Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@sciagent/cli@1.1.6: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 13 finding(s) warrant review before installing.

View on npm All versions

registry / @sciagent/cli / 1.1.6

@sciagent/cli@1.1.6

SciAgent CLI - AI Research Assistant

AI Security Review

scanned 14h ago · by lpm-firewall-ai

Install-time code fetches and installs large executable payloads from remote registries without integrity verification. The CLI later executes the downloaded SciAgent binary.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install runs postinstall; invoking sciagent executes its downloaded binary.

Impact

A compromised or substituted download endpoint can deliver arbitrary native code.

Mechanism

Unverified remote binary staging and execution

Rationale

Source establishes an unverified install-time remote payload chain, but not concrete malicious behavior by the reviewed code. Warn rather than block.

Evidence

package.jsonscripts/postinstall.jsbin/sciagent.jsscripts/chmod.js~/.sciagent/bin/sciagent~/.sciagent/bin/codebuddy-headless

Network endpoints6

jihulab.comu250924-bfd4-44855e5c.westb.seetacloud.com:8443mirrors.cloud.tencent.commirrors.aliyun.compypi.tuna.tsinghua.edu.cnpypi.org

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Decision evidence

public snapshot

AI called this Suspicious at 95.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

package.json runs scripts/postinstall.js on install.
scripts/postinstall.js downloads unsigned platform binaries into ~/.sciagent/bin.
postinstall installs @tencent-ai/codebuddy-code globally as a fallback.
bin/sciagent.js downloads then executes the fetched native binary.
Remote payloads are accepted by size only; no hash or signature verification.

Evidence against

No credential harvesting or exfiltration is present in inspected source.
No AI-agent configuration/control-surface writes were found.
Filesystem changes are limited to ~/.sciagent/bin, temp files, and global npm fallback.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 40.0 KB of source, external domains: files.pythonhosted.org, gitee.com, jihulab.com, mirrors.aliyun.com, mirrors.cloud.tencent.com, pypi.org, pypi.tuna.tsinghua.edu.cn, u250924-bfd4-44855e5c.westb.seetacloud.com

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/sciagent.jsView file

19L20: const { spawn, execSync } = require('child_process'); L21: const path = require('path');

High

Child Process

Package source references child process execution.

bin/sciagent.jsView on unpkg · L19

scripts/postinstall.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sciagent/cli@1.0.95 matchedIdentity = npm:QHNjaWFnZW50L2NsaQ:1.0.95 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall.jsView on unpkg

548L549: // Windows: 优先使用 PowerShell（更可靠的大文件下载） L550: if (platform === 'win32') {

High

Shell

Package source references shell execution.

scripts/postinstall.jsView on unpkg · L548

454try { L455: execSync('npm install -g @tencent-ai/codebuddy-code', { L456: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L454

Findings

1 Critical4 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltascripts/postinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/sciagent.js

HighShellscripts/postinstall.js

HighRuntime Package Installscripts/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

95%Warn

Verdict confidence

IntentDangerous Capability

TypeStaged Payload Carrier

False-positive riskLow

Review stagesource_first_review

Firewall policyMatched warn-list

Package metadata

npm

AuthorSciAgent Team

Maintainersliuteng88

Version1.1.8

PublishedJul 20, 2026

LicenseMIT

Dependencies0

Integrityverified

Package size10.4 KB

Files4

Keywordsairesearchagentclicodebuddy

LinksRepository

Runtime surface

package.json

Entrypointsmain → index.jsbin → sciagent

Runtimenode >=16os linux, darwin, win32cpu x64, arm64

Artifact40.7 KB · 4 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

ChildProcessEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

6 flagged

package.jsonView file

Lines 1-35json

1{

2 "name": "@sciagent/cli",

3 "version": "1.1.6",

4 "description": "SciAgent CLI - AI Research Assistant",

5 "main": "index.js",

6 "files": [

7 "bin/",

8 "scripts/",

9 "index.js"

10 ],

11 "bin": {

12 "sciagent": "bin/sciagent.js"

13 },

14 "scripts": {

15 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L15

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L15

16 },

17 "optionalDependencies": {},

18 "keywords": [

19 "ai",

20 "research",

21 "agent",

22 "cli",

23 "codebuddy"

24 ],

25 "author": "SciAgent Team",

26 "license": "MIT",

27 "repository": {

28 "type": "git",

29 "url": "https://gitee.com/garva/research-agent.git"

30 },

31 "engines": {

32 "node": ">=16"

33 },

34 "os": [

35 "linux",

bin/sciagent.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2

3/**

4 * SciAgent CLI 薄壳脚本

5 * 自动识别平台并调用对应的预编译二进制文件

6 *

7 * 二进制查找策略：

8 * 1. %LOCALAPPDATA%\sciagent\bin\ (Windows) 或 ~/.sciagent/bin/ (Linux/Mac)

9 * - 带严格版本校验（.version文件必须匹配CURRENT_VERSION）

10 * - 版本不匹配时自动从极狐GitLab下载正确版本

11 * 2. 本地开发目录（仅开发模式）

12 * 3. 未找到时自动从极狐GitLab下载

scripts/postinstall.jsView file

Lines 434-474javascript

434 timeout: 120000

435 });

436 }

437

438 if (fs.existsSync(targetPath)) {

439 const stats = fs.statSync(targetPath);

13 *

14 * 注意：不再从npm optionalDependencies中查找二进制，因为：

15 * - npm缓存中的旧包可能包含旧版二进制

16 * - npm可能修改package.json版本号来匹配请求，但二进制文件仍是旧的

17 * - 超过250MB的包无法发布到npm

18 */

19

20const { spawn, execSync } = require('child_process');

