@socketsecurity/cli@1.1.176
CLI for Socket.dev
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo install-time attack or covert payload was established. However, the active login path conditionally forwards a prompted credential to an unrestricted configured endpoint, which is a real dangerous capability.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the interactive login command with a custom API base URL or has one configured.
Impact
An operator-controlled endpoint could receive the Socket token during SDK authentication.
Mechanism
Passes a prompted API token and URL-validated custom base URL to the Socket SDK.
AI rationale
No install-time attack or covert payload was established. However, the active login path conditionally forwards a prompted credential to an unrestricted configured endpoint, which is a real dangerous capability.
Evidence
dist/cli.jsdist/utils.js
Network endpoints1
api.socket.dev/v0/
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The login command accepts an arbitrary API server URL and prompts the user for a Socket API token.
- Configured environment or stored API base URLs only require URL syntax validation.
- The SDK is constructed with the token and the configured base URL, permitting conditional forwarding to that endpoint.
Evidence against
- The manifest exposes command-line binaries and has no preinstall, install, or postinstall lifecycle hook.
- The flagged terminal evaluator is part of bundled blessed terminal handling.
- The bundled npm fetcher removes authorization and cookies when redirects change hostname.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
18 flaggedbin/cli.jsView file
19L20: const spawnPromise = spawn(
L21: constants.execPath,
High
external/blessed/lib/tput.jsView file
1152if (this.options.stringify && code.indexOf('return ') === 0) {
L1153: return new Function('', code)();
L1154: }
High
Eval
Package source references dynamic code evaluation.
external/blessed/lib/tput.jsView on unpkg · L1152bin/npm-cli.jsView file
4void (async () => {
L5: const Module = require('node:module')
L6: const path = require('node:path')
Findings
3 Critical9 High8 Medium6 Low
CriticalCredential Exfiltrationexternal/@socketsecurity/registry/external/libnpmpack.js
CriticalTrigger Reachable Dangerous Capabilitydist/vendor.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/cli.js
HighShell
HighEvalexternal/blessed/lib/tput.js
HighCommand Output Exfiltrationdist/vendor.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/vendor.js
HighTrigger Reachable Persistencedist/cli.js
HighShips High Entropy Blobdist/manifest-scripts/maven-extension/coana-maven-extension.jar
Affected versions and remediation
This report applies to @socketsecurity/cli@1.1.176.
See all versions of @socketsecurity/cli for other recorded verdicts.
- Review the evidence and your use of @socketsecurity/cli@1.1.176 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.