registry / @specship/specship-win32-arm64 / 0.18.0

@specship/specship-win32-arm64@0.18.0

SpecShip self-contained bundle for win32-arm64

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The CLI is a first-party Claude Code extension installer. A user invocation can configure an MCP server and, with auto-allow enabled, install SpecShip-specific permissions and hooks. No unconsented npm install-time mutation or malicious payload was confirmed.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `specship`, `specship install`, or `specship update`.

Impact

Adds a package-owned Claude Code integration that can run SpecShip synchronization hooks; the configuration surface warrants a warning but is not a confirmed malicious chain.

Mechanism

User-invoked MCP configuration, optional Claude hooks, and explicit self-update spawning.

Rationale

Static source inspection does not support a malicious verdict: the npm root has no lifecycle hooks and no confirmed exfiltration or covert execution chain. Because the package provides user-invoked Claude Code MCP, permission, and hook setup, it should be warned as an agent-extension lifecycle risk.

Evidence

package.jsonbin/specship.cmdlib/package.jsonlib/dist/bin/specship.jslib/dist/installer/targets/claude.jslib/dist/update/run-installer.jslib/dist/update/resolve-latest.jsnode.exe~/.claude.json~/.claude/settings.json./.mcp.json./.claude/settings.json

Network endpoints3

registry.npmjs.org/@specship/specshipgithub.com/selvakumarEsra/specship/releases/latestraw.githubusercontent.com/selvakumarEsra/specship/main/install.sh

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`bin/specship.cmd` launches bundled `node.exe` and CLI code.
`lib/dist/bin/specship.js` runs the installer when invoked with no arguments.
`lib/dist/installer/targets/claude.js` writes a SpecShip MCP entry, optional permissions, and hooks into Claude Code config.
`--yes` enables local auto-allow and hook setup; installation is user-invoked.
`lib/dist/update/run-installer.js` can spawn npm or the package's documented bundle updater from `specship update`.

Evidence against

Root `package.json` has no install or lifecycle scripts.
Nested `lib/package.json` preuninstall is not the npm package root lifecycle manifest.
Claude configuration changes are scoped to SpecShip entries and removal routines are surgical.
No credential harvesting, covert exfiltration, destructive payload, or remote code execution chain was confirmed.
Update network requests target the npm registry or the project GitHub release endpoint and require `specship update`.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 224 file(s), 3.07 MB of source, external domains: 127.0.0.1, acme.atlassian.net, claude.ai, cli.github.com, docs.claude.com, github.com, raw.githubusercontent.com, reactjs.org, registry.npmjs.org, www.w3.org

Source & flagged code

10 flagged

lib/dist/update/run-installer.jsView file

Lines 1-32javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.installerCommand = installerCommand;

4exports.runInstaller = runInstaller;

5/**

6 * The real installer adapter for `specship update` (REQ-CLI-UPDATE-002).

7 *

8 * `installerCommand` is pure (built + tested here); `runInstaller` is the thin

9 * spawn wrapper the CLI drives. A non-zero exit rejects, which `runUpdate`

10 * surfaces as a clean failure that leaves the existing install intact

11 * (REQ-CLI-UPDATE-004.A2).

12 */

13const node_child_process_1 = require("node:child_process");

14const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

15function installerCommand(method, env) {

16 if (method === 'npm') {

17 return { command: 'npm', args: ['i', '-g', '@specship/specship@latest'], extraEnv: {} };

18 }

19 // bundle: re-run install.sh, threading the existing install/bin dirs through

20 // so the update lands exactly where the original install did.

21 return {

22 command: 'sh',

23 args: ['-c', updater_1.BUNDLE_INSTALL_CMD],

24 extraEnv: { SPECSHIP_INSTALL_DIR: env.installDir, SPECSHIP_BIN_DIR: env.binDir },

25 };

26}

27function runInstaller(method, env) {

28 const { command, args, extraEnv } = installerCommand(method, env);

29 return new Promise((resolve, reject) => {

30 const child = (0, node_child_process_1.spawn)(command, args, {

31 stdio: 'inherit',

32 env: { ...process.env, ...extraEnv },

lib/dist/bin/specship.jsView file

Lines 230-270javascript

230 const files = fs.readdirSync(path.join(claudeRoot, slug), { withFileTypes: true });

231 for (const f of files) {

232 if (!f.isFile() || !f.name.toLowerCase().

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 108-148javascript

108 // only have one target to write.

