Loading npm security reports…

@swirls/cli@0.1.119: Suspicious npm security report (Warn) | LPM Firewall

registry / @swirls/cli / 0.1.119

@swirls/cli@0.1.119

Swirls command line application

AI Security Review

scanned 29d ago · by lpm-firewall-ai

A global npm install automatically fetches a remote shell script and executes it. The remote script is outside the package artifact and can install arbitrary code before its binary is copied into the package bin directory.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Global npm or Bun installation that permits postinstall scripts on non-Windows, non-CI hosts.

Impact

Remote server-controlled code executes with the installing user's permissions.

Mechanism

Install-time remote shell download and execution

Rationale

This is a package-aligned CLI bootstrap, but it creates a real unauthenticated remote-code-execution supply-chain surface during postinstall. No source evidence establishes credential theft, persistence, or another concrete malicious objective.

Evidence

package.jsonscripts/install.jsbin/swirlsbin/README.txtREADME.md~/.local/bin/swirls

Network endpoints1

swirls.ai/install

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence with false-positive risk.

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

Critical

Download Execute

Source downloads or fetches remote code and executes it.

scripts/install.jsView on unpkg · L13

13Trigger-reachable chain: scripts.postinstall -> scripts/install.js L13: L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

scripts/install.jsView on unpkg · L13

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs'

High

Child Process

Package source references child process execution.

scripts/install.jsView on unpkg · L13

49stdio: 'inherit', L50: shell: true, L51: })

High

Shell

Package source references shell execution.

scripts/install.jsView on unpkg · L49

13L14: import { execSync } from 'node:child_process' L15: import { chmodSync, copyFileSync, existsSync } from 'node:fs' ... L18: L19: const INSTALL_URL = 'https://swirls.ai/install' L20: ... L28: const INSTALLED_BINARY = join( L29: process.env.HOME || process.env.USERPROFILE || '', L30: '.local', ... L36: L37: if (process.env.CI === 'true' || process.env.CI === '1') { L38: process.exit(0)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/install.jsView on unpkg · L13

•matchType = normalized_sha256 matchedPackage = @swirls/cli@0.1.118 matchedPath = scripts/install.js matchedIdentity = npm:QHN3aXJscy9jbGk:0.1.118 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/install.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 87fc30553c66ec35 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @swirls/cli@0.1.118 matchedPath = scripts/install.js matchedIdentity = npm:QHN3aXJscy9jbGk:0.1.118 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

scripts/install.jsView on unpkg