registry / @shopify/cli / 4.8.0
@shopify/cli@4.8.0
A CLI tool to build for the Shopify platform
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious behavior was proven, but the opaque, extensive bundled code prevents a clean verdict. Downgrade to a warning rather than blocking because there is no install-time trigger or confirmed attack chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running the shopify command or a Shopify deployment command.
Impact
An unresolved risk remains because opaque bundled code can act with the invoking user's permissions.
Mechanism
Bundled CLI execution with project, credential, and network access.
AI rationale
No concrete malicious behavior was proven, but the opaque, extensive bundled code prevents a clean verdict. Downgrade to a warning rather than blocking because there is no install-time trigger or confirmed attack chain.
Evidence
package.jsondist/chunk-UAFEFKAQ.jsdist/chunk-NGLMZYS7.jsdist/chunk-YFINLODF.jsdist/chunk-R6ICQT2D.jsdist/chunk-XHKWITLA.jsdist/chunk-3JXPOOFV.jsdist/morph-BMYYMQNX.jsbin/run.jsdist/bootstrap.js
Network endpoints1
otlp-http-production-cli.shopifysvc.com
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The published artifact contains very large, minified bundled modules with filesystem, process, environment, credential, and network helpers; the complete behavior cannot be reliably traced by static review.
- The manifest points main and module at src/index.js while the published executable loads dist code, creating an inconsistent and opaque entrypoint layout.
- The code collects CI metadata and a MAC address and defines a Shopify telemetry endpoint.
- The bundle includes command-execution support and deployment code that can act on project files and authenticated Shopify resources when CLI commands run.
Evidence against
- package.json has no preinstall, install, postinstall, or prepare lifecycle hook.
- The executable is a user-invoked CLI entrypoint that loads dist/bootstrap.js.
- No inspected source established secret exfiltration, destructive install-time activity, remote payload execution, or agent-control-surface mutation.
- The observed telemetry and deployment operations use Shopify-aligned endpoints and CLI functionality.
Behavioral surface
Source & flagged code
17 flaggeddist/chunk-UAFEFKAQ.jsView file
1import{a as Ot}from"./chunk-5HBIIYSK.js";import{a as Gt}from"./chunk-GB3YC4TI.js";import{a as ce}from"./chunk-RJ5VF3QY.js";import{a as ae}from"./chunk-636CTEW7.js";import{Ab as de,...
L2: `:10,r=typeof e=="string"?"\r":13;return e[e.length-1]===t&&(e=e.slice(0,-1)),e[e.length-1]===r&&(e=e.slice(0,-1)),e}s();var R=new WeakMap,Je=(e,t={})=>{if(typeof e!="function")thr...
High
Child Process
Package source references child process execution.
dist/chunk-UAFEFKAQ.jsView on unpkg · L1dist/chunk-4QBJ5JBX.jsView file
1import{a as ft,c,e as pt,g as a}from"./chunk-VKWPEFWQ.js";var M=c((qt,U)=>{"use strict";a();var m=class t extends Error{constructor(e,s,r){super("[ParserError] "+e,s,r),this.name="...
L2: `,[CHAR_f]:"\f",[CHAR_r]:"\r",[CHAR_QUOT]:'"',[CHAR_BSOL]:"\\"};function isDigit(t){return t>=CHAR_0&&t<=CHAR_9}function isHexit(t){return t>=CHAR_A&&t<=CHAR_F||t>=CHAR_a&&t<=CHAR_...
L3: `,e&&e.split){let r=e.split(/\n/),i=String(Math.min(r.length,t.line+3)).length,h=" ";for(;h.length<i;)h+=" ";for(let n=Math.max(0,t.line-1);n<Math.min(r.length,t.line+2);++n){let o...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/chunk-4QBJ5JBX.jsView on unpkg · L1Findings
2 Critical9 High7 Medium7 Low
CriticalProtestwaredist/chunk-GNBRCK7L.js
CriticalPrevious Version Dangerous Deltadist/chunk-VFM2KQRM.js
HighChild Processdist/chunk-UAFEFKAQ.js
HighSame File Env Network Executiondist/chunk-NGLMZYS7.js
HighCommand Output Exfiltrationdist/chunk-YFINLODF.js
HighSandbox Evasion Gated Capabilitydist/chunk-R6ICQT2D.js
HighCloud Metadata Accessdist/chunk-XHKWITLA.js
HighObfuscated Payload Loaderdist/morph-BMYYMQNX.js
HighCross File Remote Execution Contextdist/chunk-3JXPOOFV.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-3JXPOOFV.js
HighSemantic Analysis Limiteddist/chunk-6QDOCBD4.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @shopify/cli@4.8.0.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.