Loading npm security reports…

@solidnumber/cli@2.20.0: Malicious npm security report (Block) | LPM Firewall

registry / @solidnumber/cli / 2.20.0

@solidnumber/cli@2.20.0

Be There — the system that answers, books, and takes payment when you can't. CLI + SDK + MCP tools for SMBs, agencies, and AI agents. solid clone plumber → working business in 30 seconds.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

On the first normal CLI invocation, the package creates a persistent identifier and silently transmits it with platform metadata. Subsequent commands are retained locally and telemetry is correlated to that identifier.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

Running the solid executable, including help or other ordinary CLI use.

Impact

A vendor can correlate use of the CLI to a persistent installation identifier without an interactive consent step.

Mechanism

Silent device tracking and telemetry transmission.

Attack narrative

The executable unconditionally invokes first-run logic before command parsing. That logic writes a random machine identifier under the user home directory, then fire-and-forgets a POST containing the identifier, CLI version, and operating system to the vendor API. The same startup path records command invocations locally and sends telemetry events linked to the identifier. Although the package offers an environment-variable opt-out, it does not obtain consent before this tracking begins.

AI rationale

Source inspection confirms automatic, unprompted persistence and transmission of a unique installation identifier on ordinary CLI execution. The explicit agent configuration commands are secondary; the confirmed privacy-invasive telemetry is sufficient to block publication.

Evidence

dist/index.jsdist/lib/first-run.jsdist/lib/telemetry.js~/.solid/identity.json~/.solid/cli_history.json

Network endpoints1

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "try{if(!process.env.CI)console.log('\n Solid# CLI installed. Get started: solid setup\n')}catch(e){}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "try{if(!process.env.CI)console.log('\n Solid# CLI installed. Get started: solid setup\n')}catch(e){}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/lib/esm-import.jsView file

18*/ L19: const dynamicEsmImport = new Function('specifier', 'return import(specifier)'); L20: function importESM(specifier) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/lib/esm-import.jsView on unpkg · L18

dist/commands/completion.jsView file

9Trigger-reachable persistence chain: scripts.start -> dist/index.js -> dist/commands/completion.js L9: * L10: * Install: eval "$(solid completion)" in ~/.zshrc (or pipe to a file sourced L11: * by your shell — see the generated header comment). ... L183: const path = require('path'); L184: const shell = (process.env.SHELL || '').toLowerCase(); L185: const home = os.homedir(); L186: if (shell.includes('fish')) { ... L237: .description('Generate or install shell completion (reflects the live command tree)') L238: .option('--bash', 'Generate bash completion to stdout') L239: .option('--fish', 'Generate fish completion to stdout')

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/commands/completion.jsView on unpkg · L9

9* L10: * Install: eval "$(solid completion)" in ~/.zshrc (or pipe to a file sourced L11: * by your shell — see the generated header comment). ... L183: const path = require('path'); L184: const shell = (process.env.SHELL || '').toLowerCase(); L185: const home = os.homedir(); L186: if (shell.includes('fish')) { ... L237: .description('Generate or install shell completion (reflects the live command tree)') L238: .option('--bash', 'Generate bash completion to stdout') L239: .option('--fish', 'Generate fish completion to stdout')

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/completion.jsView on unpkg · L9

dist/lib/first-run.jsView file

56const telemetry_1 = require("./telemetry"); L57: const CONFIG_DIR = path.join(os.homedir(), '.solid'); L58: const IDENTITY_FILE = path.join(CONFIG_DIR, 'identity.json'); L59: function shouldSkip() { L60: if (process.env.SOLID_DISABLE_TELEMETRY === '1') L61: return true; L62: if (process.env.CI) L63: return true; ... L76: return null; L77: return JSON.parse(fs.readFileSync(IDENTITY_FILE, 'utf-8')); L78: } ... L99: function getApiBase() {

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

dist/lib/first-run.jsView on unpkg · L56

dist/commands/visual.jsView file

21exports.visualCommand = void 0; L22: const child_process_1 = require("child_process"); L23: const chalk_1 = __importDefault(require("chalk")); ... L26: if (host) { L27: return host.startsWith('http') ? host : `https://${host}`; L28: } ... L30: // fall back to prod. Local dev users: SOLID_WEB_URL=http://localhost:3000 L31: const env = process.env.SOLID_WEB_URL || L32: (process.env.SOLID_API_URL ? process.env.SOLID_API_URL.replace('//api.', '//app.') : ''); ... L35: function openInBrowser(url) { L36: const platform = process.platform; L37: const cmd = platform === 'darwin' ? 'open' : platform === 'win32' ? 'start ""' : 'xdg-open';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/commands/visual.jsView on unpkg · L21

dist/commands/install.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: nkeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createbinding(result, mod, k[i]); __setmoduledefault(result, mod); return result; }; })(); var __importdefault = (this && this.__importdefault) || function (mod) { return (mod && mod.__esmodule) ? mod : { "default": mod }; }; object.defineproperty(exports, "__esmodule", { value: true }); exports.installcommand = void 0;

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/install.jsView on unpkg

dist/commands/context.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. jsonldpath = path.join(writeres.librarydir, '..', 'solid-context.jsonld'); fs.writefilesync(jsonldpath, jsonlddoc); jsonldbytes = buffer.bytelength(jsonlddoc, 'utf-8'); } spinner?.succeed(chalk_1.default.green('ai context library ready')); printladdernextsteps(writeres, jsonpath, jsondoc ? buffer.bytelength(jsondoc, 'utf-8') : 0, jsonldpath, jsonldbytes); return; } catch (error) { spinner?.fail(chalk_1.default.red('failed to build ddc library')); console.error(chalk_1.

