Loading npm security reports…

@pippit-dev/cli@1.0.35: Suspicious npm security report (Warn) | LPM Firewall

registry / @pippit-dev/cli / 1.0.35

@pippit-dev/cli@1.0.35

Pippit CLI

AI Security Review

scanned 16d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. npm postinstall downloads this package's versioned CLI release and, unless skipped, globally registers the bundled agent skills and sends install telemetry. The skills written are this package's own skill tree.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm install lifecycle running node scripts/install.js, except an npx exec postinstall when PIPPIT_CLI_RUN is unset.

Impact

The user's global agent skills directory is changed during install without a separate consent prompt, and the vendor receives platform and version metadata. The payload is the package's own skills and CLI binary.

Mechanism

install.js fetches the matching GitHub release archive into the package bin directory, then skills.js invokes npx skills add with -g and --skill * and removes legacy skill folders under ~/.agents/skills. telemetry.js POSTs non-secret install metadata to xyq.jianying.com unless disabled.

AI rationale

Postinstall installs this package's own agent skills into the global skills directory and reports install metadata. That is first-party agent extension setup with an opt-out, not a hidden foreign control-surface hijack or secret theft.

Evidence

package.jsonscripts/install.jsscripts/skills.jsscripts/telemetry.js~/.agents/skillsbin/pippit-tool-cli

Network endpoints2

github.com/Pippit-dev/cli/releases/download/

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/xyq-canvas-command-runtime.cjsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/xyq-canvas-command-runtime.cjs

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

scripts/install-cli.jsView file

2L3: const { install } = require("./install"); L4:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/install-cli.jsView on unpkg · L2

scripts/skills.jsView file

12Install-time code directly mutates a foreign AI-agent control surface: L12: function defaultGlobalSkillsDir() { L13: return path.join(os.homedir(), ".agents", "skills"); L14: } Write operation from scripts/install.js: L123: L124: fs.mkdirSync(BIN_DIR, { recursive: true }); L125: ... L133: const extracted = path.join(tmpDir, NAME + (isWindows ? ".exe" : "")); L134: fs.copyFileSync(extracted, dest); L135: fs.chmodSync(dest, 0o755); Foreign user/project scope from scripts/skills.js: L12: function defaultGlobalSkillsDir() { L13: return path.join(os.homedir(), ".agents", "skills"); L14: }

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/skills.jsView on unpkg · L12

scripts/canvas-command.jsView file

•matchType = normalized_sha256 matchedPackage = @pippit-dev/cli@1.0.24 matchedPath = scripts/canvas-command.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/canvas-command.jsView on unpkg

skills/xyq-marketing-skill/scripts/marketing.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @pippit-dev/cli@1.0.31 matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.31 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

skills/xyq-marketing-skill/scripts/marketing.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@pippit-dev/cli",

3 "version": "1.0.35",

4 "description": "Pippit CLI",

5 "bin": {

6 "pippit-tool-cli": "scripts/run.js"

7 },

8 "scripts": {

9 "postinstall": "node scripts/install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "test:marketing-skill": "node scripts/marketing-skill.test.js",

11 "prepack": "node scripts/prepare-canvas-runtime.js",

12 "prepare:canvas-runtime": "node scripts/prepare-canvas-runtime.js",

13 "test": "node scripts/version-check.test.js && node scripts/skills.test.js && node scripts/marketing-skill.test.js && node scripts/install-wizard.test.js && node scripts/install-cli.test.js && node scripts/run-help.test.js && node scripts/canvas-command.test.js && node scripts/canvas-command-schema.test.js && node scripts/canvas-command-guides.test.js && node scripts/prepare-canvas-runtime.test.js && node scripts/canvas-command-runtime.test.js && npm run test:canvas-operations && go test ./... && go vet ./...",

14 "verify:canvas-runtime": "node scripts/prepare-canvas-runtime.js --check-only",

15 "test:canvas-runtime": "node scripts/canvas-command-runtime.test.js",

16 "test:canvas-operations": "node scripts/canvas-command-canvas-operations.test.js && node scripts/canvas-command-scene3d-operations.test.js && node scripts/canvas-command-timeline-operations.test.js"

17 },

18 "os": [

19 "darwin",

20 "linux",

21 "win32"

22 ],

23 "cpu": [

24 "x64",

25 "arm64"

26 ],

27 "engines": {

28 "node": ">=16"

29 },

dist/xyq-canvas-command-runtime.cjsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/xyq-canvas-command-runtime.cjs

dist/xyq-canvas-command-runtime.cjsView on unpkg · L2

scripts/install-cli.jsView file

Lines 1-20javascript

1#!/usr/bin/env node

2

3const { install } = require("./install");

4

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/install-cli.jsView on unpkg · L2

5if (require.main === module) {

scripts/skills.jsView file

Lines 1-32javascript

1const fs = require("fs");

2const os = require("os");

3const path = require

scripts/canvas-command.jsView file

•matchType = normalized_sha256 matchedPackage = @pippit-dev/cli@1.0.24 matchedPath = scripts/canvas-command.js matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/canvas-command.jsView on unpkg

skills/xyq-marketing-skill/scripts/marketing.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @pippit-dev/cli@1.0.31 matchedIdentity = npm:QHBpcHBpdC1kZXYvY2xp:1.0.31 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

skills/xyq-marketing-skill/scripts/marketing.jsView on unpkg