registry / @shopify/cli / 4.5.0
@shopify/cli@4.5.0
A CLI tool to build for the Shopify platform
AI Security Review
scanned 4mo ago · by lpm-firewall-aiDirect inspection contradicts the scanner's malicious label: the package has no npm lifecycle hook and its flagged chunks implement bundled CLI/UI and user-command functionality. Network and write capabilities are package-aligned and no concrete malicious chain was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User invokes the shopify CLI or an explicit command.
Impact
No install-time execution, credential exfiltration, foreign AI-agent control-surface mutation, remote payload execution, or destructive persistence was confirmed.
Mechanism
User-invoked Shopify CLI operations and package-aligned service requests.
AI rationale
Direct inspection contradicts the scanner's malicious label: the package has no npm lifecycle hook and its flagged chunks implement bundled CLI/UI and user-command functionality. Network and write capabilities are package-aligned and no concrete malicious chain was found.
Evidence
package.jsonbin/run.jsdist/bootstrap.jsdist/hooks/prerun.jsdist/hooks/postrun.jsdist/cli/services/commands/doc/fetch.jsdist/chunk-BXDZX3BS.jsdist/chunk-JGN7YG5X.jsdist/cli/services/commands/notifications.js
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no preinstall, install, postinstall, or prepare hook.
- bin/run.js only loads dist/bootstrap.js after the user invokes shopify.
- dist/bootstrap.js configures Shopify-prefixed proxy settings and CLI error handling.
- dist/cli/services/commands/doc/fetch.js restricts fetches to shopify.dev subdomains.
- dist/chunk-BXDZX3BS.js is bundled terminal/UI dependency code; no protestware behavior found.
- No reads or writes to AI-agent configuration paths were found in inspected runtime code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
Source & flagged code
14 flaggeddist/chunk-LKZ7ARYS.jsView file
4`)}function Hs(r){r?process.env.DEBUG=r:delete process.env.DEBUG}function Ws(){return process.env.DEBUG}function Ms(r){r.inspectOpts={};let e=Object.keys(R.inspectOpts);for(let t=0...
L5: `).map(e=>e.trim()).join(" ")};Lt.O=function(r){return this.inspectOpts.colors=this.useColors,ye.inspect(r,this.inspectOpts)}});var ee=E((yl,Me)=>{a();typeof process>"u"||process.t...
L6: These warnings can only be addressed by the owner(s) of ${r.name}.`)),(r.pjson.bugs||r.pjson.repository)&&P.ux.stderr(`We suggest that you create an issue at ${la(r.pjson.bugs,r.pj...
High
Child Process
Package source references child process execution.
dist/chunk-LKZ7ARYS.jsView on unpkg · L41Cross-file remote execution chain: dist/chunk-LKZ7ARYS.js spawns dist/npa-A4YSCQ5Q.js; helper contains network access plus dynamic code execution.
L1: import{a as we}from"./chunk-AAK376RT.js";import{a as js}from"./chunk-P2OI2P2M.js";import{a as wt}from"./chunk-636CTEW7.js";import{l as As,r as D}from"./chunk-T6CC5WUU.js";import{a ...
L2: `).join(`
L3: `+i),r.push(n+"m+"+ve.exports.humanize(this.diff)+"\x1B[0m")}else r[0]=Xs()+e+" "+r[0]}function Xs(){return R.inspectOpts.hideDate?"":new Date().toISOString()+" "}function Js(...r)...
L4: `)}function Hs(r){r?process.env.DEBUG=r:delete process.env.DEBUG}function Ws(){return process.env.DEBUG}function Ms(r){r.inspectOpts={};let e=Object.keys(R.inspectOpts);for(let t=0...
L5: `).map(e=>e.trim()).join(" ")};Lt.O=function(r){return this.inspectOpts
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
Findings
2 Critical7 High6 Medium8 Low
CriticalProtestwaredist/chunk-JGN7YG5X.js
CriticalPrevious Version Dangerous Deltadist/chunk-BXDZX3BS.js
HighChild Processdist/chunk-LKZ7ARYS.js
HighSame File Env Network Executiondist/chunk-BXDZX3BS.js
HighCommand Output Exfiltrationdist/chunk-3EQY5B4S.js
HighSandbox Evasion Gated Capabilitydist/chunk-MGPLKG23.js
HighCross File Remote Execution Contextdist/chunk-LKZ7ARYS.js
HighShips High Entropy Blobdist/assets/hydrogen/virtual-routes/assets/jetbrainsmono-variable-font.woff2
HighOversized Source Filedist/morph-CG6HEMCQ.js
MediumDynamic Requiredist/chunk-VDN6MEYI.js
MediumNetwork
Affected versions and remediation
This report applies to @shopify/cli@4.5.0.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.