chalk = require('chalk');

4const { initEnv, genTsConfigPaths } = require('../src/util');

Medium

src/commands/dev.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @nocobase/cli-v1@2.1.17 matchedIdentity = npm:QG5vY29iYXNlL2NsaS12MQ:2.1.17 similarity = 0.911 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/commands/dev.jsView on unpkg

Source & flagged code

6 flagged · loading source

src/commands/e2e.jsView file

11const { run, isPortReachable, checkDBDialect, storagePathJoin } = require('../util'); L12: const { execSync } = require('node:child_process'); L13: const axios = require('axios');

High

Child Process

Package source references child process execution.

src/commands/e2e.jsView on unpkg · L11

123try { L124: execSync( L125: `npx playwright codegen --load-storage=${authFile} ${process.env.APP_BASE_URL} --save-storage=${authFile}`, L126: commonConfig,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/commands/e2e.jsView on unpkg · L123

src/util.jsView file

11const chalk = require('chalk'); L12: const execa = require('execa'); L13: const fg = require('fast-glob');

High

Shell

Package source references shell execution.

src/util.jsView on unpkg · L11

Findings

1 Critical3 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltasrc/commands/dev.js

HighChild Processsrc/commands/e2e.js

HighShellsrc/util.js

HighRuntime Package Installsrc/commands/e2e.js

MediumDynamic Requirebin/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEvalsrc/util.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @nocobase/cli-v1@2.2.15.

The versions list below shows the verdict for each recorded version.

Avoid installing @nocobase/cli-v1@2.2.15. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-10-20 08:54:15.212Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

39 known versions

2.2.30latestSuspiciousCredential ExfiltrationWarnPublishedOct 22, 2026, 8:46 AM 2.2.28SuspiciousCredential ExfiltrationWarnPublishedOct 19, 2026, 9:18 AM 2.2.27Clean—AllowPublishedOct 16, 2026, 1:00 PM 2.2.26Clean—AllowPublishedOct 15, 2026, 10:44 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other destructive action packages

Behavioral surface

Source & flagged code

Related packages

Other destructive action packages