registry / @shopify/cli / 4.9.2
@shopify/cli@4.9.2
A CLI tool to build for the Shopify platform
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe package manifest exposes a CLI executable and contains no npm install lifecycle hook. Source inspection traced the flagged command output to machine-identifier lookup and the agent-related match to theme-file handling; the scanner hints do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the Shopify CLI or invoking theme file handling.
Impact
No confirmed attack impact or unconsented agent control-surface change was established.
Mechanism
The package has no npm install lifecycle hook. Inspected code reads a machine identifier and lists theme files; it does not establish an attack chain.
AI rationale
The package manifest exposes a CLI executable and contains no npm install lifecycle hook. Source inspection traced the flagged command output to machine-identifier lookup and the agent-related match to theme-file handling; the scanner hints do not establish malicious behavior.
Evidence
package.jsondist/chunk-AKP4QAGL.jsdist/chunk-3E3MCY5O.js
Network endpoints2
error-analytics-production.shopifysvc.comerror-analytics-sessions-production.shopifysvc.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares the CLI entrypoint and has no install lifecycle hook.
- The agent-related chunk watches Shopify theme files, including an AGENTS.md pattern; this is part of theme file handling, not an agent configuration write.
- The flagged command output reads a platform machine identifier; the inspected code does not show command output being sent to an unrelated recipient.
- The required flagged bundles were inspected; their cited opening excerpts show bundled module imports, with no attack behavior established by those excerpts.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
17 flaggeddist/chunk-7ARGLS6W.jsView file
150See more help with --help`,Ym.default.getInstance().get("exitCodes")?.failedFlagParsing&&(g.oclif={exit:Ym.default.getInstance().get("exitCodes")?.failedFlagParsing}),g}},r=f=>{if(...
L151: `)}}xF();O.Args=vr(Gc());O.ux=vr(Li());var wF=zn();Object.defineProperty(O,"flush",{enumerable:!0,get:function(){return wF.flush}});var fg=Ap();Object.defineProperty(O,"stderr",{en...
L152: `+s).replace(a,u+`
High
Child Process
Package source references child process execution.
dist/chunk-7ARGLS6W.jsView on unpkg · L1509`),tl.config.errorLogger&&tl.config.errorLogger.log(r?.stack??"")}else throw r}Oe.error=nl;Oe.default=nl});var _o=E(wn=>{"use strict";y();Object.defineProperty(wn,"__esModule",{val...
L10: `),El.config.errorLogger&&El.config.errorLogger.log(t?.stack??"")}xt.warn=To;var Dl=new Set;function Ov(e){Dl.has(e)||To(e),Dl.add(e)}xt.memoizedWarn=Ov;xt.default=To});var Tl=E(Tr...
L11: `,h+=this.indent(this.wrap(d.trim(),r.indentation+2),4)),h+=`
High
9`),tl.config.errorLogger&&tl.config.errorLogger.log(r?.stack??"")}else throw r}Oe.error=nl;Oe.default=nl});var _o=E(wn=>{"use strict";y();Object.defineProperty(wn,"__esModule",{val...
L10: `),El.config.errorLogger&&El.config.errorLogger.log(t?.stack??"")}xt.warn=To;var Dl=new Set;function Ov(e){Dl.has(e)||To(e),Dl.add(e)}xt.memoizedWarn=Ov;xt.default=To});var Tl=E(Tr...
L11: `,h+=this.indent(this.wrap(d.trim(),r.indentation+2),4)),h+=`
Findings
1 Critical10 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-Q7PF4VKI.js
HighChild Processdist/chunk-7ARGLS6W.js
HighShelldist/chunk-7ARGLS6W.js
HighSame File Env Network Executiondist/chunk-3E3MCY5O.js
HighCommand Output Exfiltrationdist/chunk-3E3MCY5O.js
HighSandbox Evasion Gated Capabilitydist/chunk-2R2PKQQV.js
HighCloud Metadata Accessdist/chunk-Q7PF4VKI.js
HighObfuscated Payload Loaderdist/morph-BABFBRSW.js
HighCross File Remote Execution Contextdist/chunk-3E3MCY5O.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-3E3MCY5O.js
HighSemantic Analysis Limiteddist/chunk-2NMICU24.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @shopify/cli@4.9.2.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.9.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.