@superblocksteam/cli@2.0.172
Official Superblocks CLI
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe source shows a same-product cleanup hook, not credential redirection or another confirmed attack. Because noninteractive input can approve removal of older installations, warn about this install-time destructive capability.
Static reason
One or more suspicious static signals were detected.
Trigger
A global npm install runs the package preinstall hook; ordinary local installs skip the conflict scan.
Impact
A noninteractive install can delete another installation of the same CLI, including an older OCLIF installation.
Mechanism
The hook finds other Superblocks CLI binaries, asks whether to remove conflicting installations, treats an empty answer as approval, and executes shell removal commands.
AI rationale
The source shows a same-product cleanup hook, not credential redirection or another confirmed attack. Because noninteractive input can approve removal of older installations, warn about this install-time destructive capability.
Evidence
package.jsonscripts/customer/preinstall.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package manifest runs scripts/customer/preinstall.js during preinstall.
- The script skips its conflict scan for ordinary local installs and runs it for global installs.
- For conflicting CLI installs, the hook asks whether to remove them; an empty response counts as yes.
- On approval, it executes removal commands, including sudo removal of an older OCLIF Superblocks installation.
- The flagged OAuth configuration uses Superblocks’ first-party login issuer and audience.
Evidence against
- The cleanup targets earlier Superblocks CLI installations, and the hook displays the proposed removal commands before prompting.
- The inspected OAuth configuration does not show a credential redirect to an unofficial gateway.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
15 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/customer/preinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/customer/preinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/chunk-U7OPU5S5.jsView file
25exports.execAsync = void 0;
L26: var child_process = __require("child_process");
L27: var util = __require("util");
High
Child Process
Package source references child process execution.
dist/chunk-U7OPU5S5.jsView on unpkg · L25Findings
10 High7 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/chunk-U7OPU5S5.js
HighShelldist/index.js
HighHost Fingerprint Exfiltrationdist/chunk-RZSSE3AU.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/chunk-RZSSE3AU.js
HighSandbox Evasion Gated Capabilityscripts/verify-ripgrep-package.mjs
HighCross File Remote Execution Contextdist/chunk-RZSSE3AU.js
HighTrigger Reachable External Post Callbackdist/chunk-RZSSE3AU.js
HighSemantic Analysis Limiteddist/chunk-RZSSE3AU.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to @superblocksteam/cli@2.0.172.
See all versions of @superblocksteam/cli for other recorded verdicts.
- Review the evidence and your use of @superblocksteam/cli@2.0.172 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.