@su-record/vibe@3.2.41

⚠ Under review

AI Coding Framework for Claude Code — 7+ agents, 52 skills, multi-LLM orchestration

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 26 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 277 file(s), 1.69 MB of source, external domains: anthropic.com, api.anthropic.com, api.example.com, api.figma.com, api.openai.com, api.slack.com, api.telegram.org, api.z.ai, auth.openai.com, chatgpt.com, console.anthropic.com, generativelanguage.googleapis.com, github.com, nodejs.org, platform.openai.com, raw.githubusercontent.com, registry.npmjs.org, www.w3.org, z.ai

Source & flagged code

18 flagged

package.jsonView file

Lines 16-56json

16 "types": "./dist/infra/lib/memory/index.d.ts",

17 "default": "./dist/infra/lib/memory/index.js"

18 }

19 },

20 "bin": {

21 "vibe": "dist/cli/index.js"

22 },

23 "scripts": {

24 "build": "tsc -p tsconfig.build.json && chmod +x dist/cli/index.js",

25 "dev": "tsc --watch",

26 "gen:skill-docs": "npx tsx scripts/gen-skill-docs.ts",

27 "gen:skill-docs:check": "npx tsx scripts/gen-skill-docs.ts --check",

28 "sync:agent-models": "npx tsx scripts/sync-agent-models.ts",

29 "sync:agent-models:check": "npx tsx scripts/sync-agent-models.ts --check",

30 "validate:skill-invocation": "npx tsx scripts/validate-skill-invocation.ts",

31 "validate:counts": "npx tsx scripts/validate-counts.ts",

32 "test": "vitest run",

33 "test:watch": "vitest",

34 "test:coverage": "vitest run --coverage",

35 "prepublishOnly": "pnpm build",

36 "postinstall": "node -e \"import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(e=>process.stderr.write('\\u26a0\\ufe0f vibe postinstall skipped: '+((e&&e.message)||e)+'\\n Assets and hooks were not installed. Run: npx vibe upgrade\\n'))\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L36

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

37 "release": "bash scripts/release.sh",

38 "sync:plugin-version": "npx tsx scripts/sync-plugin-version.ts",

39 "version": "npx tsx scripts/sync-plugin-version.ts && git add .codex-plugin/plugin.json",

40 "build:plugin": "npx tsx scripts/build-plugin.ts",

41 "gen:plugin-hooks": "npx tsx scripts/gen-plugin-hooks.ts",

42 "gen:plugin-hooks:check": "npx tsx scripts/gen-plugin-hooks.ts --check",

43 "validate:plugin-tree": "npx tsx scripts/build-plugin.ts && git diff --exit-code --stat HEAD -- plugins/"

44 },

45 "keywords": [

46 "ai",

47 "core",

48 "coding",

49 "spec-driven",

50 "claude",

51 "agent",

52 "requirements",

53 "user-story",

54 "ultrawork",

55 "parallel-agents",

56 "memory-management",

dist/infra/lib/TaskContext.jsView file

Lines 6-46javascript

6// ============================================================================

7// TaskContext (static registry)

8// ============================================================================

9export class TaskContext {

10 static registry = new Map();

dist/infra/lib/PythonParser.jsView file

Lines 1-28javascript

1// Python code parser utility for v1.3

2// Uses Python's ast module via child_process

3import { exec } from 'child_process';

4import { promisify } from 'util';

5import { writeFile, unlink } from 'fs/promises';

dist/tools/convention/applyQualityRules.jsView file

Lines 1-41javascript

1// Convention management tool - completely independent

2// Code Quality Standards

3const QUALITY_RULES = {

4 NAMING: {

5 variables: 'nouns (userList, userData)',

6 functions: 'verb+noun (fetchData, updateUser)',

7 events: 'handle prefix (handleClick, handleSubmit)'

dist/infra/lib/MemoryManager.jsView file

Lines 13-53javascript

13 storage;

14 graph;

15 memorySearch;

16 observations;

17 sessionRAG;

18 ragRetriever;

19 reflections;

20 // Map of projectPath -> MemoryManager instance (for project-based memory)

