registry / @socketsecurity/cli / 1.1.154
@socketsecurity/cli@1.1.154
CLI for Socket.dev
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection shows no npm lifecycle execution and no concrete malicious chain. Scanner hits map to expected CLI functionality, vendored terminal code, and a structured Maven extension archive.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User invokes a Socket CLI command; completion writes require `socket install completion`.
Impact
No unconsented install-time execution or confirmed exfiltration/persistence chain.
Mechanism
User-invoked security CLI, subprocess wrapper, and optional bash completion setup.
AI rationale
Source inspection shows no npm lifecycle execution and no concrete malicious chain. Scanner hits map to expected CLI functionality, vendored terminal code, and a structured Maven extension archive.
Evidence
package.jsonbin/cli.jsdist/cli.jsexternal/@socketsecurity/registry/lib/spawn.jsexternal/blessed/lib/tput.jsdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/cli.js has an explicit `socket install completion` command that writes its completion file and may append to ~/.bashrc.
- dist/cli.js can download GitHub manifest files only within an invoked repository-scan workflow.
- bin/cli.js launches the packaged CLI as a child process.
Evidence against
- package.json has no preinstall, install, postinstall, prepare, or uninstall lifecycle hook.
- bin/cli.js only runs when a CLI bin is invoked and forwards user arguments to dist/cli.js.
- Completion mutation is documented and gated behind the explicit `socket install completion` command.
- The flagged eval is in vendored terminal library external/blessed/lib/tput.js, not an install-time payload.
- The JAR is a named Maven extension archive with inspectable Coana/Maven classes, not a hidden executable payload.
- No source evidence of credential harvesting, stealth persistence, or foreign AI-agent control-surface mutation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
13 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Findings
1 Critical6 High8 Medium7 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
MediumDynamic Requirebin/npm-cli.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli.js
MediumShips Build Helperdist/socket-completion.bash
MediumShips Compressed Blob
Affected versions and remediation
This report applies to @socketsecurity/cli@1.1.154.
See all versions of @socketsecurity/cli for other recorded verdicts.
- Review the evidence and your use of @socketsecurity/cli@1.1.154 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.