registry / @socketsecurity/cli-with-sentry / 1.9.1
@socketsecurity/cli-with-sentry@1.9.1
⚠ Under reviewCLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected CLI and telemetry paths do not establish malicious behavior, and the credential-related match is consistent with runner-directed Sigstore token retrieval. The packaged Maven extension binary could not be resolved from source, so manual review is needed.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Unknown; the binary artifact’s behavior could not be inspected.
Impact
Unknown because the binary’s behavior could not be determined.
Mechanism
No attack mechanism was confirmed; the unresolved artifact is dist/manifest-scripts/maven-extension/coana-maven-extension.jar.
AI rationale
The inspected CLI and telemetry paths do not establish malicious behavior, and the credential-related match is consistent with runner-directed Sigstore token retrieval. The packaged Maven extension binary could not be resolved from source, so manual review is needed.
Evidence
dist/manifest-scripts/maven-extension/coana-maven-extension.jar
Decision evidence
public snapshotAI called this Manual Review at 69.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The CLI wrapper starts the packaged CLI with the caller’s arguments.
- CLI telemetry is conditional on a configured default organization, and its context uses sanitized arguments.
- The flagged bundled helper obtains a GitHub Actions token only when runner-provided URL and token variables are present.
- The Maven extension artifact could not be inspected as source, leaving its behavior unresolved.
Evidence against
- The credential-related scanner match is consistent with a bundled Sigstore CI identity provider that uses GitHub Actions’ supplied token endpoint; it does not establish an unrelated recipient or credential theft.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
18 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Findings
3 Critical9 High8 Medium6 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
CriticalTrigger Reachable Dangerous Capabilitydist/vendor.js
CriticalPrevious Version Dangerous Deltadist/utils.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCommand Output Exfiltrationdist/vendor.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/vendor.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Affected versions and remediation
This report applies to @socketsecurity/cli-with-sentry@1.9.1.
See all versions of @socketsecurity/cli-with-sentry for other recorded verdicts.
- Review the evidence and your use of @socketsecurity/cli-with-sentry@1.9.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.