21const path = require('path');

High

Child Process

Package source references child process execution.

bin/sciagent.jsView on unpkg · L19

22const fs = require('fs');

23const os = require('os');

24

25// 当前版本号 - 与 postinstall.js 和 package.json 保持同步

26const CURRENT_VERSION = '1.1.6';

27

28// 极狐GitLab下载配置

29const JIHULAB_URL = 'https://jihulab.com';

30const JIHULAB_PROJECT_ID = 351778;

31const JIHULAB_PACKAGE_NAME = 'sciagent';

32const JIHULAB_DOWNLOAD_TOKEN = '2qxfs606HfwESUYJxtRlgm86MQp1OjVnazAK.01.101vzs2qo';

33

34// 平台和架构映射

35const PLATFORM_MAP = {

36 linux: 'linux',

37 darwin: 'darwin',

38 win32: 'win32'

39};

440 console.log(`✅ CodeBuddy SDK 安装成功！(PyPI wheel)`);

441 console.log(` 路径: ${targetPath}`);

442 console.log(` 大小: ${(stats.size / (1024 * 1024)).toFixed(1)} MB`);

443

444 try { fs.unlinkSync(wheelPath); fs.unlinkSync(scriptPath); fs.rmdirSync(tmpDir); } catch (e) {}

445 return true;

446 }

447 } catch (e) {

448 console.log(` ⚠️ PyPI 下载失败: ${e.message}`);

449 }

450 }

451

452 // 策略2: 从 npm 安装 @tencent-ai/codebuddy-code（全平台支持，国内可访问）

453 console.log(' 尝试从 npm 安装 @tencent-ai/codebuddy-code...');

454 try {

455 execSync('npm install -g @tencent-ai/codebuddy-code', {

456 stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L454

457 timeout: 300000

458 });

459

460 // 查找 npm 安装的 codebuddy-headless.js

461 const npmRootResult = execSync('npm root -g', { encoding: 'utf8', timeout: 10000 }).trim();

462 const headlessJsPath = path.join(npmRootResult, '@tencent-ai', 'codebuddy-code', 'dist', 'codebuddy-headless.js');

463

464 if (fs.existsSync(headlessJsPath)) {

465 // 创建 wrapper 脚本，让 codebuddy-headless 可以被直接调用

466 const binDir = getCodebuddyBinDir();

467 fs.mkdirSync(binDir, { recursive: true });

468 const binaryName = BINARY_NAMES[platform] || 'codebuddy-headless';

469 const wrapperPath = path.join(binDir, binaryName);

470

471 if (platform === 'win32') {

472 // Windows: 创建 .cmd wrapper

473 const cmdPath = wrapperPath.replace(/\.(exe)?$/, '.cmd');

474 fs.writeFileSync(cmdPath, `@echo off\r\nnode "${headlessJsPath}" %*\r\n`);

Lines 528-568javascript

528// Deploy token with read_package_registry permission (for downloading)

529const JIHULAB_DOWNLOAD_TOKEN = '2qxfs606HfwESUYJxtRlgm86MQp1OjVnazAK.01.101vzs2qo';

530

531async function downloadFromJiHuLab(platform, arch, version) {

532 const binName = platform === 'win32' ? 'sciagent.exe' : 'sciagent';

533 const ext = platform === 'win32' ? '.exe' : '';

534 const filename = `sciagent-${platform}-${arch}${ext}`;

535

536 const downloadUrl = (

537 `${JIHULAB_URL}/api/v4/projects/${JIHULAB_PROJECT_ID}` +

538 `/packages/generic/${JIHULAB_PACKAGE_NAME}/${version}/${filename}` +

539 `?access_token=${JIHULAB_DOWNLOAD_TOKEN}`

540 );

541

542 console.log(`\n [JiHuLab] Downloading ${filename} v${version}...`);

543

544 // 确定安装目录

545 const installDir = getHomeBinDir();

546 fs.mkdirSync(installDir, { recursive: true });

547 const targetPath = path.join(installDir, binName);

548

549 // Windows: 优先使用 PowerShell（更可靠的大文件下载）

550 if (platform === 'win32') {

High

Shell

Package source references shell execution.

scripts/postinstall.jsView on unpkg · L548

551 try {

552 const tmpScript = path.join(os.tmpdir(), 'sciagent-download.ps1');

553 const scriptContent = [

554 '$ProgressPreference = "SilentlyContinue"',

555 `$uri = "${downloadUrl}"`,

556 `$out = "${targetPath}"`,

557 'Write-Host " [JiHuLab] Downloading..."',

558 'Invoke-WebRequest -Uri $uri -OutFile $out -UseBasicParsing',

559 'if (Test-Path $out) { $s = (Get-Item $out).Length; Write-Host " [JiHuLab] Downloaded: $s bytes" } else { Write-Error "File not created"; exit 1 }'

560 ].join('\r\n');

561 fs.writeFileSync(tmpScript, scriptContent, 'utf8');

562

563 try {

564 execSync(`powershell -NoProfile -ExecutionPolicy Bypass -File "${tmpScript}"`, {

565 stdio: 'inherit',

566 timeout: 600000

567 });

568 } finally {

•matchType = previous_version_dangerous_delta matchedPackage = @sciagent/cli@1.0.95 matchedIdentity = npm:QHNjaWFnZW50L2NsaQ:1.0.95 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/postinstall.jsView on unpkg