registry / @stacksjs/actions / 0.75.460
@stacksjs/actions@0.75.460
The Stacks actions.
AI Security Review
scanned 22h ago · by lpm-firewall-aiThe package is not shown performing an automatic attack, but its exported SSL setup helper interpolates caller-controlled values into a shell command. This conditional command-injection risk warrants a warning.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A caller invokes `setupSSL` with a domain containing shell metacharacters, or with `SUDO_PASSWORD` containing shell metacharacters, and the helper attempts to update the hosts file.
Impact
A crafted domain or password value can cause unintended shell commands to run with the package caller's privileges.
Mechanism
Unescaped values are interpolated into a `sh -c` command that writes the hosts entry using sudo.
AI rationale
The package is not shown performing an automatic attack, but its exported SSL setup helper interpolates caller-controlled values into a shell command. This conditional command-injection risk warrants a warning.
Evidence
dist/setup/ssl.jsdist/setup/index.jsdist/index.js/etc/hosts~/.stacks/ssl
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- `setupSSL` takes its domain from `options.domain` or `APP_URL` and calls the hosts-file helper unless `skipHosts` is set.
- The helper interpolates `SUDO_PASSWORD` and the domain-derived hosts entry into a `sh -c` command without shell escaping.
- The SSL setup module is re-exported by the package entry point.
Evidence against
- The manifest shows only a `prepublishOnly` build hook; it does not show an install-time hook.
- The shell command is reached through the explicit SSL setup helper, rather than package import alone.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
15 flaggeddist/github-release.jsView file
5patternName = generic_password
severity = medium
line = 5
Medium
dist/lint/stx-gate.jsView file
1import{existsSync}from"node:fs";import{join}from"node:path";import process from"node:process";import{Glob}from"bun";export const DEFAULT_STX_LINT_CONFIG={stxGlob:"resources/**/*.st...
L2: `).forEach((line,i)=>{re.lastIndex=0;if(!re.test(line))return;if(ignore){ignore.lastIndex=0;if(ignore.test(line))return}hits.push(`${f}:${i+1} ${line.trim().slice(0,90)}`)})}retur...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/lint/stx-gate.jsView on unpkg · L1dist/discover-packages.jsView file
Findings
13 High5 Medium6 Low
HighCopied Package Dependency Bridgedist/discover-packages.js
HighSemantic Analysis Limiteddist/pantry-lock.js
HighKnown Malware Source Similaritydist/setup/ssl.js
HighKnown Malware Source Similaritydist/dev/system-tray.js
HighKnown Malware Source Similaritydist/upgrade/framework-utils.js
HighKnown Malware Source Similaritydist/upgrade/framework.js
HighKnown Malware Source Similaritydist/dev/dashboard-supervisor.js
HighKnown Malware Source Similaritydist/make.js
HighKnown Malware Source Similaritydist/pantry-toolchain.js
HighKnown Malware Source Similaritydist/release-notes.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @stacksjs/actions@0.75.460.
See all versions of @stacksjs/actions for other recorded verdicts.
- Review the evidence and your use of @stacksjs/actions@0.75.460 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.