registry / @shopify/cli / 4.9.1
@shopify/cli@4.9.1
A CLI tool to build for the Shopify platform
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest has no npm install lifecycle hook, and source inspection did not establish the scanner’s command-output exfiltration claim or an unconsented agent configuration change. The observed agent-related behavior is conditional command output, so the package is clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running a CLI command; the hint additionally requires Claude Code environment variables.
Impact
No confirmed malicious impact.
Mechanism
The inspected code lists theme and documentation paths and conditionally writes a hint to standard error. No confirmed agent-control mutation or command-output exfiltration was established.
AI rationale
The manifest has no npm install lifecycle hook, and source inspection did not establish the scanner’s command-output exfiltration claim or an unconsented agent configuration change. The observed agent-related behavior is conditional command output, so the package is clean.
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a Shopify CLI executable and has no npm install lifecycle script.
- The flagged theme bundle lists project documentation and theme asset paths for processing; this alone does not show agent-control mutation.
- The CLI prerun hook is part of command execution, and its agent hint is conditional on Claude Code environment variables.
- The required finding files were inspected; their flagged patterns do not establish a concrete attack.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
17 flaggeddist/chunk-EDLID4PK.jsView file
150See more help with --help`,Ym.default.getInstance().get("exitCodes")?.failedFlagParsing&&(g.oclif={exit:Ym.default.getInstance().get("exitCodes")?.failedFlagParsing}),g}},r=f=>{if(...
L151: `)}}xF();O.Args=vr(Gc());O.ux=vr(Li());var wF=zn();Object.defineProperty(O,"flush",{enumerable:!0,get:function(){return wF.flush}});var fg=Ap();Object.defineProperty(O,"stderr",{en...
L152: `+s).replace(a,u+`
High
Child Process
Package source references child process execution.
dist/chunk-EDLID4PK.jsView on unpkg · L1509`),tl.config.errorLogger&&tl.config.errorLogger.log(r?.stack??"")}else throw r}Oe.error=nl;Oe.default=nl});var _o=E(wn=>{"use strict";y();Object.defineProperty(wn,"__esModule",{val...
L10: `),El.config.errorLogger&&El.config.errorLogger.log(t?.stack??"")}xt.warn=To;var Dl=new Set;function Ov(e){Dl.has(e)||To(e),Dl.add(e)}xt.memoizedWarn=Ov;xt.default=To});var Tl=E(Tr...
L11: `,h+=this.indent(this.wrap(d.trim(),r.indentation+2),4)),h+=`
High
9`),tl.config.errorLogger&&tl.config.errorLogger.log(r?.stack??"")}else throw r}Oe.error=nl;Oe.default=nl});var _o=E(wn=>{"use strict";y();Object.defineProperty(wn,"__esModule",{val...
L10: `),El.config.errorLogger&&El.config.errorLogger.log(t?.stack??"")}xt.warn=To;var Dl=new Set;function Ov(e){Dl.has(e)||To(e),Dl.add(e)}xt.memoizedWarn=Ov;xt.default=To});var Tl=E(Tr...
L11: `,h+=this.indent(this.wrap(d.trim(),r.indentation+2),4)),h+=`
Findings
1 Critical10 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-COFGQT76.js
HighChild Processdist/chunk-EDLID4PK.js
HighShelldist/chunk-EDLID4PK.js
HighSame File Env Network Executiondist/chunk-7UZO72KN.js
HighCommand Output Exfiltrationdist/chunk-ET2CGROE.js
HighSandbox Evasion Gated Capabilitydist/chunk-C4QR7Z4N.js
HighCloud Metadata Accessdist/chunk-UZTL2UET.js
HighObfuscated Payload Loaderdist/morph-42EXMN3K.js
HighCross File Remote Execution Contextdist/chunk-N56BJ3F7.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-KCHERKZO.js
HighSemantic Analysis Limiteddist/chunk-254XYKPN.js
Affected versions and remediation
This report applies to @shopify/cli@4.9.1.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.9.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.