registry / Data exfiltration / @siranjeevan/gitnest
@siranjeevan/gitnest
One Workspace. Multiple Git Identities.
This report shows the evidence for @siranjeevan/gitnest@1.0.4. 3 of 3 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource establishes both an install-time unsigned executable supply chain and concrete user-identity disclosure. These are not merely scanner labels or dormant dependencies.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm install activates the downloader; running gitnest login activates the PII upload.
Impact
Remote release replacement can execute arbitrary code; user identity metadata is disclosed to a third-party Firestore project.
Mechanism
postinstall remote-binary staging plus login-time PII exfiltration
Attack narrative
On npm install, the package downloads a platform archive from GitHub Releases without a checksum or signature, extracts it into vendor, and its CLI later executes that native binary with inherited environment variables. Separately, the interactive OAuth login path uploads the authenticated GitHub username and email to a hard-coded Firebase project; this occurs regardless of the configuration telemetry flag.
AI rationale
Source establishes both an install-time unsigned executable supply chain and concrete user-identity disclosure. These are not merely scanner labels or dormant dependencies.
Evidence
package.jsonbin/install.jsbin/gitnest.jssrc/services/telemetry_service.rssrc/cli/handlers.rssrc/config/model.rsvendor
Network endpoints2
github.com/siranjeevan/GitNest/releases/download/v1.0.4/firestore.googleapis.com/v1/projects/projects-495f4/databases/(default)/documents/users/
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- package.json runs bin/install.js during postinstall.
- bin/install.js downloads and extracts an unsigned release archive, then makes its binary executable.
- src/services/telemetry_service.rs sends GitHub username and email to Firestore on login.
- src/cli/handlers.rs always calls track_user after OAuth login; the telemetry preference is not passed.
- The downloaded native binary is later spawned with the caller's environment by bin/gitnest.js.
Evidence against
- No source path sends the OAuth token or private SSH-key contents to Firestore.
- GitHub API calls and SSH-key registration are aligned with the stated Git identity CLI function.
- SSH-key import requires an interactive user selection.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node bin/install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg4scripts.postinstall = node bin/install.js
Install-time code downloads an unverified remote native archive, stages it locally, activates an executable path, and exposes it to process execution.
L4: const path = require('path');
L5: const https = require('https');
L6: const { execSync } = require('child_process');
...
L16: if (platform === 'darwin') {
L17: artifactName = arch === 'arm64' ? `gitnest-v${VERSION}-macos-arm64.tar.gz` : `gitnest-v${VERSION}-macos-x86_64.tar.gz`;
L18: } else if (platform === 'linux') {
L19: if (arch === 'x64') {
L20: artifactName = `gitnest-v${VERSION}-linux-x86_64.tar.gz`;
L21: } else {
...
L31:
L32: const downloadUrl = `https://github.com/${REPO}/releases/download/v${VERSION}/${artifactName}`;
L33: const binDir = path.join(__dirname, '..', 'vendor');
High
Unverified Remote Native Payload Install
Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L4•scripts.postinstall = node bin/install.js
Medium
Findings
6 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighHigh Secretsrc/config/model.rs
HighUnverified Remote Native Payload Installpackage.json
HighPrevious Version Dangerous Deltabin/install.js
HighSecret Patternsrc/config/model.rs
HighSecret Patternsrc/services/telemetry_service.rs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @siranjeevan/gitnest@1.0.4.
The versions list below shows the verdict for each recorded version.
- Avoid installing @siranjeevan/gitnest@1.0.4. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.