@shopify/cli@4.7.1
A CLI tool to build for the Shopify platform
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malware chain, install-time mutation, persistence, or demonstrated credential theft was found. Downgrade to warn because background analytics, environment-file access, and incomplete source coverage leave a real but unproven data-reporting risk.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the Shopify CLI.
Impact
Command metadata may be sent to Shopify telemetry infrastructure; the exact payload coverage remains unresolved in this static review.
Mechanism
Background command analytics and telemetry reporting.
AI rationale
No concrete malware chain, install-time mutation, persistence, or demonstrated credential theft was found. Downgrade to warn because background analytics, environment-file access, and incomplete source coverage leave a real but unproven data-reporting risk.
Evidence
dist/chunk-PK73ZSND.jsdist/chunk-4VJ6YK7U.jsdist/chunk-3HCWJRL6.js.env
Network endpoints1
otlp-http-production-cli.shopifysvc.com
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI starts a background analytics command and passes a serialized payload through its standard input.
- The package configures a Shopify telemetry collector endpoint.
- A bundled dotenv component reads a project .env file, while the analytics path warrants caution about what metadata enters reports.
- The reviewed build contains child-process and dynamic-code primitives, although the shown uses are conventional CLI or bundled-library behavior.
Evidence against
- package.json contains no preinstall, install, postinstall, or other lifecycle hook.
- The manifest exposes a user-invoked shopify binary rather than an import-time installer.
- The visible command execution is tied to CLI development and type-generation operations.
- No source inspected shows secret harvesting followed by transmission, destructive behavior, persistence, or agent-control-surface mutation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEval
Source & flagged code
15 flaggeddist/chunk-XTXYS7LB.jsView file
1import{a as Ot}from"./chunk-5HBIIYSK.js";import{a as ce}from"./chunk-RJ5VF3QY.js";import{a as Gt}from"./chunk-GB3YC4TI.js";import{a as ae}from"./chunk-636CTEW7.js";import{Ab as de,...
L2: `:10,r=typeof e=="string"?"\r":13;return e[e.length-1]===t&&(e=e.slice(0,-1)),e[e.length-1]===r&&(e=e.slice(0,-1)),e}s();var R=new WeakMap,Je=(e,t={})=>{if(typeof e!="function")thr...
High
Child Process
Package source references child process execution.
dist/chunk-XTXYS7LB.jsView on unpkg · L1dist/chunk-AFT6ABDE.jsView file
4|| (${i} === "string" && ${s} && ${s} == +${s} && !(${s} % 1))`).assign(a,(0,S._)`+${s}`);return;case"boolean":n.elseIf((0,S._)`${s} === "false" || ${s} === 0 || ${s} === null`).as...
L5: || ${i} === "boolean" || ${s} === null`).assign(a,(0,S._)`[${s}]`)}}}function Du({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,S._)`${e} !== undefined`,()=>t.assign((0,S._)`...
L6: missingProperty: ${n},
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/chunk-AFT6ABDE.jsView on unpkg · L4Findings
1 Critical8 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-TR4OWSEX.js
HighChild Processdist/chunk-XTXYS7LB.js
HighSame File Env Network Executiondist/chunk-IF6EYTHG.js
HighCommand Output Exfiltrationdist/chunk-GXOFJIKQ.js
HighSandbox Evasion Gated Capabilitydist/chunk-4VJ6YK7U.js
HighObfuscated Payload Loaderdist/chunk-TP4Z5OZT.js
HighCross File Remote Execution Contextdist/chunk-PK73ZSND.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-PK73ZSND.js
HighSemantic Analysis Limiteddist/chunk-3HCWJRL6.js#virtual:string-array:round1
MediumDynamic Requiredist/chunk-TOLPNBZK.js
MediumNetwork
Affected versions and remediation
This report applies to @shopify/cli@4.7.1.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.7.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.