registry / @shopify/cli / 4.9.5
@shopify/cli@4.9.5
⚠ Under reviewA CLI tool to build for the Shopify platform
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected command-output handling does not demonstrate exfiltration, and the analytics excerpt does not establish a harmful transfer. The package’s large bundled source and incomplete cross-file analysis leave material behavior unresolved, so this review cannot support a clean verdict or a confirmed attack finding.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Unresolved; the package launcher starts the CLI, but the remaining bundled call paths were not fully traced.
Impact
No confirmed attack impact was found; unresolved bundled behavior prevents a clean determination.
Mechanism
The inspected subprocess code captures or forwards output to its caller; the reviewed excerpts do not show a network transfer of that output.
AI rationale
The inspected command-output handling does not demonstrate exfiltration, and the analytics excerpt does not establish a harmful transfer. The package’s large bundled source and incomplete cross-file analysis leave material behavior unresolved, so this review cannot support a clean verdict or a confirmed attack finding.
Evidence
dist/chunk-IGE4Y5SE.jsdist/morph-BABFBRSW.js
Decision evidence
public snapshotAI called this Manual Review at 58.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes the Shopify CLI launcher and lists development scripts, with no package install lifecycle script in the inspected section.
- The inspected subprocess handlers collect output and return it to the caller or pipe it to caller-provided streams; they do not establish an upload path.
- The package includes large bundled files whose behavior and cross-file call paths remain unresolved after this inspection.
Evidence against
- The inspected analytics setup points to a Shopify service, but this excerpt alone does not establish telemetry activation, payload contents, or consent.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
17 flaggeddist/chunk-4TF7ER72.jsView file
67`)[0])}};M.Help=Kn;function Xo(n){return n&&n.default?n.default:n}function Wh(n){return typeof n=="string"?{identifier:"default",target:n}:n.identifier?n:{...n,identifier:"default"...
L68: ${i.message}`)}}return Kn}});var Xn=m(Ee=>{"use strict";u();var Cr=Ee&&Ee.__importDefault||function(n){return n&&n.__esModule?n:{default:n}};Object.defineProperty(Ee,"__esModule",{...
L69: This usually means you have an oclif.manifest.json file that should be deleted in development. This file should be automatically generated when publishing.`);else return this._debu...
High
Child Process
Package source references child process execution.
dist/chunk-4TF7ER72.jsView on unpkg · L674`),g=`${i?"Caused by: ":""}${y}`;g=(0,qd.default)(g,Fd.errtermwidth-6,{hard:!0,trim:!1}),ho.settings.debug||(g=(0,xn.default)(g,3),g=(0,xn.default)(g,1,{includeEmptyLines:!0,indent...
L5: `)}});var mt=m(be=>{"use strict";u();var kd=be&&be.__createBinding||(Object.create?(function(n,e,t,i){i===void 0&&(i=t);var r=Object.getOwnPropertyDescriptor(e,t);(!r||("get"in r?!...
L6: `&&this._write(t,`
High
1Cross-file remote execution chain: dist/chunk-4TF7ER72.js spawns dist/chunk-IGE4Y5SE.js; helper contains network access plus dynamic code execution.
L1: import{a as Cn}from"./chunk-AAK376RT.js";import{a as Du}from"./chunk-P2OI2P2M.js";import{a as Ys}from"./chunk-636CTEW7.js";import{a as Ks,c as Xs,d as Ti,g as ju,k as Di,l as Ve,m ...
L2: `);return`${e}
...
L4: `),g=`${i?"Caused by: ":""}${y}`;g=(0,qd.default)(g,Fd.errtermwidth-6,{hard:!0,trim:!1}),ho.settings.debug||(g=(0,xn.default)(g,3),g=(0,xn.default)(g,1,{includeEmptyLines:!0,indent...
L5: `)}});var mt=m(be=>{"use strict";u();var kd=be&&be.__createBinding||(Object.create?(function(n,e,t,i){i===void 0&&(i=t);var r=Object.getOwnPropertyDescriptor(e,t);(!r||("get"in r?!...
L6: `&&this._write(t,`
...
L40:
L41: `)}groupFlags(e){let t=[],
Findings
1 Critical10 High7 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/chunk-5VRB3FBD.js
HighChild Processdist/chunk-4TF7ER72.js
HighShelldist/chunk-4TF7ER72.js
HighSame File Env Network Executiondist/chunk-IGE4Y5SE.js
HighCommand Output Exfiltrationdist/chunk-IGE4Y5SE.js
HighSandbox Evasion Gated Capabilitydist/chunk-PT3OZEBI.js
HighCloud Metadata Accessdist/chunk-VG5ZDVDQ.js
HighObfuscated Payload Loaderdist/morph-BABFBRSW.js
HighCross File Remote Execution Contextdist/chunk-4TF7ER72.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-7YXHILW4.js
HighSemantic Analysis Limiteddist/chunk-2VGPNRHH.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @shopify/cli@4.9.5.
See all versions of @shopify/cli for other recorded verdicts.
- Review the evidence and your use of @shopify/cli@4.9.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.