registry / @quantum-ai/gemini-cli / 0.45.15

@quantum-ai/gemini-cli@0.45.15

Gemini CLI - Autonomous AI Agent with TUI

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 565 file(s), 3.28 MB of source, external domains: ai.google.dev, aistudio.google.com, antigravity.google, api.github.com, cloud.google.com, developers.google.com, geminicli.com, github.com, goo.gle, policies.google.com, raw.githubusercontent.com, www.w3.org, www.youtube.com

Source & flagged code

2 flagged

dist/commands/gemma/setup.jsView file

Lines 1-28javascript

1/**

2 * @license

4 * SPDX-License-Identifier: Apache-2.0

5 */

6import { createHash } from 'node:crypto';

7import fs from 'node:fs';

8import path from 'node:path';

9import { execFileSync, spawn as nodeSpawn } from 'node:child_process';

10import chalk from 'chalk';

11import { debugLogger } from '@google/gemini-cli-core';

12import { loadSettings, SettingScope } from '../../config/settings.js';

13import { exitCli } from '../utils.js';

14import { DEFAULT_PORT, GEMMA_MODEL_NAME, PLATFORM_BINARY_SHA256, } from './constants.js';

15import { detectPlatform, getBinaryDownloadUrl, getBinaryPath, isBinaryInstalled, isModelDownloaded, } from './platform.js';

16import { startServer } from './start.js';

17import readline from 'node:readline';

18const log = (msg) => debugLogger.log(msg);

19const logError = (msg) => debugLogger.error(msg);

20async function promptYesNo(question) {

21 const rl = readline.createInterface({

22 input: process.stdin,

23 output: process.stdout,

24 });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/commands/gemma/setup.jsView on unpkg · L8

25 return new Promise((resolve) => {

26 rl.question(`${question} (y/N): `, (answer) => {

27 rl.close();

28 resolve(answer.trim().toLowerCase() === 'y' ||

package.jsonView file

Lines 129-156json

129 "devDependencies": {

130 "@types/command-exists": "1.2.3",

131 "@types/node": "20.11.24",

132 "@types/prompts": "2.4.9",

133 "@types/proper-lockfile": "4.1.4",

134 "@types/react": "19.2.17",

Source & flagged code

2 flagged · loading source

dist/commands/gemma/setup.jsView file

8import path from 'node:path'; L9: import { execFileSync, spawn as nodeSpawn } from 'node:child_process'; L10: import chalk from 'chalk'; ... L22: input: process.stdin, L23: output: process.stdout, L24: }); ... L46: const pctStr = (pct * 100).toFixed(0).padStart(3); L47: process.stderr.write(`\r [${bar}] ${pctStr}% ${formatBytes(downloaded)} / ${formatBytes(total)}`); L48: } ... L57: } L58: const response = await fetch(url, { redirect: 'follow' }); L59: if (!response.ok) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/commands/gemma/setup.jsView on unpkg · L8

package.jsonView file

•dependencies registry_only=@github/keytar,@lydell/node-pty,@lydell/node-pty-darwin-arm64,@lydell/node-pty-darwin-x64,@lydell/node-pty-linux-x64,@lydell/node-pty-win32-arm64,@lydell/node-pty-win32-x64,node-pty

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

Findings

1 Critical1 High3 Medium5 Low

CriticalManifest Confusionpackage.json

HighSandbox Evasion Gated Capabilitydist/commands/gemma/setup.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/commands/gemma/setup.jsView file

Lines 1-28javascript

1/**

2 * @license

4 * SPDX-License-Identifier: Apache-2.0

5 */

6import { createHash } from 'node:crypto';

7import fs from 'node:fs';

8import path from 'node:path';

9import { execFileSync, spawn as nodeSpawn } from 'node:child_process';

10import chalk from 'chalk';

11import { debugLogger } from '@google/gemini-cli-core';

12import { loadSettings, SettingScope } from '../../config/settings.js';

13import { exitCli } from '../utils.js';

14import { DEFAULT_PORT, GEMMA_MODEL_NAME, PLATFORM_BINARY_SHA256, } from './constants.js';

15import { detectPlatform, getBinaryDownloadUrl, getBinaryPath, isBinaryInstalled, isModelDownloaded, } from './platform.js';

16import { startServer } from './start.js';

17import readline from 'node:readline';

18const log = (msg) => debugLogger.log(msg);

19const logError = (msg) => debugLogger.error(msg);

20async function promptYesNo(question) {

21 const rl = readline.createInterface({

22 input: process.stdin,

23 output: process.stdout,

24 });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/commands/gemma/setup.jsView on unpkg · L8

25 return new Promise((resolve) => {

26 rl.question(`${question} (y/N): `, (answer) => {

27 rl.close();

28 resolve(answer.trim().toLowerCase() === 'y' ||

package.jsonView file

Lines 129-156json

129 "devDependencies": {

130 "@types/command-exists": "1.2.3",

131 "@types/node": "20.11.24",

132 "@types/prompts": "2.4.9",

133 "@types/proper-lockfile": "4.1.4",

134 "@types/react": "19.2.17",