registry / @socketsecurity/cli-with-sentry / 1.8.4
@socketsecurity/cli-with-sentry@1.8.4
CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected credential-handling code strips credentials across hostname-changing redirects. Scanner flags correspond to bundled CLI dependencies and user-invoked functionality; no concrete attack behavior was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs one of the package’s CLI commands; Maven extension use occurs during an explicit Maven analysis command.
Impact
No unauthorized credential disclosure or install-time mutation was established.
Mechanism
The CLI forwards its arguments to the bundled program. The registry helper strips authorization and cookie headers on cross-host redirects; the terminal code compiles terminal capability strings.
AI rationale
The manifest has no install lifecycle hook, and the inspected credential-handling code strips credentials across hostname-changing redirects. Scanner flags correspond to bundled CLI dependencies and user-invoked functionality; no concrete attack behavior was established.
Evidence
package.jsonbin/cli.jsdist/cli.jsdist/vendor.jsexternal/@socketsecurity/registry/external/libnpmpack.jsexternal/@socketsecurity/registry/external/cacache.jsexternal/@socketsecurity/registry/external/@npmcli/package-json/index.jsexternal/@socketsecurity/registry/external/make-fetch-happen.jsexternal/@socketsecurity/registry/external/pacote.jsexternal/@socketsecurity/registry/external/browserslist.jsexternal/blessed/lib/tput.js.lpm-inspection-AHVUMW/0-8429ffbee965.txt
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes CLI binaries and declares no install lifecycle hook.
- The launcher starts the bundled CLI and forwards the caller’s arguments.
- The bundled registry client removes authorization and cookie headers when a redirect changes hostname.
- Flagged registry files contain bundled package, cache, and HTTP tooling; the browser-list file contains data and lookup code.
- The terminal capability code compiles terminal descriptions for display handling.
- The Maven extension is used by an explicit Maven command; its inspected artifact is a ZIP, with no install-time activation identified.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
17 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Findings
2 Critical9 High8 Medium6 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
CriticalTrigger Reachable Dangerous Capabilitydist/vendor.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCommand Output Exfiltrationdist/vendor.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/vendor.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
HighSemantic Analysis Limiteddist/vendor.js
Medium
Affected versions and remediation
This report applies to @socketsecurity/cli-with-sentry@1.8.4.
See all versions of @socketsecurity/cli-with-sentry for other recorded verdicts.
- Review the evidence and your use of @socketsecurity/cli-with-sentry@1.8.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.