registry / @shopify/cli / 4.9.4
@shopify/cli@4.9.4
A CLI tool to build for the Shopify platform
AI Security Review
scanned 21d ago · by lpm-firewall-aiSource inspection resolves the scanner signals to ordinary CLI operations and package-aligned telemetry. No concrete malicious behavior was established, so the package is clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI; the manifest declares no npm install lifecycle trigger.
Impact
No confirmed unauthorized disclosure, account change, or agent-configuration mutation was established.
Mechanism
The CLI sends a command telemetry event to Shopify and uses standard session, theme, and app-security-check code.
AI rationale
Source inspection resolves the scanner signals to ordinary CLI operations and package-aligned telemetry. No concrete malicious behavior was established, so the package is clean.
Network endpoints1
monorail-edge.shopifysvc.com/v1/produce
Decision evidence
public snapshotAI called this Clean at 98.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- package.json exposes the Shopify CLI binary and build-related scripts; it declares no npm install lifecycle script.
- The runtime hints resolve to app-log formatting, WebSocket authentication handling, Liquid parsing, and theme-file operations.
- The apparent account-action locations in dist/chunk-FKIVKNOV.js are diff-algorithm code; the AGENTS.md match is a theme-file discovery glob.
- The command-output signal includes a fixed machine-ID query and a Shopify-hosted app_cli3_command telemetry event; no concrete attack transfer was established.
- The added dist/chunk-EO4YJFMY.js implements an app security-check workflow for user-requested CLI use.
- The other required bundle paths were inspected; their cited excerpts show bundled module imports, with no concrete attack chain established.
Evidence against
- Static hints flagged command-output exfiltration and a newly added bundle, but inspected source maps these to machine-ID collection, Shopify usage telemetry, and an app security-check feature.
- The package contains network, process, and session-handling code; the reviewed excerpts show package-aligned CLI and protocol behavior.
Source & flagged code
17 flaggeddist/chunk-3V4VL3SD.jsView file
176`);return(y.length===1||y.length===2&&/at Error \(native\)/.test(y[1]))&&(m.stack=y[0]+`
L177: `+T),m};var z1={},rce=Is.getStack;z1={name:"contextualize",load:function(m){var T=function(y,h){var v=rce(),x=y2(m);return x.fallbackStack=v,x.addOnError(h),m._clientContext.run(x,...
L178: `).find(o=>o.includes("IOPlatformUUID"));if(!e)return"";let r=e.split('" = "');if(r.length===2)return r[1].slice(0,-1)}catch(t){X7e.diag.debug(`error reading machine id: ${t}`)}ret...
High
Child Process
Package source references child process execution.
dist/chunk-3V4VL3SD.jsView on unpkg · L176162`).filter(function(u){return!!u.match(r)&&!u.match(/^Error created at/)},this);return n.map(function(u){var c=u.split("@"),p=this.extractLocation(c.pop()),f=c.shift()||"",A=f.repla...
L163: `&&o.shift(),this._lineBuffer.length>0&&(this._lineBuffer[this._lineBuffer.length-1]+=o[0],o.shift()),this._lastChunkEndedWithCR=t[t.length-1]=="\r",this._lineBuffer=this._lineBuff...
L164: `+re(A(m),function(h){return" - "+h+" "+m[h]+", got "+jue(T[h])}).join(`
...
L176: `);return(y.length===1||y.length===2&&/at Error \(native\)/.test(y[1]))&&(m.stack=y[0]+`
L177: `+T),m};var z1={},rce=Is.getStack;z1={name:"contextualize",load:function(m){var T=function(y,h){var v=rce(),x=y2(m);return x.fallbackStack=v,x.addOnError(h),m._clientContext.run(x,...
L178: `).find(o=>o.includes("IOPlatformUUID"));if(!
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-EO4YJFMY.js
HighChild Processdist/chunk-3V4VL3SD.js
HighShelldist/chunk-4TF7ER72.js
HighSame File Env Network Executiondist/chunk-3V4VL3SD.js
HighCommand Output Exfiltrationdist/chunk-3V4VL3SD.js
HighSandbox Evasion Gated Capabilitydist/chunk-UEBUGSBT.js
HighCloud Metadata Accessdist/chunk-EO4YJFMY.js
HighObfuscated Payload Loaderdist/morph-BABFBRSW.js
HighCross File Remote Execution Contextdist/chunk-3V4VL3SD.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-3V4VL3SD.js
HighSemantic Analysis Limiteddist/chunk-7E4MJCVE.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @shopify/cli@4.9.4.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.9.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.