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/context.jsView on unpkg

dist/commands/agent.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/agent.js#virtual:normalized:round1View on unpkg

dist/commands/auth.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @solidnumber/cli@2.19.0 matchedIdentity = npm:QHNvbGlkbnVtYmVyL2NsaQ:2.19.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/auth.jsView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 28-68json

28 },

29 "scripts": {

30 "build": "tsc && node -e \"require('fs').cpSync('src/data','dist/data',{recursive:true})\"",

31 "postbuild": "ts-node scripts/generate-llms.ts",

32 "verify:llms": "ts-node scripts/generate-llms.ts --check",

33 "dev": "ts-node src/index.ts",

34 "start": "node dist/index.js",

35 "lint": "eslint src/**/*.ts",

36 "test": "jest --forceExit --detectOpenHandles",

37 "test:coverage": "jest --coverage --forceExit --detectOpenHandles",

38 "test:smoke": "jest --testPathPattern=integration --forceExit",

39 "test:contracts": "jest --testPathPattern='integration/(contracts|smoke|http-behavior)' --forceExit",

40 "test:security": "jest --testPathPattern=company-isolation --forceExit",

41 "verify:schemas": "ts-node scripts/verify-schemas.ts",

42 "audit": "npm audit --audit-level=high",

43 "audit:prod": "npm audit --omit=dev --audit-level=high",

44 "prepublish:check": "bash scripts/prepublish.sh",

45 "test:tarball": "bash scripts/test-tarball.sh",

46 "verify:deps": "node scripts/verify-runtime-deps.mjs",

47 "prepublishOnly": "npm run build && npm test && npm run test:contracts && npm run test:security && npm run audit:prod && npm run verify:deps && npm run check:counts",

48 "postinstall": "node -e \"try{if(!process.env.CI)console.log('\\n Solid# CLI installed. Get started: solid setup\\n')}catch(e){}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L48

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

49 "sync:counts": "ts-node scripts/sync-counts.ts",

50 "check:counts": "ts-node scripts/sync-counts.ts --check"

51 },

52 "keywords": [

53 "cli",

54 "ai",

55 "crm",

56 "business",

57 "saas",

58 "mcp",

59 "ai-agents",

60 "voice-ai",

61 "multi-tenant",

62 "payments",

63 "small-business",

64 "agency",

65 "white-label",

66 "plumber",

67 "hvac",

68 "dentist",

dist/lib/esm-import.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.importESM = importESM;

4/**

5 * Import an ESM-only package from this CommonJS bundle.

6 *

7 * The CLI compiles with `module: CommonJS`, under which tsc rewrites a plain

dist/commands/completion.jsView file

Lines 1-29javascript

1"use strict";

2/**

3 * Shell completion for Solid CLI — generated dynamically from the live

4 * commander tree, so completions never drift from the registered commands.

5 *

6 * solid completion → zsh (default)

7 * solid completion --bash → bash

8 * solid completion --fish → fish

9 *

10 * Install: eval "$(solid completion)" in ~/.zshrc (or pipe to a file sourced

dist/lib/first-run.jsView file

Lines 36-76javascript

36 return ar;

37 };

38 return ownKeys(o);

39 };

40 return function (mod) {

41 if (mod &&

dist/commands/visual.jsView file

Lines 1-41javascript

1"use strict";

2/**

3 * ================================================================================

4 * solid visual — Open the Visual Canvas in the browser

5 * ================================================================================

6 *

7 * Convenience command that opens /dashboard/cms/visual directly. Pair with

8 * `solid login` (session) so the browser lands authenticated and the canvas

9 * auto-selects the user's pages.

10 *

dist/commands/install.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: nkeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createbinding(result, mod, k[i]); __setmoduledefault(result, mod); return result; }; })(); var __importdefault = (this && this.__importdefault) || function (mod) { return (mod && mod.__esmodule) ? mod : { "default": mod }; }; object.defineproperty(exports, "__esmodule", { value: true }); exports.installcommand = void 0;

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/install.jsView on unpkg

dist/commands/context.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. jsonldpath = path.join(writeres.librarydir, '..', 'solid-context.jsonld'); fs.writefilesync(jsonldpath, jsonlddoc); jsonldbytes = buffer.bytelength(jsonlddoc, 'utf-8'); } spinner?.succeed(chalk_1.default.green('ai context library ready')); printladdernextsteps(writeres, jsonpath, jsondoc ? buffer.bytelength(jsondoc, 'utf-8') : 0, jsonldpath, jsonldbytes); return; } catch (error) { spinner?.fail(chalk_1.default.red('failed to build ddc library')); console.error(chalk_1.

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/context.jsView on unpkg

dist/commands/agent.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/commands/agent.js#virtual:normalized:round1View on unpkg

dist/commands/auth.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @solidnumber/cli@2.19.0 matchedIdentity = npm:QHNvbGlkbnVtYmVyL2NsaQ:2.19.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/auth.jsView on unpkg