@socketsecurity/cli-with-sentry@1.1.176
CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe published package is a user-invoked Socket CLI without a registry install hook, but the Maven manifest path executes a binary jar that static inspection could not read. That opaque executable is an unresolved payload on a real command path, so the package is warned rather than marked clean or blocked.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a Socket CLI manifest command that selects Maven.
Impact
If the opaque jar contains unexpected code, it would run inside the user-invoked Maven process. No install-time compromise was shown.
Mechanism
dist/cli.js passes -Dmaven.ext.class.path to the local jar and invokes Maven validate. The jar bytes themselves were not inspectable.
AI rationale
The published package is a user-invoked Socket CLI without a registry install hook, but the Maven manifest path executes a binary jar that static inspection could not read. That opaque executable is an unresolved payload on a real command path, so the package is warned rather than marked clean or blocked.
Evidence
dist/cli.jsdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Decision evidence
public snapshotAI called this Suspicious at 66.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json version 1.1.176 exposes user bin commands and has no preinstall, install, or postinstall script.
- bin/cli.js starts the bundled CLI in a child process and preloads Sentry only when the Sentry build flag is set.
- dist/cli.js places coana-maven-extension.jar on maven.ext.class.path and runs Maven validate only from the user manifest command.
- dist/manifest-scripts/maven-extension/coana-maven-extension.jar is a binary file and could not be read as source, so the bytecode executed on that path is unverified.
- dist/vendor.js sets the Socket API base URL to https://api.socket.dev/v0.
- external/blessed/lib/tput.js defines the Blessed Tput terminal helper.
- external/@socketsecurity/registry/external/libnpmpack.js implements ordinary npm pack for a package spec.
Evidence against
- Registry install does not run a lifecycle hook, and the Maven jar is reached only after a user launches a manifest command.
- The surrounding CLI calls api.socket.dev and optional Sentry reporting, which matches the published Socket CLI product.
Behavioral surface
Source & flagged code
18 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Findings
3 Critical9 High8 Medium6 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
CriticalTrigger Reachable Dangerous Capabilitydist/vendor.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCommand Output Exfiltrationdist/vendor.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/vendor.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Affected versions and remediation
This report applies to @socketsecurity/cli-with-sentry@1.1.176.
See all versions of @socketsecurity/cli-with-sentry for other recorded verdicts.
- Review the evidence and your use of @socketsecurity/cli-with-sentry@1.1.176 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.