registry / @picsart/gen-ai / 2.61.0

@picsart/gen-ai@2.61.0

⚠ Under review

Picsart AI CLI — generate images, video, and audio from the terminal

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.23 MB of source, external domains: api.picsart.com, cdn-cms-uploads.picsart.com, cdn.example, github.com, jimmy.warting.se, json-schema.org, nodejs.org, optifyr.com, picsart.com, registry.npmjs.org, t.picsart.com

Source & flagged code

10 flagged

cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @picsart/gen-ai@2.59.3 matchedIdentity = npm:QHBpY3NhcnQvZ2VuLWFp:2.59.3 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli.jsView on unpkg

High

Child Process

Package source references child process execution.

cli.jsView on unpkg · L1

1import {Flags,Args,Command,run,execute}from'@oclif/core';import nr,{Chalk}from'chalk';import {createRequire}from'module';import*as ye from'fs';import ye__default,{readFileSync,exis... L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(` ... L5: L6: ${a}`;throw new Error(l)}findProvider(e){return this.providers.get(e)||this.parent?.findProvider(e)}typeName(e){return e instanceof oa?`Token(${e.key})`:this.isClass(e)?e.name:Stri... L7: `)||t.includes("\r")||t.includes("\0"))===false}function yle(t){let e=(t.headersList.get("referrer-policy",true)??"").split(","),r="";if(e.length)for(let i=e.length;i!==0;i--){let ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli.jsView on unpkg · L1

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. cli.js: import {Flags,Args,Command,run,execute}from'@oclif/core';import nr,{Chalk}from'chalk';import {createRequire}from'module';import*as ye from'fs';import ye__default,{readFileSync,exis... ${a}`;throw new Error(l)}findProvider(e){return this.providers.get(e)||this.parent?.findProvider(e)}typeName(e){return e instanceof oa?`Token(${e.key})`:this.isClass(e)?e.name:Stri... `)||t.includes("\r")||t.includes("\0"))===false}function yle(t){let e=(t.headersList.get("referrer-policy",true)??"").split(","),r="";if(e.length)for(let i=e.length;i!==0;i--){let ... `,this[Ace]=a??3e5,this[uce]=i??3e5,this[cce]=y??true,this[pB]=b,this[Bn]=null,this

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

cli.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. cli.js: `))}return r}getOrCreate(e){if(e===t)return this;let r=this.store.get(e);if(r)return r;let i=this.tasks.get(e);if(i)return i.waitUntilResolved();i=new Bp;let n=this.providers.get(e... ${a}`;throw new Error(l)}findProvider(e){return this.providers.get(e)||this.parent?.findProvider(e)}typeName(e){return e instanceof oa?`Token(${e.key})`:this.isClass(e)?e.name:Stri... ${e.format(r)}`.trim())}};a2.exports=_Q;});var zm=C((aVe,d2)=>{var u2=Symbol.for("undici.globalDispatcher.1"),{InvalidArgumentError:dge}=X(),fge=va();c2()===void 0&&A2(new fge);fun... `);}close(){this.#r.close();}get(e){VQ(e);let r=this.#l(e);return r?{body:r.body?Buffer.from(r.body.buff

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

cli.jsView on unpkg

132) L133: `);}close(){this.#r.close();}get(e){VQ(e);let r=this.#l(e);return r?{body:r.body?Buffer.from(r.body.buffer,r.body.byteOffset,r.body.byteLength):void 0,statusCode:r.statusCode,statu... L134: ${o}`;break;case "retry":rP(o)&&(r[n]=o);break;case "id":iP(o)&&(r[n]=o);break;case "event":o.length>0&&(r[n]=o);break}}processEvent(e){e.retry&&rP(e.retry)&&(this.state.reconnecti... L135: `);return Q.substr(0,Q.length-2)},this.getRequestHeader=function(Q){return typeof Q=="string"&&u[Q]?u[Q]:""},this.send=function(Q){if(this.readyState!=this.OPENED)throw new Error("...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

cli.jsView on unpkg · L132

132Trigger-reachable command-output exfiltration chain: manifest.main -> cli.js L132: ) L133: `);}close(){this.#r.close();}get(e){VQ(e);let r=this.#l(e);return r?{body:r.body?Buffer.from(r.body.buffer,r.body.byteOffset,r.body.byteLength):void 0,statusCode:r.statusCode,statu... L134: ${o}`;break;case "retry":rP(o)&&(r[n]=o);break;case "id":iP(o)&&(r[n]=o);break;case "event":o.length>0&&(r[n]=o);break}}processEvent(e){e.retry&&rP(e.retry)&&(this.state.reconnecti... L135: `);return Q.substr(0,Q.length-2)},this.getRequestHeader=function(Q){return typeof Q=="string"&&u[Q]?u[Q]:""},this.send=function(Q){if(this.readyState!=this.OPENED)throw new Error("...

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

cli.jsView on unpkg · L132

195`).find(o=>o.trim().endsWith(i))?.trim().split(/\s+/)[0]}async function iCe(t,e){let i=(await Ob(`${rE}/latest.txt`))?.trim();if(!i)return {updated:false,oldVersion:t,newVersion:t,... L196: `);ye.writeFileSync(e,r),spawn("cmd.exe",["/c",e],{detached:true,stdio:"ignore",windowsHide:true}).unref();}async function oCe(){let t=await Ob(KIe);if(!t)return null;try{return JS... L197: `);}var uCe="https://registry.npmjs.org/@picsart/gen-ai/latest",ACe=`${process.env.GEN_AI_BASE_URL??"https://picsart.com/gen-ai-cli/releases"}/latest.txt`,cCe="update-check.json",d...

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli.jsView on unpkg · L195

5L6: ${a}`;throw new Error(l)}findProvider(e){return this.providers.get(e)||this.parent?.findProvider(e)}typeName(e){return e instanceof oa?`Token(${e.key})`:this.isClass(e)?e.name:Stri... L7: `)||t.includes("\r")||t.includes("\0"))===false}function yle(t){let e=(t.headersList.get("referrer-policy",true)??"").split(","),r="";if(e.length)for(let i=e.length;i!==0;i--){let ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

cli.jsView on unpkg · L5

1import {Flags,Args,Command,run,execute}from'@oclif/core';import nr,{Chalk}from'chalk';import {createRequire}from'module';import*as ye from'fs';import ye__default,{readFileSync,exis... L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(` L3: `):"",this.name="UnsubscriptionError",this.errors=r;}});});var ai=C(gd=>{Object.defineProperty(gd,"__esModule",{value:true});gd.arrRemove=void 0;function fj(t,e){if(t){var r=t.inde... L4: `))}return r}getOrCreate(e){if(e===t)return this;let r=this.store.get(e);if(r)return r;let i=this.tasks.get(e);if(i)return i.waitUntilResolved();i=new Bp;let n=this.providers.get(e... L5: L6: ${a}`;throw new Error(l)}findProvider(e){return this.providers.get(e)||this.parent?.findProvider(e)}typeName(e){return e instanceof oa?`Token(${e.key})`:this.isCla

Low

Weak Crypto

Package source references weak cryptographic algorithms.

cli.jsView on unpkg · L1

Source & flagged code

10 flagged · loading source

cli.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code