registry / @shopify/cli / 4.6.1
@shopify/cli@4.6.1
A CLI tool to build for the Shopify platform
AI Security Review
scanned 3mo ago · by lpm-firewall-aiDirect inspection shows a bundled Shopify CLI with no lifecycle scripts and user-invoked, package-aligned network behavior. Scanner findings are explained by bundled dependencies and CLI functionality, not a concrete malicious chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs the shopify CLI command.
Impact
No unconsented install-time mutation, credential harvesting, remote payload execution, or destructive behavior established.
Mechanism
Local CLI bootstrap with command hooks and Shopify notification retrieval.
AI rationale
Direct inspection shows a bundled Shopify CLI with no lifecycle scripts and user-invoked, package-aligned network behavior. Scanner findings are explained by bundled dependencies and CLI functionality, not a concrete malicious chain.
Evidence
package.jsonbin/run.jsdist/bootstrap.jsdist/hooks/prerun.jsdist/chunk-6ZPHB5U2.jsdist/chunk-445NFHXL.jsdist/chunk-6HQMZ324.jsdist/chunk-6ZPH5U2.js
Network endpoints1
cdn.shopify.com/static/cli/notifications.json
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no preinstall/install/postinstall/prepare hook.
- bin/run.js only imports local dist/bootstrap.js for explicit CLI use.
- dist/bootstrap.js configures Shopify proxy support and CLI error/signal handling.
- dist/hooks/prerun.js starts command analytics, version checking, and background notifications only after a command runs.
- dist/chunk-6ZPHB5U2.js fetches Shopify CLI notifications from cdn.shopify.com with CI/test and command exclusions.
- No protestware strings found in package JavaScript; the flagged chunk contains Shopify command/auth code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetry
Source & flagged code
16 flaggeddist/chunk-EQNJ2NQD.jsView file
1import{a as l,c as a,d as C,f as v}from"./chunk-UKQ7NE5V.js";import{a as I,c as d,e as Q,g as u}from"./chunk-VKWPEFWQ.js";var b=d((he,R)=>{"use strict";u();var g={},X=process.nextT...
L2: `).split(`
High
Child Process
Package source references child process execution.
dist/chunk-EQNJ2NQD.jsView on unpkg · L11import{a as l,c as a,d as C,f as v}from"./chunk-UKQ7NE5V.js";import{a as I,c as d,e as Q,g as u}from"./chunk-VKWPEFWQ.js";var b=d((he,R)=>{"use strict";u();var g={},X=process.nextT...
L2: `).split(`
L3: `).slice(1),i=[],o=0;o<t.length;o+=1){var c=t[o].trim();c!==""&&i.push(c)}e(null,i)})}});var K=d((Ae,F)=>{u();var se=I("child_process").execFile;F.exports=function(e){se("/bin/ls",...
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-EQNJ2NQD.jsView on unpkg · L1dist/chunk-6HQMZ324.jsView file
Findings
2 Critical8 High7 Medium8 Low
CriticalProtestwaredist/chunk-445NFHXL.js
CriticalPrevious Version Dangerous Deltadist/chunk-6HQMZ324.js
HighChild Processdist/chunk-EQNJ2NQD.js
HighSame File Env Network Executiondist/chunk-BCZMDFI2.js
HighCommand Output Exfiltrationdist/chunk-ET2CGROE.js
HighSandbox Evasion Gated Capabilitydist/chunk-EQNJ2NQD.js
HighObfuscated Payload Loaderdist/chunk-7L5AIZOP.js
HighCross File Remote Execution Contextdist/morph-ABSWZEVT.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-AFM3UZQO.js
HighSemantic Analysis Limiteddist/chunk-C7LFLIRT.js
MediumDynamic Requiredist/chunk-VDN6MEYI.js
Affected versions and remediation
This report applies to @shopify/cli@4.6.1.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.