21 static instances = new Map

dist/cli/commands/codex-proxy.jsView file

Lines 13-53javascript

13 'codex-cli': 'Codex CLI (ChatGPT Pro)',

14 'apikey': 'API Key',

15 'env': 'CODEX_PROXY_API_KEY',

16};

17// ─── 실행 ────────────────────────────────────────────────────

18export function

dist/infra/lib/codex-proxy.jsView file

Lines 892-932javascript

892 // Sonnet → codex 코딩 모델 (spark 제외, 정확도 우선)

893 const codexModel = models.find(m => m.includes('codex') && !m.includes('mini'

hooks/scripts/llm-orchestrate.jsView file

33Source sends the broad process environment to a literal external destination. L33: import crypto from 'crypto'; L34: import { execSync, spawn } from 'child_process'; L35: ... L46: // 낮춰 부모 dispatcher timeout 안에 단일 시도로 끝낸다. (B-2: hard-kill/무음실패 방지) L47: const MAX_RETRIES = Number(process.env.VIBE_LLM_MAX_RETRIES) || 3; L48: // WHY 2000ms initial delay: LLM rate-limit windows are typically 1-5s; ... L215: function spawnCli(cmd, args, options) { L216: // Windows: .cmd shim은 spawn 직접 실행 불가 → cmd.exe /c 로 실행 L217: if (IS_WINDOWS) { ... L251: }); L252: proc.stdin.end(fullPrompt); L253:

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

hooks/scripts/llm-orchestrate.jsView on unpkg · L33

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.40 matchedPath = hooks/scripts/llm-orchestrate.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.40 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/llm-orchestrate.jsView on unpkg

dist/cli/postinstall/global-config.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. t.entries(envvars)) { if (!env[key]) { env[key] = value; changed = true; count++; } } if (changed) { fs.writefilesync(globalsettingspath, json.stringify(settings, null, 2) + '\n'); console.log(` ✓ injected ${count} env defaults to settings.json`); } } catch (e) { const message = e instanceof error ? e.message : string(e); console.warn(' ⚠️ failed to inject env defaults: ' + message); } }

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli/postinstall/global-config.jsView on unpkg

dist/cli/commands/telegram.jsView file

100try { L101: child_process.execSync('npm install playwright', { L102: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/telegram.jsView on unpkg · L100

vibe/setup.shView file

•path = vibe/setup.sh kind = build_helper sizeBytes = 837 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vibe/setup.shView on unpkg

dist/cli/utils/cli-detector.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.40 matchedPath = dist/cli/utils/cli-detector.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.40 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/utils/cli-detector.jsView on unpkg

hooks/scripts/auto-format.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.40 matchedPath = hooks/scripts/auto-format.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.40 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/auto-format.jsView on unpkg

hooks/scripts/utils.jsView file

•matchType = normalized_sha256 matchedPackage = @su-record/vibe@3.2.40 matchedPath = hooks/scripts/utils.js matchedIdentity = npm:QHN1LXJlY29yZC92aWJl:3.2.40 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/scripts/utils.jsView on unpkg

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "import('./dist/cli/postinstall/main.js').then(m=>m.main()).catch(e=>process.stderr.write('\u26a0\ufe0f vibe postinstall skipped: '+((e&&e.message)||e)+'\n Assets and ho...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/infra/lib/TaskContext.jsView file

26} L27: static fork(parentContext, forkOpts) { L28: const data = {

High

Child Process

Package source references child process execution.

Findings

2 Critical12 High6 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

CriticalHardcoded Runtime Data Exfiltrationhooks/scripts/llm-orchestrate.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/infra/lib/TaskContext.js

HighShelldist/infra/lib/PythonParser.js

HighSame File Env Network Executiondist/infra/lib/codex-proxy.js

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/cli/postinstall/global-config.js

HighTrigger Reachable Persistencedist/cli/commands/codex-proxy.js

HighRuntime Package Installdist/cli/commands/telegram.js

HighKnown Malware Source Similarityhooks/scripts/llm-orchestrate.js

Affected versions and remediation

This report applies to @su-record/vibe@3.2.41.

See all versions of @su-record/vibe for other recorded verdicts.

Review the evidence and your use of @su-record/vibe@3.2.41 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-19 20:32:43.219Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.