109 if (opts.target !== undefined

110 && !['claude', 'auto', 'all'].includes(opts.target)) {

111 throw new Error(`Unknown --target value "${opts.target

node.exeView file

•path = node.exe kind = native_binary sizeBytes = 81025864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node.exeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

bin/specship.cmdView file

•path = bin/specship.cmd kind = build_helper sizeBytes = 74 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/specship.cmdView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg

Source & flagged code

10 flagged · loading source

lib/dist/update/run-installer.jsView file

12*/ L13: const node_child_process_1 = require("node:child_process"); L14: const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

lib/dist/bin/specship.jsView file

250// eslint-disable-next-line @typescript-eslint/no-implied-eval L251: const importESM = new Function('specifier', 'return import(specifier)'); L252: // Block SpecShip on Node.js 25.x — V8's turboshaft WASM JIT has a Zone

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/dist/bin/specship.jsView on unpkg · L250

lib/dist/ui/shimmer-worker.jsView file

2Object.defineProperty(exports, "__esModule", { value: true }); L3: const worker_threads_1 = require("worker_threads"); L4: const fs_1 = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/dist/ui/shimmer-worker.jsView on unpkg · L2

lib/dist/designer/cdp-ensure.jsView file

9const node_path_1 = __importDefault(require("node:path")); L10: const node_child_process_1 = require("node:child_process"); L11: const cross_platform_1 = require("./cross-platform"); L12: const cdp_env_1 = require("./cdp-env"); L13: const PORT = process.env.DESIGNER_CDP || '9222'; L14: const PROFILE = node_path_1.default.join(node_os_1.default.homedir(), '.chrome-designer-profile'); ... L17: try { L18: const res = await fetch(`http://127.0.0.1:${PORT}/json/version`, { signal: AbortSignal.timeout(1500) }); L19: return res.ok;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/dist/designer/cdp-ensure.jsView on unpkg · L9

lib/dist/installer/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @specship/specship-win32-arm64@0.17.0 matchedIdentity = npm:[redacted]:0.17.0 similarity = 0.942 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/dist/installer/index.jsView on unpkg

128try { L129: (0, child_process_1.execSync)('npm install -g @specship/specship', { stdio: 'pipe', windowsHide: true }); L130: s.stop('Installed specship CLI on PATH');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/dist/installer/index.jsView on unpkg · L128

node.exeView file

•path = node.exe kind = native_binary sizeBytes = 81025864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node.exeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

bin/specship.cmdView file

•path = bin/specship.cmd kind = build_helper sizeBytes = 74 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/specship.cmdView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg

Findings

1 Critical5 High7 Medium4 Low

CriticalPrevious Version Dangerous Deltalib/dist/installer/index.js

HighChild Processlib/dist/update/run-installer.js

HighShell

HighSame File Env Network Executionlib/dist/designer/cdp-ensure.js

HighRuntime Package Installlib/dist/installer/index.js

HighShips High Entropy Bloblib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2

MediumDynamic Requirelib/dist/ui/shimmer-worker.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarynode.exe

MediumShips Wasm Modulelib/dist/extraction/wasm/tree-sitter-scala.wasm

MediumShips Build Helperbin/specship.cmd

MediumStructural Risk Force Deep Review

LowEvallib/dist/bin/specship.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

lib/dist/update/run-installer.jsView file

Lines 1-32javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.installerCommand = installerCommand;

4exports.runInstaller = runInstaller;

5/**

6 * The real installer adapter for `specship update` (REQ-CLI-UPDATE-002).

7 *

8 * `installerCommand` is pure (built + tested here); `runInstaller` is the thin

9 * spawn wrapper the CLI drives. A non-zero exit rejects, which `runUpdate`

10 * surfaces as a clean failure that leaves the existing install intact

11 * (REQ-CLI-UPDATE-004.A2).

12 */

13const node_child_process_1 = require("node:child_process");

14const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

15function installerCommand(method, env) {

16 if (method === 'npm') {

17 return { command: 'npm', args: ['i', '-g', '@specship/specship@latest'], extraEnv: {} };

18 }

19 // bundle: re-run install.sh, threading the existing install/bin dirs through

20 // so the update lands exactly where the original install did.

21 return {

22 command: 'sh',

23 args: ['-c', updater_1.BUNDLE_INSTALL_CMD],

24 extraEnv: { SPECSHIP_INSTALL_DIR: env.installDir, SPECSHIP_BIN_DIR: env.binDir },

25 };

26}

27function runInstaller(method, env) {

28 const { command, args, extraEnv } = installerCommand(method, env);

29 return new Promise((resolve, reject) => {

30 const child = (0, node_child_process_1.spawn)(command, args, {

31 stdio: 'inherit',

32 env: { ...process.env, ...extraEnv },

lib/dist/bin/specship.jsView file

Lines 230-270javascript

230 const files = fs.readdirSync(path.join(claudeRoot, slug), { withFileTypes: true });

231 for (const f of files) {

232 if (!f.isFile() || !f.name.toLowerCase().

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 108-148javascript

108 // only have one target to write.

109 if (opts.target !== undefined

110 && !['claude', 'auto', 'all'].includes(opts.target)) {

111 throw new Error(`Unknown --target value "${opts.target

node.exeView file

•path = node.exe kind = native_binary sizeBytes = 81025864 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

node.exeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

bin/specship.cmdView file

•path = bin/specship.cmd kind = build_helper sizeBytes = 74 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/specship.cmdView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg