registry / @shopify/cli / 4.8.2
@shopify/cli@4.8.2
A CLI tool to build for the Shopify platform
AI Security Review
scanned 1mo ago · by lpm-firewall-ai@shopify/cli 4.8.2 is a user-invoked Shopify command-line tool with no install lifecycle scripts. The process, file, compiler, and telemetry primitives in the required bundles match that CLI and do not form a concrete attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the shopify binary. Registry install does not execute package code.
Impact
No install-time mutation, hidden credential export, remote payload execution, or unconsented agent-control write was established.
Mechanism
Commands spawn processes, compile templates, read a requested .env, and scan a local app only as part of normal CLI use. Telemetry defaults to the Shopify CLI collector.
AI rationale
@shopify/cli 4.8.2 is a user-invoked Shopify command-line tool with no install lifecycle scripts. The process, file, compiler, and telemetry primitives in the required bundles match that CLI and do not form a concrete attack.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json names @shopify/cli 4.8.2, exposes the shopify bin at bin/run.js, and its scripts are only nx build, lint, and test with no preinstall, install, or postinstall.
- dist/chunk-ESTXKKAB.js is the bundled React 19.2.4 runtime used by the CLI interface.
- dist/chunk-W6ST525S.js is bundled oclif core that imports node:child_process spawn and filesystem helpers for CLI command execution.
- dist/chunk-D7S4HEQE.js defaults CLI OpenTelemetry to https://otlp-http-production-cli.shopifysvc.com, overridable by environment, which is the Shopify CLI telemetry host.
- dist/chunk-26LLUNJJ.js contains the shopify-app-doctor rules that inspect a local app project when that CLI feature runs.
- dist/morph-BMYYMQNX.js embeds the TypeScript 5.2.2 compiler.
- dist/chunk-5LGEBELU.js reads a caller-specified local .env file and errors if that file is missing.
- dist/chunk-TR4OWSEX.js vendors the ejs 3.1.10 template compiler used by the CLI framework.
Evidence against
- Environment helpers read a MAC address and CI metadata for CLI context and telemetry.
- The app doctor reads local source and env-like files inside the project the user points it at.
Source & flagged code
17 flaggeddist/chunk-ESTXKKAB.jsView file
237`),S}function B2(n,u){let c=`${u.cwd}${Qy}${process.env.PATH}`,r=Fy.default.sync(n,{nothrow:!0,path:c});if(r&&hy(r)===u.cwd){let E=["Skipped run of unsecure binary",{command:n},"fo...
L238: `+z.replace(/^Error(:[^\n]*)?\n/,""))});return G.prototype=Object.create(D.prototype),G.prototype.constructor=G,G.prototype.toString=function(){return this.message===void 0?this.na...
L239: `))u=Math.max(u,Oi(c));return u}var TS=new Map,eN=n=>{if(n.length===0)return{width:0,height:0};let u=TS.get(n);if(u)return u;let c=kB(n),r=n.split(`
High
Child Process
Package source references child process execution.
dist/chunk-ESTXKKAB.jsView on unpkg · L237233`),d=Math.max.apply(null,E.map(Q=>Q.length).concat([u.stops.length])),m=lR(u,r,d),S=[];for(let Q of E){let U=m.slice(0),b="";for(let X of Q)b+=aR.hex(U.shift().toHex())(X);S.push(b...
L234: `)}function uR(n){let u={interpolation:"rgb",hsvSpin:"short",...n};if(n!==void 0&&typeof n!="object")throw new TypeError(`Expected \`options\` to be an \`object\`, got \`${typeof n...
L235: \xB7 Command: ${n} ${u.join(" ")}
L236: \xB7 Working directory: ${d}
L237: `),S}function B2(n,u){let c=`${u.cwd}${Qy}${process.env.PATH}`,r=Fy.default.sync(n,{nothrow:!0,path:c});if(r&&hy(r)===u.cwd){let E=["Skipped run of unsecure binary",{command:n},"fo...
L238: `+z.replace(/^Error(:[^\n]*)?\n/,""))});return G.prototype=Object.create(D.prototype),G.prototype.constructor=G,G.prototype.toString=function(){retur
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-TR4OWSEX.js
HighChild Processdist/chunk-ESTXKKAB.js
HighShelldist/chunk-W6ST525S.js
HighSame File Env Network Executiondist/chunk-ESTXKKAB.js
HighCommand Output Exfiltrationdist/chunk-ESTXKKAB.js
HighSandbox Evasion Gated Capabilitydist/chunk-D7S4HEQE.js
HighCloud Metadata Accessdist/chunk-26LLUNJJ.js
HighObfuscated Payload Loaderdist/morph-BMYYMQNX.js
HighCross File Remote Execution Contextdist/chunk-26LLUNJJ.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-ESTXKKAB.js
HighSemantic Analysis Limiteddist/chunk-5LGEBELU.js#virtual:string-array:round1
Affected versions and remediation
This report applies to @shopify/cli@4.8.2.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.8.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.