@socketsecurity/cli@1.1.163
CLI for Socket.dev
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo automatic install-time attack or concrete exfiltration was found, but the package deliberately executes an opaque bundled Java extension in consumer Maven projects. This is a real unresolved runtime capability, so a warning is appropriate rather than a clean or blocking verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running the CLI's Maven manifest or workspace analysis command.
Impact
The extension executes inside the consumer project's Maven process and may inspect project metadata or files.
Mechanism
Loads a bundled Maven extension through maven.ext.class.path.
AI rationale
No automatic install-time attack or concrete exfiltration was found, but the package deliberately executes an opaque bundled Java extension in consumer Maven projects. This is a real unresolved runtime capability, so a warning is appropriate rather than a clean or blocking verdict.
Evidence
dist/cli.jsdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Decision evidence
public snapshotAI called this Suspicious at 67.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI bundles opaque Java bytecode and explicitly passes it to Maven as an extension during a user-invoked manifest operation.
- The command launcher starts the bundled CLI in a child process with the caller's environment.
- The package contains dynamic Function construction in bundled terminal-support code.
- The published manifest has command entry points but no install lifecycle hook.
Evidence against
- No preinstall, install, or postinstall script is present.
- The Java extension is activated only through a CLI operation, not automatically on package installation.
- The inspected Java archive manifest contains ordinary Maven build metadata and no network configuration.
- The flagged URL-building code is a bundled dependency utility, not evidence of credential exfiltration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork
Source & flagged code
18 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Findings
3 Critical9 High8 Medium6 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
CriticalTrigger Reachable Dangerous Capabilitydist/vendor.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCommand Output Exfiltrationdist/vendor.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/vendor.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Affected versions and remediation
This report applies to @socketsecurity/cli@1.1.163.
See all versions of @socketsecurity/cli for other recorded verdicts.
- Review the evidence and your use of @socketsecurity/cli@1.1.163 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.