registry / @prefactor/cli
@prefactor/cli
Prefactor command-line interface
This report shows the evidence for @prefactor/cli@0.6.1. 0 of 6 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package exposes a Prefactor CLI and has no install lifecycle hook. The inspected downloads, API requests, and platform check are consistent with CLI functionality and do not show automatic data collection or unrelated execution.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI network and installation operations are initiated by user-run commands; package.json declares no lifecycle scripts.
Impact
No automatic credential collection, unrelated data transfer, or malicious execution was identified.
Mechanism
The installer fetches the CLI’s own release assets from GitHub, and API requests use the configured Prefactor service URL and user-selected credentials.
AI rationale
The package exposes a Prefactor CLI and has no install lifecycle hook. The inspected downloads, API requests, and platform check are consistent with CLI functionality and do not show automatic data collection or unrelated execution.
Evidence
$HOME/.prefactor (installer target)
Network endpoints2
github.com/prefactordev/typescript-sdk/releases/downloadapp.prefactorai.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as Prefactor’s CLI and exposes its library and CLI entry points; it declares no lifecycle scripts.
- The installer downloads release assets from the Prefactor GitHub releases host, unless the user configures an override.
- Downloaded assets are fetched by the installer’s explicit download routine; review found no install hook that invokes it automatically.
- The CLI’s `ping` command sends a supplied or selected API token to the configured Prefactor API URL when the user runs that command.
- Platform detection runs `sysctl` only to check whether macOS is under Rosetta translation.
Evidence against
- The package uses network, filesystem, and child-process capabilities for CLI functions such as API requests and installing or updating its own binary.
- The scan’s reported dangerous delta is not supported by evidence of automatic malicious behavior in the inspected entry points and installer.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
8 flaggeddist/install/platform.jsView file
1import { execFileSync } from 'node:child_process';
L2: function normalizePlatform(platform) {
High
Child Process
Package source references child process execution.
dist/install/platform.jsView on unpkg · L139try {
const translated = deps
.execFileSync('sysctl', ['-in', 'sysctl.proc_translated'], {
encoding: 'utf8',
stdio: ['ignore', 'pipe', 'ignore'],
})
.trim();
return translated === '1';
}
catch {
return false;
}
}
export function detec
Low
Ai Review Evidence
Platform detection runs `sysctl` only to check whether macOS is under Rosetta translation.
dist/install/platform.jsView on unpkg · L39dist/bin/cli.cjsView file
495Cross-file remote execution chain: dist/bin/cli.cjs spawns dist/bin/cli.js; helper contains network access plus dynamic code execution.
L495: var import_commander13 = require("commander");
L496: // packages/cli/package.json
L497: var package_default = {
...
L526: type: "git",
L527: url: "git+https://github.com/prefactordev/typescript-sdk.git",
L528: directory: "packages/cli"
...
L558: method: "PUT",
L559: body: { details }
L560: });
...
L694: async function findConfigPath() {
L695: const directoryRoot = await findDirectoryRoot(process.cwd());
L696: const directoryRootConfigPath = import_node_path.resolve(directoryRoot, CONFIG_FILENAME);
Findings
1 Critical2 High1 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/install/platform.js
HighCross File Remote Execution Contextdist/bin/cli.cjs
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/install/installer.js
LowSuspicious Lifecycle Evidencedist/install/installer.js
LowAi Review Evidencedist/bin/cli.js
LowAi Review Evidencedist/install/platform.js
Affected versions and remediation
This report applies to @prefactor/cli@0.6.1.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @prefactor/cli@0.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.