registry / @shopify/cli / 4.9.3
@shopify/cli@4.9.3
A CLI tool to build for the Shopify platform
AI Security Review
scanned 25d ago · by lpm-firewall-aiStatic hints highlighted bundled dynamic behavior and command output, but inspected source showed ordinary CLI project support and no npm install hook. No concrete malicious behavior was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the Shopify CLI or invoking its project-related commands.
Impact
No confirmed unauthorized data access, exfiltration, persistence, or install-time mutation was identified.
Mechanism
The inspected command helper returns stdout and stderr to its caller; no network transmission of that output was found in the reviewed excerpt.
AI rationale
Static hints highlighted bundled dynamic behavior and command output, but inspected source showed ordinary CLI project support and no npm install hook. No concrete malicious behavior was established.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a Shopify CLI entrypoint and has no npm install lifecycle script.
- The flagged AGENTS.md match is part of a list of project file patterns.
- The command helper captures output from a user-project command; it does not send that output to a network endpoint.
- The other required flagged files were inspected; no concrete attack behavior was identified in them.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
17 flaggeddist/chunk-4TF7ER72.jsView file
67`)[0])}};M.Help=Kn;function Xo(n){return n&&n.default?n.default:n}function Wh(n){return typeof n=="string"?{identifier:"default",target:n}:n.identifier?n:{...n,identifier:"default"...
L68: ${i.message}`)}}return Kn}});var Xn=m(Ee=>{"use strict";u();var Cr=Ee&&Ee.__importDefault||function(n){return n&&n.__esModule?n:{default:n}};Object.defineProperty(Ee,"__esModule",{...
L69: This usually means you have an oclif.manifest.json file that should be deleted in development. This file should be automatically generated when publishing.`);else return this._debu...
High
Child Process
Package source references child process execution.
dist/chunk-4TF7ER72.jsView on unpkg · L674`),g=`${i?"Caused by: ":""}${y}`;g=(0,qd.default)(g,Fd.errtermwidth-6,{hard:!0,trim:!1}),ho.settings.debug||(g=(0,xn.default)(g,3),g=(0,xn.default)(g,1,{includeEmptyLines:!0,indent...
L5: `)}});var mt=m(be=>{"use strict";u();var kd=be&&be.__createBinding||(Object.create?(function(n,e,t,i){i===void 0&&(i=t);var r=Object.getOwnPropertyDescriptor(e,t);(!r||("get"in r?!...
L6: `&&this._write(t,`
High
1Cross-file remote execution chain: dist/chunk-4TF7ER72.js spawns dist/chunk-IGE4Y5SE.js; helper contains network access plus dynamic code execution.
L1: import{a as Cn}from"./chunk-AAK376RT.js";import{a as Du}from"./chunk-P2OI2P2M.js";import{a as Ys}from"./chunk-636CTEW7.js";import{a as Ks,c as Xs,d as Ti,g as ju,k as Di,l as Ve,m ...
L2: `);return`${e}
...
L4: `),g=`${i?"Caused by: ":""}${y}`;g=(0,qd.default)(g,Fd.errtermwidth-6,{hard:!0,trim:!1}),ho.settings.debug||(g=(0,xn.default)(g,3),g=(0,xn.default)(g,1,{includeEmptyLines:!0,indent...
L5: `)}});var mt=m(be=>{"use strict";u();var kd=be&&be.__createBinding||(Object.create?(function(n,e,t,i){i===void 0&&(i=t);var r=Object.getOwnPropertyDescriptor(e,t);(!r||("get"in r?!...
L6: `&&this._write(t,`
...
L40:
L41: `)}groupFlags(e){let t=[],
Findings
1 Critical10 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-VCAYMY7D.js
HighChild Processdist/chunk-4TF7ER72.js
HighShelldist/chunk-4TF7ER72.js
HighSame File Env Network Executiondist/chunk-IKN6ICJR.js
HighCommand Output Exfiltrationdist/chunk-IKN6ICJR.js
HighSandbox Evasion Gated Capabilitydist/chunk-FKGN6F3F.js
HighCloud Metadata Accessdist/chunk-PFBESNYV.js
HighObfuscated Payload Loaderdist/morph-BABFBRSW.js
HighCross File Remote Execution Contextdist/chunk-4TF7ER72.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-IN634BRF.js
HighSemantic Analysis Limiteddist/chunk-6HWDGTSX.js
Affected versions and remediation
This report applies to @shopify/cli@4.9.3.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.9.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.